She Said Privacy/He Said Security

Michelle Dennedy is the CEO of PrivacyCode, a privacy engineering SaaS platform that translates complex privacy policies for developers. She is also the Co-founder and a Partner at Privatus Consulting, a company that assists clients with privacy engineering and governance, WickedPrivacy leadership solutions, and ESG metrics. Michelle works closely with families, executives, and innovators at all levels and with businesses and organizations at all stages to support the combination of privacy policies, practices, and tools. She has held many leadership roles in data strategy and privacy at Sun Microsystems, McAfee, Intel, and Cisco in addition to various startup companies. Additionally, Michelle wrote and published two books on privacy engineering. She is a graduate of the Fordham University School of Law, where she earned her JD. In this episode… AI privacy is a complex and ever-evolving topic. As AI systems become more sophisticated, it’s essential to ensure technology is used in a way that respects the privacy of individuals.  Michelle Dennedy, a seasoned privacy expert, recommends building smart privacy programs. These programs help organizations identify and mitigate privacy risks and comply with regulations. Companies and organizations can create a curriculum by developing policies and procedures, implementing technical controls, training employees on privacy issues, and conducting privacy risk assessments and regular audits. Join Jodi and Justin Daniels in today’s episode of the She Said Privacy/He Said Security Podcast, where they again interview Michelle Dennedy, CEO of PrivacyCode and Co-founder and Partner at Privatus Consulting, about the surge in privacy tech stack. Michelle addresses privacy and security risks companies face in regard to AI, the current state of tech regulations, and how PrivacyCode advises companies on privacy programs.

Eduardo Ortiz is the Manager of Data Privacy and Information Governance at Carnival Cruise Line, an international cruise line that offers packages to popular destinations like The Bahamas, Caribbean, Alaska, and Mexico. He is passionate about privacy and leads vital data privacy and protection programs. Before joining Carnival, Eduardo worked as a Senior Analyst of Data Privacy and Integrated Records and Information Management at CenterPoint Energy, where he gained five years of experience in data privacy and records and information management. In this episode… Cruising is a delightful way to see the world without the hassles of air travel. However, there are potential risks to be aware of, such as protecting your personal data. So, how do cruise lines ensure the security and privacy of their customers' data? Cruise ships offer a variety of entertainment options that require the exchange of personal information. Eduardo Ortiz, a data privacy expert, explains that parameters adhering to US, state, and global privacy laws are in place to combat identity theft. Additionally, global standards and company procedures and processes are continuously updated to align with global laws. In this episode of the She Said Privacy/He Said Security Podcast, Jodi and Justin Daniels welcome Eduardo Ortiz, Manager of Data Privacy and Information Governance at Carnival Cruise Line, to discuss regulations and compliance in the cruise line industry. Eduardo discusses how to organize a global security team, the steps cruise ships take to manage customers' data information, and tips for protecting your personal information when traveling.

Officer David Gomez is a Police Officer for the Boise County Sheriff’s Office in Idaho City, Idaho and a School Resource Officer at Idaho City High School. He has a background in electronics engineering, which he integrates in schools to educate parents on the dangers of social media. Officer Gomez also educates parents on how predators attempt to contact and entice kids into meeting or sending compromising photos. In this episode… In the early days of social networking, when notable platforms such as MySpace and Facebook were introduced, it was a tool for reconnecting friends and family. As these platforms and other social media outlets exploded in popularity, they also became a forum for predators to prey upon children Though parents can utilize the security controls on their kids’ phones, Officer David Gomez, a school resource officer, warns parents to use more precautions. As a resource officer, he’s been able to build relationships with students and monitor their careless social media behaviors. To educate parents on navigating the temptations teenagers face, he created a Facebook page that now garners nearly 200,000 followers. On his platform, Officer Gomez recommends topics of conversation, alternative phone options, and methods for reducing childrens’ screen time. In this episode of the She Said Privacy/He Said Security Podcast, Jodi and Justin Daniels welcome Officer David Gomez, Idaho City School Resource Officer, to discuss the dangers social media poses for children. Officer Gomez shares tips on how parents can monitor their children’s social media accounts, the importance of instilling family values, and giving your children the tools to protect themselves from potential predators.

Jason Sarfati is the Chief Privacy Officer and VP of Legal at Gravy Analytics, a location intelligence company providing real-world consumer intelligence to help organizations overcome today’s biggest challenges. Before joining Gravy Analytics, he was a Privacy Associate at Arent Fox and the Director of Privacy & Data Ethics at Treliant, a consulting firm serving financial institutions.  Jason earned his JD from George Mason University and holds a Certified Information Privacy Professional certification with a US concentration, making him an expert in the data privacy laws that govern US private sectors. He’s a member of the International Association of Privacy Professionals, a thought leader on trending privacy issues, and a frequent contributor to legal publications. In this episode… Geographic information, or location data, is intelligence about the geographical whereabouts of a device, such as a smartphone. Companies like Gravy Analytics use mobile location data to gain insight into individuals’ movement patterns to understand market trends and consumer behaviors. The issue with this type of tracking is that sensitive materials like health data become vulnerable. There’s also the risk of unsolicited advertising, physical assaults, and other various attacks. So, how do companies like Gravy Analytics use data for the betterment of society without further harming society? Jason Sarfati, head of privacy at Gravy Analytics, explains how they integrate privacy controls into their products. While the company strives to provide accurate sources of usable and trusted data, privacy is at the forefront during development. With its privacy-enhancing technology, the privacy team can identify the collection of location data at sensitive places. Once detected, it’s deleted from all systems. In this episode of the She Said Privacy/He Said Security Podcast, Jodi and Justin Daniels interview Jason Sarfati, Chief Privacy Officer and VP of Legal at Gravy Analytics, to discuss location data privacy. Jason talks about Gravy Analytics and the services the company offers, how privacy considerations are included during product development, using location data to identify individuals, and privacy and security best practices for parents of teenagers. 

