Operationalizing Privacy-by-Design for New Products with Jodi and Justin Daniels

Partially Redacted: Data, AI, Security, and Privacy

Partially Redacted: Data, AI, Security, and Privacy

45:16

What happens when photography becomes a tool for social change rather than just documentation? In this episode, Michael Dooney speaks with acclaimed British photographer and artist Mark Neville about his journey from art school to the front-lines of conflict, and how he uses collaborative photography projects to empower communities, challenge social norms, and effect real-world impact. Neville shares stories from his time as an official war artist in Afghanistan, discusses the making of influential projects like The Port Glasgow Book Project and Stop Tanks With Books , and reflects on his ongoing work in Ukraine. Listeners will gain insights into the ethics of documentary practice, the power of art as activism, and what it means to make photography for—and with—the people it represents. Timestamps (00:00) – Introduction and welcome (01:49) – Artist and photographer living and working in the Ukraine (04:54) – The Port Glasgow Book Project: Art for the community (08:04) – Getting attention of the art world (12:00) – Turning point towards a social engaged artistic practice (14:42) – Stop Tanks with Books Project: Art as activism in Ukraine (17:56) – Russian invasion of Ukriane (20:55) – Postcode Ukraine Charity (25:06) – War Artist in Helmand, Afghanistan (27:33) – Battle Against Stigma, book project (33:34) – Invitation to start making work in Ukraine (34:54) – Diary of a Volunteer, book project (37:51) – Individual experiences of Postcard Ukraine charity members (39:48) – Support for Ukrainian people (42:06) – How can listeners learn more and get involved? Mark Neville (b. 1966, London) is a British artist and photographer renowned for his socially engaged practice at the intersection of art, documentary, and activism. His projects often involve close collaboration with communities, aiming to empower subjects and address issues such as inequality, mental health, and conflict. Notable works include The Port Glasgow Book Project , Battle Against Stigma , Fancy Pictures , and Stop Tanks With Books . Neville has exhibited internationally, worked as an official war artist in Afghanistan, and was nominated for the Pulitzer Prize by The New York Times in 2012. Mark Neville official website: https://www.markneville.com/ Instagram page: https://www.instagram.com/marknevillestudio/ Postcode Ukraine: https://www.postcodeukraine.com/ This episode of Subtext & Discourse Art World Podcast was recorded on 28. March 2025 between Perth (AU) and Ukraine with Riverside . Michael Dooney official website: https://www.michaeldooney.net Instagram page: https://www.instagram.com/michaeldooney/…

2 years ago 47:08

MP3•Episode home

In the podcast episode Jodi Daniels, Founder & CEO of Red Clover Advisors, and Justin Daniels, Legal and Corporate Counsel at Baker Donelson, share valuable insights on privacy and security considerations in product development. They discuss the common mistakes made and the crucial questions to ask when designing new products, emphasizing the need for proactive data protection.

Jodi and Justin delve into core principles and best practices for integrating privacy-by-design, highlight the risks of neglecting privacy and security during product development, and explore ways to balance innovation and functionality with privacy and data protection requirements. They also address the importance of ingraining privacy and security throughout the product life cycle and provide guidance on evaluating the privacy and security implications of emerging technologies like AI.

Topics:

From your point of view, what do you think is the biggest mistake or oversight people make when building new products when it comes to privacy and security?
What kind of questions should I be asking myself when designing a new product when it comes to data protection?
What are the core principles and best practices for operationalizing privacy-by-design when developing new products?
What are the potential risks and challenges associated with neglecting privacy and security considerations during the product development phase?
How can organizations effectively balance the need for innovation and functionality with the requirements of privacy and data protection?
What steps can companies take to ensure that privacy and security are ingrained throughout the product life cycle, from design to deployment?
Are there any specific regulations or standards that companies should be aware of when it comes to privacy and security in new product development?
What are some of the privacy and security challenges facing companies interested in generative AI?
When it comes to any kind of new technology, like AI, how can individuals and businesses evaluate the privacy and security implications before integrating them into their operations?
What are some common misconceptions or myths surrounding privacy and security in AI, and how can they be addressed?

