Masters of Privacy

Where is the privacy-AI convergence taking us in 2026? How different is the UK’s new approach to automated decision making (ADMT)? Is AI pushing young lawyers out of the profession? Eduardo Ustaran is global co-head of the Hogan Lovells Privacy and Cybersecurity practice, widely recognized as one of the world’s leading privacy and data protection lawyers and thought leaders. With over 30 years of...

“ You trust your chatbot with everything. Should you? ” is the title of Theodore Christakis’ comprehensive research project on the privacy of our conversations with AI. Part two of this project (“ Governments, Courts and the Battle Over Your Chatbot Conversations ”) was published on June 8th, and we have taken the opportunity to ask the author for a high-level overview of his findings. On top of t...

We are revisiting the AI-copyright interplay for the first time in nearly three years. Copyright remains very relevant to our sphere of interest, not least because the EU AI Act specifically points at EU copyright law with regards to training data and transparency requirements for AI models. Malcolm Bain is an English solicitor and Spanish abogado. He has worked as an Information Technology and In...

Our repeat guest is a partner at Stoel Rives in San Francisco. John is co-lead of the firm’s Technology Industry Group. He counsels clients on data privacy, information security, artificial intelligence, and other technology dispute, compliance, and transactional matters. John has taught Technology Transactions Law at the UC Davis School of Law and Comparative Privacy Law at the Santa Clara Univer...

How about an extremely practical book with detailed examples and quizzes based on a fictional town? Also, let’s revisit the UK legal framework: impact of the DUAA 2025 and proposed PECR changes. Tim Turner (here for a third time) is the author of “The DPO Daily Challenge” (April 2026). He has worked on Data Protection, Freedom of Information (FOI) and Information Rights law since 2001. He started...

We’re back with a Newsroom update. We will cover four of our usual five blocks: ePrivacy & regulatory updates; MarTech & AdTech; AI, competition and digital markets; and the future of media. This season’s update includes: * Age-verification fines (insufficient controls, too much data collection) in the UK and Spain, EDPB age-verification guidelines, California’s upcoming age-verification requireme...

As Executive Director of CalPrivacy (California Privacy Protection Agency), Tom Kemp oversees the CPPA’s mission to enforce and implement California’s comprehensive privacy laws and ensure the public has a strong understanding of their rights. Tom has a deep understanding of privacy and cybersecurity, combined with his track record as an executive in the tech industry. References: * Breakfast Work...

Mark Webber is the US Managing Partner responsible for overseeing the operations of Fieldfisher in the country - an English lawyer located full time in Silicon Valley. Mark is a recognised leading privacy and AI expert, with a wealth of experience working alongside the world’s leading tech companies. Much of his time today involves the responsible development, training, and scaling of AI models an...

Universal opt-out signals (like Global Privacy Control) have gained momentum on both sides of the Atlantic, with the EU recently endorsing them (Digital Omnibus) and CalPrivacy, Colorado, or Connecticut legally enforcing them, but they do not solve for consent opt-in requirements still applicable in many cases. Meanwhile, privacy notices remain cryptic and challenging for anyone to read or underst...

Shoshana Rosenberg advises boards and executive teams on AI governance, privacy, security compliance, and data strategy. She is the author of Practical AI Governance (Kogan Page, May 2026) and the creator of the PRISM™ framework, a practitioner’s model for responsible AI. She is Managing Director of Logical AI Governance, founder of SafePorter, and co-founder of Women in AI Governance. Before turn...

Our interactions with generative AI tools start to affect our personal relationships, communication style, and mental health, as well as our own perception of each other’s capabilities. They also leave a new trace of signals that privacy professionals never had to contend with in the past. As we approach the “personal agent” era, understanding where our individual freedoms and agency truly start a...

Chiara Wirz is a dual-admitted lawyer (California-Switzerland) who advises on privacy, AI governance, and cross-border corporate matters. She has served as Corporate Counsel and AI Ambassador at eBay Inc., where she built AI governance frameworks, operationalized AI deployment at the use case level, and trained legal and compliance professionals. Chiara holds triple IAPP certification, is completi...

Can you imagine an all-encompassing dashboard that shows your progress across all three pillars of “digital confidence”: AI governance, privacy, and cybersecurity? Amy Worley is Managing Director at BRG, a global leader in data protection, information security, and AI governance. A licensed attorney, certified privacy professional, and certified information systems security professional, She forme...