Rohan Massey is a Partner at Ropes & Gray, a global law firm operating in the US, Asia, and Europe providing counsel in labor and employment issues, tax and benefits, and creditors’ rights. Rohan advises on complex global data and security compliance programs covering asset management and financial services, life sciences and clinical trials, and marketing. He’s an expert on the intersection of the extraterritorial scope of national data protection laws and data transfer issues for global organizations. In this episode… Cross-border data transfer is the exchange of electronic personal information across international borders. The European Union governs these transactions through a protection law known as the General Data Protection Regulation. Many large corporations operate in multiple countries, so acceptable contract agreements between partnering companies must be heavily enforced using a data privacy framework.  Data and cybersecurity experts like Rohan Massey work to implement and educate organizations about data privacy frameworks. These tools provide immediate support when concerns such as data breaches pose a threat to data privacy. DPFs are designed to adjust as events unfold. In regard to compliance, decision-making, and communication, corporations should consider adopting a data privacy framework.  In this episode of the She Said Privacy/He Said Security Podcast, Jodi and Justin Daniels welcome Rohan Massey, Partner at Ropes & Gray, for an in-depth conversation about the data privacy framework in relation to cross-border transfers. Rohan explains how the data privacy framework affects international corporations, the treatment of HR data versus “regular” data under DPF, and when companies should consider using standard contractual clauses.

Dan Frechtling is the CEO of Boltive, a digital security and privacy developer creating technology for compliance. He’s been a trailblazer in the B2B and SaaS industries for nearly 25 years. Before joining Boltive, Dan was the President of G2 Web Services, a provider of merchant risk intelligence, where he developed cybersecurity solutions to detect damaging activity such as transaction laundering. Dan has held several executive leadership roles at Hibu, Mattel, Stamps.com, and McKinsey, a global management consulting firm offering solutions for organizations in the government and private sectors. He earned his MBA from Harvard University. In this episode… With the emergence of e-commerce retailers, digital advertising is constantly evolving. Once shoppers purchase items, brands monitor online shoppers’ behaviors through a collection of digital footprints. The result is targeted ads — products of behavior-based advertising. These ads are marketing strategies for companies to funnel sales and earn hefty profits. Unfortunately, these intrusive methods can lead to privacy issues, putting user data at risk for theft. Privacy expert Dan Frechtling warns it’s not enough for consumers to clear cookies, delete apps and browser extensions, or toggle on and off to ensure data protection. Digital security and privacy firms such as Boltive want to protect consumers from malware risks. Boltive provides online tools such as Ad Lightning and privacy guards to identify, block, and replace harmful ads. These tools can also detect data-sharing apps to avoid noncompliance. In this episode of the She Said Privacy/He Said Security Podcast, Jodi and Justin Daniels welcome Dan Frechtling, CEO of Boltive, to discuss data leakage and programmatic advertising. Dan explains privacy challenges in online marketing, Boltive’s secret shopper safeguard strategies, and offers consumers tips for protecting their online data.

Ed Britan is the VP and Head of Global Privacy at Salesforce, a cloud-based software company focused on helping businesses connect to its customers, allowing for a larger prospects database, deal closings, and quality service. Ed moved to Salesforce after exiting his role as Microsoft’s Senior Director and Policy Counsel for Privacy and AI, covering global privacy and AI legal and policy issues. He is an attorney with a Ph.D. in Law from the New York University School of Law. Before working for Microsoft, Ed served as an Adjunct Professor of Law at the Seattle University School of Law. In this episode… When working with cloud software, users expect reliable data so they’re able to understand their customers’ needs, build relationships, and sell more products. In technology, trust is integral for driving and retaining business. As a customer relationship management company, the Salesforce product and privacy teams aim to provide privacy and protective data software. Ed Britan, a global privacy and security professional, leads Salesforce’s global privacy department. He and his team are attuned to their customers’ concerns, which is why the organization integrated the privacy and product teams. By combining teams, the company can provide customers with better results — and that result is customers gaining value from their collected data. In this episode of the She Said Privacy/He Said Security Podcast, Jodi and Justin Daniels welcome Ed Britan, VP and Head of Global Privacy at Salesforce, to discuss data software privacy and security. Ed explains how privacy plays a role in the design of Salesforce’s products, the impact of AI while collecting data, and how soon we can expect the US to implement state and federal privacy AI regulations.