Resources:

Data Reimagined: Building Trust One Byte at a Time

76 episodes

#Tech #Skyflow

Operationalizing Privacy-by-Design for New Products with Jodi and Justin Daniels

17 subscribers

published 2 years ago

MP3•Episode home

Topics:

From your point of view, what do you think is the biggest mistake or oversight people make when building new products when it comes to privacy and security?
What kind of questions should I be asking myself when designing a new product when it comes to data protection?
What are the core principles and best practices for operationalizing privacy-by-design when developing new products?
What are the potential risks and challenges associated with neglecting privacy and security considerations during the product development phase?
How can organizations effectively balance the need for innovation and functionality with the requirements of privacy and data protection?
What steps can companies take to ensure that privacy and security are ingrained throughout the product life cycle, from design to deployment?
Are there any specific regulations or standards that companies should be aware of when it comes to privacy and security in new product development?
What are some of the privacy and security challenges facing companies interested in generative AI?
When it comes to any kind of new technology, like AI, how can individuals and businesses evaluate the privacy and security implications before integrating them into their operations?
What are some common misconceptions or myths surrounding privacy and security in AI, and how can they be addressed?

Resources:

Data Reimagined: Building Trust One Byte at a Time

76 episodes

#Tech #Skyflow

All episodes

1
Pseudoanonymization of Data with Jack Godau 45:44

43 weeks ago45:44

45:44

In this episode, Sean sat down with Jack Godau to dive deep into the world of pseudoanonymization. They started by discussing Jack's career trajectory working with highly sensitive data and how that experience shapes his engineering mindset. Jack shared how pseudoanonymization differs from anonymization, explaining its value for maintaining data utility while complying with stringent regulations like GDPR. Jack also walked us through the challenges and key components of building a pseudoanonymization engine, including the complexities of handling re-identification risks, ensuring scalability, and optimizing performance for large datasets. He shared insights on the trade-offs between data protection and usability, and whether building these systems in-house is worth the investment for startups. Finally, they explored where the field is heading, especially as data privacy concerns continue to grow.…

1
The Evolution of Certificate Management with Anchor Security's Ben Burkert 40:16

45 weeks ago40:16

40:16

In this episode, Sean sits down with Ben Burkert, Co-founder and CTO of Anchor, to dive into the world of certificate management and internal TLS. We explore how certificates and TLS function, the inherent difficulties in managing internal TLS certificates, and why nearly every engineer has a horror story related to it. Ben also shares insights into how Anchor is addressing these challenges and making internal TLS certificate management simpler and more reliable. Key Topics: Understanding Certificates and TLS: Basics of how certificates and TLS work. The role of TLS in securing internal communications. The Challenges of Internal TLS Certificate Management: Why managing internal TLS certificates is so difficult. Common pitfalls and challenges engineers face. Engineer Horror Stories: Real-world examples of certificate management gone wrong. The impact of these failures on teams and organizations. How Anchor is Fixing the Problem: Anchor’s approach to simplifying internal TLS certificate management. Key features and benefits of Anchor’s solution. If you've ever struggled with internal TLS certificates or are looking for a way to avoid the pain altogether, Ben’s expertise provides a clear path to overcoming the challenges of certificate management with a modern, reliable approach. Resources: https://anchor.dev/ https://lcl.host/…

1
What is a Data Lakehouse with Upsolver's Ori Rafael 31:59

47 weeks ago31:59

31:59

In this episode, we sit down with Ori Rafael, CEO and Co-founder of Upsolver, to explore the rise of the lakehouse architecture and its significance in modern data management. Ori breaks down the origins of the lakehouse and how it leverages S3 to provide scalable and cost-effective storage. We discuss the critical role of open table formats like Apache Iceberg in unifying data lakes and warehouses, and how ETL processes differ between these environments. Ori also shares his vision for the future, highlighting how Upsolver is positioned to empower organizations as they navigate the rapidly evolving data landscape.…

1
Top 10 Security Issues for LLM Applications with F5's Aubrey King 51:31

49 weeks ago51:31

51:31

In this episode, Sean Falconer is joined by Aubrey King, solutions architect and community evangelist at F5, to discuss the top 10 security issues for LLM applications. They explore critical threats such as prompt injections, insecure output handling, and training data poisoning, among others. Aubrey provides insights into why these issues arise, the attacks being observed, and the methods used to mitigate these risks. This episode is essential listening for anyone interested in the security of large language models and their applications.…

