Masters of Privacy

Can the growing use of first-party data in mobile app advertising result in more effective, privacy-preserving ads? Are app store policies (around fingerprinting and the use of deterministic IDs) more relevant than specific data protection laws and enforcement actions? Can AI take contextual information to the next level? Will LLMs result in collecting less data in order to anticipate customer jou...

Dr. Stefano Bennati has over a decade of experience developing tools and processes to ensure data-centric organizations comply with privacy, licensing, and responsible AI standards. Our guest has led privacy engineering and responsible AI teams with a global mandate. His work includes building and deploying compliance tools such as code scanners, AI-powered algorithms for personal data detection a...

As promised last week, today’s episode provides greater context on US ePrivacy audits, CIPA/VPPA claims, and EU-US comparative law as it affects the rollout or maintenance of MarTech solutions on websites and mobile applications. References: * “ The slippery slope of consent banners in preventing CIPA and VPPA claims: why effective Opt-Outs will prevail - also in the EU ” (Sergio Maldonado, Novemb...

In this live recording (November 6th 2025) we have tackled website protections from pixel-related litigation or public enforcement, paying closer attention to technical measures and the bridge between legal compliance and code-based strategies. Our repeat guest is Daniel B. Rosenzweig, Founder & Principal Attorney at DBR Tech Law. He advises clients on legal and technical compliance with data priv...

Mélissa M’Raidi-Kechichian is a Research and Advocacy Fellow at the Center for AI and Digital Policy. As an expert in AI policy, frameworks, and regulation, Mélissa has previously worked in the field of AI and digital policy, civic technology, and digital identity, having also held several consulting positions in the private sector and being part of the AI ethics Advisory Panel of the Canadian Dig...

South Africa’s POPIA uniquely protects both individuals and legal entities, a departure from typical data protection laws. We have focused on understanding this unique figure (Will it one day offer key insights into the complexities arising from the increasing use of AI?) before discussing similarities with the GDPR and international data transfers, both within the SADC region and the wider Africa...

California has enacted a sweeping wave of new privacy and AI laws in the past few days. From browsers finally reading opt-out signals to age verification, chatbot companions, data brokers and AI transparency, some of these laws will have a serious impact on the areas we mostly focus on (marketing, advertising, ecommerce, media). We have discussed AB 566, SB 361, SB 53, AB 1043, AB 656, AB 853, and...

Can we ever escape never-ending assessments as a core activity of a privacy management program? How does Privacy Tech extend to AI governance? Does built-in know-how become the most crucial moat? We are joined by Pádraig O’Leary, co-founder and CEO of TrustWorks, in a new installment of our Privacy Tech series (our sixth). Pádraig (Ph. D.) is a former academic in computer science. TrustWorks works...

Alexandria (Lexi) Andresen Lutz is founder of the nonprofit Opt-Inspire, Inc., which is focused on empowering seniors, children, other vulnerable populations, and their caregivers to reduce scams and close the digital divide between generations. In her day job, Lexi serves as Senior Corporate Counsel at a Fortune 500 retail company, where she advises on privacy, cybersecurity, and AI. She currentl...

Robert Bateman is a Senior Partner at Privacy Partnership, which provides consultancy and training on data protection and AI regulation, as well as legal advice via its associated law firm, Privacy Partnership Law. He also hosts The Privacy Partnership Podcast. This is Robert’s third appearance on the show. We have covered three hot topics: * How far do we take watermarking of AI-generated content...

It is time for a seasonal update at the intersection of Marketing, Data, Privacy and Technology. We will stick to our usual five blocks: ePrivacy & regulatory updates; MarTech & AdTech; AI, Competition and Digital Markets; PETs and Zero-Party Data; Future of Media. This includes: * CJEU decisions on Latombe (EU-US data transfers have survived, for now) and SRB (relative nature of personal data) *...

How can we apply differential privacy to real-world scenarios? How do you go about algorithmic design? Is there a conflict between data minimization and differential privacy? Can you solve for personal data finding its way into machine learning models? Where can a young professional find resources to dive deeper? References: * Daniel Simmons-Marengo on LinkedIn * OpenDP * Some takeaways from PEPR’...