It is time for a seasonal update at the intersection of Marketing, Data, Privacy and Technology. We will stick to our usual five blocks: ePrivacy & regulatory updates; MarTech & AdTech; AI, Competition and Digital Markets; PETs, Zero-Party Data and Customer Centricity; Future of Media. This season’s update includes: * EU, UK, and California fines (Free, Reddit, Disney, PlayOn) * Progress on the Di...

John Harman (CIPP-US, CIPP-E, CIPM, FIP) is senior privacy counsel at a major global entertainment company (NBCUniversal), where he advises on emerging privacy challenges at the intersection of AI, biometric data, film marketing and consumer-facing technologies. With a background spanning both legal analysis, incident response, and cross-functional collaboration with product and engineering teams,...

How does Google Consent Mode affect ePrivacy compliance, opt-in signals, traffic sampling, marketing performance, and CIPA claims? What are the most common technical mistakes in the configuration of Tag Managers, tracking rules, and consent banners? Where is “do not train” (LLMs) going? Does agentic traffic ruin analytics or the premises of consent? We have gone through all of this with a true Goo...

Taylor Bloom is a partner at Baker & Hostetler LLP with significant experience operating at the intersection of law, technology and business, with a keen focus on international data protection, data privacy and governance. A certified privacy professional (CIPP/E, CIPP/US and CIPM) and the former in-house counsel at an advertising technology company, Taylor’s diverse strengths include coordinating...

The business purposes of digital data collection are not so obvious to all, and things will get even more complicated in an internet dominated by AI agents. We will today revisit the history of Digital Analytics and its evolution from Marketing-centric Analytics to Product Analytics and, eventually, Customer Experience Management (CXM). From there we will address the origins and current state of t...

Anu H. Bradford is a Finnish-American author, law professor, and expert in international trade law. In 2014, she was named the Henry L. Moses Distinguished Professor of Law and International Organization at the Columbia Law School. She is the author of “Digital Empires: The Global Battle to Regulate Technology” and “The Brussels Effect: How the European Union Rules the World”. Anu Bradford attende...

Dr. Gabriela Zanfir-Fortuna is a globally recognized data protection law expert, with 15 years of experience in the field split between Europe and the U.S., spanning academia, public service, consulting and policy. She currently is Vice President for Global Privacy at the Future of Privacy Forum, a global non-profit headquartered in Washington DC, coordinating FPF’s offices and partners in Brussel...

It is time to revisit Data Clean Rooms, having dedicated seven previous episodes to the topic across both the English and Spanish-language channels. The convergence of advanced data management techniques, more mature Privacy Enhancing Technologies, and sophisticated 1st-party data-based collaboration scenarios (on the back of AI, retail media, and Connected TV) already call for frequent updates. T...

Can AI agents be deployed for enhanced protection? What is a “triple extortion”? How is ransomware evolving? Is there hope for SMEs? Sam Kaplan is a policy, legal, and national security professional with over eighteen years of experience across the public and private sectors. He is currently the Assistant General Counsel for Public Policy & Government Affairs at Palo Alto Networks, providing legal...

In this live recording (January 14th 2026), we have conducted a comparative law exercise (US/EU) regarding ePrivacy compliance through Universal Opt-Out signals. Alan Chapell is the President of Chapell & Associates, a law firm serving media and AdTech. He is outside counsel and CPO to several of the leading advertising and technology companies. He regularly publishes both The Chapell Report and T...

It is time for a seasonal update at the intersection of Marketing, Data, Privacy and Technology. We will stick to our usual five blocks: ePrivacy & regulatory updates; MarTech & AdTech; AI, Competition and Digital Markets; PETs, Zero-Party Data and Customer Centricity; Future of Media. This season’s update includes: * CJEU Russmedia decision (“mere conduit” safe harbour overridden by a marketplace...

On Wednesday November 19 2025, the European Commission unveiled its Digital Omnibus Package, which was basically split in two proposals: a proposed Regulation on simplification for AI rules; and a proposed Regulation on simplification of the digital legislation. We will tackle the first one today. Today we are reviewing that AI-related block with Oliver Patel, who is AI Governance Lead at the glob...