1
Demystifying Data Warehouses with Felicis Ventures's Eric Flaningam 32:44

51 weeks ago32:44

32:44

In this episode, host Sean Falconer sits down with Eric Flaningam, a researcher at Felicis Ventures, to explore the fascinating world of data warehouses. They dive into the history, evolution, and future trends of data warehousing, shedding light on its importance. Key topics discussed include an overview of the article "A Primer on Data Warehouses," and the definition and key characteristics of data warehouses. They also cover the historical evolution and major milestones in data warehousing, the shift from batch processing to real-time data, and the convergence of data warehouses and SQL. Eric and Sean discuss the impact of unstructured and complex data, advancements in technology and their effect on data warehouses, and the technical architecture and components of a typical data warehouse. They share real-world benefits and use cases of data warehouses, common challenges in implementing and maintaining data warehouses, and future trends and the influence of AI and machine learning on data warehouses. For further reading, check out Eric Flaningam’s article, A Primer on Data Warehouses: https://www.generativevalue.com/p/a-primer-on-data-warehouses…

1
Practical Advice to Protecting Your Digital Self with Tim Jensen 34:47

52 weeks ago34:47

34:47

Join us as we chat with Tim Jensen, a privacy enthusiast, about personal online security. Tim shares his journey to becoming a privacy advocate and teacher and provides insights into the common mistakes people make with passwords. We discuss why passwords have persisted for over 60 years, the issues with current password creation methods, and the balance between complexity and usability. We also explore strategies to protect personal information beyond just using better passwords. Finally, Tim shares his thoughts on future approaches to password and identity protection.…

1
Keys to the Kingdom, Secrets Management with Doppler's Brian Vallelunga 39:31

1 year ago39:31

39:31

In this episode Sean welcomes Brian Vallelunga, CEO and founder of Doppler, to discuss secrets management. Brian shares the journey of founding Doppler, a company dedicated to securing sensitive data such as API keys and credentials. Sean and Brian discuss the nuances of secrets management, its distinction from password management, and the importance of dedicated services for safeguarding secrets. The episode also addresses the alarming rise in data breaches, common mistakes companies make, and essential practices for managing secrets effectively. Brian offers expert advice on protecting secrets, the necessity for secret rotation, and the future of secrets management.…

1
The Biggest Mistakes Companies Make with Their Data with RudderStack's Eric Dodds 47:26

1 year ago47:26

47:26

In this episode, Sean is joined by Eric Dodds, Head of Product Marketing at RudderStack, to dive into the world of data management, data pipelines, and common data mistakes. Eric shares his insights on when organizations should transition from basic tools like spreadsheets to a more sophisticated data stack, including data warehouses and modern tooling. They discuss the challenges businesses face in data management, specifically about coming up with a common set of definitions that an organization is aligned around. They also discuss how to address these issues, and the importance of secure handling of customer data. Eric also provides an overview of RudderStack, its open-source approach, and the value it brings to managing customer data. Eric shares a ton of practical advice on building and optimizing your data infrastructure.…

1
Privacy and Security Considerations for RAG with Graphlit's Kirk Marple 39:32

1 year ago39:32

39:32

In this episode, Kirk Marple, CEO and Co-founder of Graphlit, joins the show. Sean and Kirk dive into the world of unstructured data management, discussing the evolution and current challenges in the field. While structured data has been well-handled since the 1970s, 80-90% of the world’s data remains unstructured, with predictions of 175 billion terabytes by 2025. Despite this vast amount, companies struggle to utilize it effectively due to immature tools and processes. Graphlit was founded to address this gap, providing scalable, maintainable systems with enhanced observability to handle unstructured data efficiently. Kirk discusses the challenges in data security and privacy when building RAG-based applications. He discusses some of their exploration into PII scrubbing and also controlled access to the vector embeddings based on the roles of a user. Finally, looking forward, Kirk shares insights into the future of Graphlit and their continued focus on enhancing the accessibility and utility of unstructured data for businesses across various industries.…

1
User Permissions at Scale with AuthZed's Jake Moshenko 34:16

1 year ago34:16

34:16

In this episode, Jake Moshenko, CEO and co-founder of AuthZed, joins the show to explore the world of user permissions at scale. Inspired by Google's Zanzibar, AuthZed aims to tackle the challenges of authorization - a less common focus compared to authentication in the tech industry. Jake discusses the initial simplicity and subsequent complications in role-based permission models, where businesses often struggle as they scale and need more nuanced access controls. He explains the Zanzibar paper from Google and the technical challenges with implementing the approach successfully. He explains how AuthZed facilitates a flexible and maintainable permission system and how companies get started.…