Jim Dempsey is the Senior Policy Advisor to the Stanford Program on Geopolitics, Technology, and Governance. Additionally, he’s a lecturer at the UC Berkeley School of Law, where he teaches cybersecurity law in the LL.M. program. Before joining the UC Berkeley staff, he was the Executive Director of the Berkeley Center of Law & Technology. Jim previously served as a part-time member of the US Privacy and Civil Liberties Oversight Board — an independent agency within the federal government charged with advising senior policymakers and overseeing the nation’s counterterrorism programs. Jim is the author of Cybersecurity Law Fundamentals, a summation of cybersecurity law for practitioners in the field. His other publications include “Cybersecurity Information Sharing Governance Structures: An Ecosystem of Diversity, Trust, and Tradeoffs” and “The Path to ECPA Reform and the Implications of United States v. Jones.” He also pens articles on cybersecurity for Lawfare, a non-partisan, nonprofit publication dedicated to national security issues. In this episode… With the emergence of innovative technologies, cybersecurity continues to be a topic of discussion. And as the constant evolution of AI further transforms our lives both personally and professionally, the products and services we rely on are at risk of becoming fundamentally insecure. Jim Dempsey, a cybersecurity expert, explains that many users with ill intent are on a mission to steal our information and disrupt AI technology. A particular intentional attack to be wary of is prompt injection attacks disguised as programming instructions. This occurs when a hacker hijacks a language model’s output, allowing the hacker to get the model to say anything they want. There are, however, privacy and security best-practices companies can adopt as a means of prevention. In this episode of the She Said Privacy, He Said Security Podcast, Jodi and Justin Daniels welcome Jim Dempsey, the Senior Policy Advisor to the Stanford Program on Geopolitics, Technology, and Governance, to discuss the risks of AI deployment. Jim explains why Open AI is suddenly a tech phenomenon, AI’s potential risks without US regulation, advice for privacy and security best practices, and more.

Dr. Emre Kazim is the Co-CEO and Co-founder of Holistic AI, an AI governance, risk, and compliance (GRC) start-up focusing on software for auditing and risk management of AI systems. His PhD in philosophy and undergrad in science cleared a path for his role as a Research Fellow at the University College London’s computer science department. Dr. Kazim explains that curiosity, exploration, and experimentation helped him enter the AI space. In this episode… Artificial Intelligence is a tool that has already revolutionized many aspects of our lives. As AI systems become more sophisticated, ethical implications become an increased concern. So how can we, as developers and users, ensure the systems are used safely, ethically, and responsibly? Dr. Emre Kazim explains how implementing policies and procedures, also known as AI governance, is one solution to protect AI integrity. AI governance includes addressing privacy, safety, and bias. While some organizations have created their own internal policies, others have adopted frameworks developed by governments or industry groups. When drafting AI governance policies, some general policies to consider are transparency, accountability, fairness, and explainability — meaning AI systems should aim to be explainable, so users can understand how it works. Listen to the She Said Privacy/He Said Security Podcast as Jodi and Justin Daniels welcome Dr. Emre Kazim, Co-CEO and Co-founder of Holistic AI, to discuss AI governance and AI responsibility. Dr. Kazim explains the meaning of AI governance and why companies need it, the challenges organizations face using AI, his best privacy and security practices, and more.

Donna Gallaher is the President and CEO of New Oceans Enterprises. New Oceans Enterprises is a Cyber, IT, and Operational Risk Management Advisory Service that facilitates collaboration among your company’s business units to develop policies and operational risk mitigation strategies appropriate for your risk tolerance. Donna was recently recognized as one of the top 12 vCISO Influencers to watch and inducted into EC Council's 2023 C|CISO Hall of Fame.  Donna currently serves on the Board of Advisors for the FAIR Institute and is President of the Atlanta FAIR Chapter. She is one of the founding members of vCISO Catalyst, a professional association for vCISOs. She holds CISSP, CCISO, CIPP/E, CIPM and ITIL, and Open FAIR certifications and is designated a Fellow of Information Privacy by IAPP. She is a graduate of Auburn University with a Bachelor of Science in Electrical Engineering. In this episode… In this age of technology, it’s wise for companies to have some sort of cybersecurity expert on staff to protect the organization’s data from theft and damage. But what happens if you’re a startup or small company and unable to afford a full-time expert? Or perhaps you’re a larger corporation with cyber technology in need of updating? Whatever your company's needs are, you may want to enlist the services of someone like Donna Gallaher, a securities strategist who owns a securities advisory firm that contracts out services. Firms like Donna’s can provide a list of options to protect your company’s data, intellectual property, and assets. Tune in to this informative episode of the She Said Privacy/He Said Security Podcast as Jodi and Justin Daniels welcome Donna Gallaher, President and CEO of New Oceans Enterprises, to discuss the role of a CISO. Donna explains the services a CISO offers, why smaller companies are prime targets for hackers, and how to prevent cybersecurity threats.