1
AI Deepfakes with Nametag's Aaron Painter 46:56

1 year ago46:56

46:56

In this episode host Sean Falconer is joined by Aaron Painter, CEO of Nametag, to explore the evolving threat and potential of AI deepfakes. They discuss the increasing sophistication of deepfake technology, highlighted by the significant rise in incidents such as the Retool hack, and how these technologies can manipulate public perception and security. Aaron discusses the development of technologies to both create and detect deepfakes, discussing the arms race that pits innovation against security. Aaron shares insights into how his company, Nametag, is at the forefront of combating deepfake fraud by protecting identity data and providing solutions for both companies and individuals to safeguard themselves. They conclude with thoughts on the future, discussing the ongoing technological advancements that are expected to play a crucial role in the fight against deepfakes, aiming to balance innovation with security in the digital landscape.…

1
Protecting and Using Sensitive Health Data with Integral's Shubh Sinha 44:50

1 year ago44:50

44:50

In this episode we’re joined by Shubh Sinha, CEO and Co-founder of Integral, to discuss the protection and utilization of sensitive health data. Shubh shares insights from his varied career in sales, engineering, and product management, and dives into the challenges of maintaining privacy and security in healthcare. The conversation covers HIPAA regulations, the balance of securing data while keeping it accessible, and the role of generative AI in healthcare innovations. Tune in for a detailed look at how technology is shaping the future of patient treatment and data privacy.…

1
Balancing Innovation and Responsibility in AI/ML Deployment with Jozu's Brad Micklea 43:50

1 year ago43:50

43:50

In this episode, we dive into the world of MLOps, the engine behind secure and reliable AI/ML deployments. MLOps focuses on the lifecycle of machine learning models, ensuring they are developed and deployed efficiently and responsibly. With the explosion of ML applications, the demand for specialized tools has skyrocketed, highlighting the need for improved observability, auditing, and reproducibility. This shift necessitates an evolution in ML toolchains to address gaps in security, governance, and reliability. Jozu is a platform founded to tackle these very challenges by enhancing the collaboration between AI/ML and application development teams. Jozu aims to provide a comprehensive suite of tools focusing on efficiency throughout the model development and deployment process. This conversation discusses the importance of MLOps, the limitations of current tools, and how Jozu is paving the way for the future of secure and reliable ML deployments. Resources: Jozu KitOps…

1
Prompt Injection Attacks with SVAM's Devansh 47:59

1 year ago47:59

47:59

In this episode, we dive deep into the world of prompt injection attacks in Large Language Models (LLMs) with the Devansh, AI Solutions Lead at SVAM. We discuss the attacks, existing vulnerabilities, real-world examples, and the strategies attackers use. Our conversation sheds light on the thought process behind these attacks, their potential consequences, and methods to mitigate them. Here's what we covered: Understanding Prompt Injection Attacks: A primer on what these attacks are and why they pose a significant threat to the integrity of LLMs. Vulnerability of LLMs: Insights into the inherent characteristics of LLMs that make them susceptible to prompt injection attacks. Real-World Examples: Discussing actual cases of prompt injection attacks, including a notable incident involving DeepMind researchers and ChatGPT, highlighting the extraction of training data through a clever trick. Attack Strategies: An exploration of common tactics used in prompt injection attacks, such as leaking system prompts, subverting the app's initial purpose, and leaking sensitive data. Behind the Attacks: Delving into the minds of attackers, we discuss whether these attacks stem from a trial-and-error approach or a more systematic thought process, alongside the objectives driving these attacks. Consequences of Successful Attacks: A discussion on the far-reaching implications of successful prompt injection attacks on the security and reliability of LLMs. Aligned Models and Memorization: Clarification of what aligned models are, their purpose, why memorization in LLMs is measured, and its implications. Challenges of Implementing Defense Mechanisms: A realistic look at the obstacles in fortifying LLMs against attacks without compromising their functionality or accessibility. Security in Layers: Drawing parallels between traditional security measures in non-LLM applications and the potential for layered security in LLMs. Advice for Developers: Practical tips for developers working on LLM-based applications to protect against prompt injection attacks. Links: Devansh on LinkedIn AI Made Simple…

1
The Hidden Hazards of Managing Unstructured Data with Skyflow's Joice John 44:56

1 year ago44:56