Peter Craddock joins us once again to discuss the recent EDPS v Single Resolution Board decision by the Court of Justice of the EU. Although it builds on the previous Scania and Breyer cases to settle on the “relative” nature of personal data, its practical implications on everything we do in the Marketing Technology and digital advertising spaces cannot be overstated. Peter is a lawyer as well as...

Meaghan Henderson started off as a litigation attorney in Los Angeles, subsequently joining Snap Inc.’s Trust and Safety operations. She is now Global Head of Privacy at iRobot (makers of the ubiquitous Roomba, a robotic vacuum cleaner). We have gone over the many tasks that Meaghan has managed (and regularly manages) to accomplish as a one-person team: rolling out a full privacy program, raising...

We revisit the topics of individual agency, consumer perceptions of privacy, and self-sovereign identity through the lens of a “personal AI”. Copenhagen-based Yngvi Karlson is the Co-founder of Kin, a personal AI built on privacy and trust. After two successful exits and a career in venture capital, he set out to answer a bigger question: can AI empower us without owning us? For him, Kin is more t...

Jennifer Oliver is an experienced commercial litigator who has defended consumer class actions and multidistrict litigation, including those arising from data breaches and antitrust. She has worked in several high-profile jury trials, serving as lead counsel in complex mediations. She also counsels clients on matters related to privacy compliance and use of ad tech and similar technologies. Jennif...

Are privacy compliance and AI governance poised to remain stand-alone practices within the large enterprise? What is their interplay with an all-encompassing compliance effort? How will we deal with consent in the world of AI Agents? Erica Irvin is SVP, Commercial and Innovation Law, and Chief Privacy Counsel at Lowe’s Companies, Inc., where she leads legal strategy for commercial operations, priv...

What is “manipulative design”? How does this concept differ from “dark patterns”? How could we expand website and mobile app monitoring to a company’s ad stack?  Boltive’s Christine Desrosiers has joined us for another Privacy Tech interview. She is an operations and product professional with 20 years of experience building best-in-class publisher ad stacks and ops teams, and integrating ad and si...

Could transparency and control requirements be seamlessly integrated within delightful customer journeys? How has a famously design-led company (Airbnb) mastered Privacy User Experience? Ansuman Acharya serves as a Principal Product Manager at Airbnb, where he leads the design and development of cutting-edge privacy experiences that safeguard the trust of millions across the globe. With a foundati...

Will EU cybersecurity laws result in new global standards? Should companies handle NIS2 compliance in concert with GDPR, AI Act, or Data Act requirements? Does it make sense to take data localization to its ultimate consequences? Nathalie Barrera serves as the Director for Privacy for the EMEA region at Palo Alto Networks, which is a leading provider of cybersecurity solutions. Her expertise invol...

How do we move from mere words to actual baked-in privacy? Can built-in alerts, code scanning tools, or server-side auditing make life much easier for DPOs and legal teams?  We are joined by Vaibhav Antil in a new installment of our Privacy Tech series. Vaibhav is founder & CEO of Privado.ai . Before starting Privado.ai , Vaibhav led product management at a tech company and worked with the legal t...

John Pavolotsky is a partner at Stoel Rives in San Francisco. He is co-chair of the firm's AI, Privacy & Cybersecurity group and focuses his practice on data privacy, information security, and complex technology transactions. He has also been chair of the Intellectual Property Section of the California Lawyers Association.  John has taught Technology Transactions Law at the UC Davis School of Law...

Who can really claim to be a privacy engineer? Does this change in the digital marketing arena? What is the winning formula to integrate this role within the company’s privacy practice? Thomas Ghys has worked as a management consultant, data scientist, and data strategist, including a 5-year stint at McKinsey, prior to setting up his own privacy engineering practice. He has deep expertise in MarTe...

Can we shift the focus from documentation to technical implementation? How can we bridge the cultural differences between legal teams and engineers? What do we mean with open-source data classification? We are joined by Cillian Kieran, Ethyca’s CEO and founder, in a new installment of our Privacy Tech series. Cillian is a serial entrepreneur and seasoned privacy engineer with two decades of experi...

It is time for a seasonal update at the intersection of Marketing, Data, Privacy and Technology. We are today covering the first four of our usual five blocks: ePrivacy & regulatory updates; MarTech & AdTech; AI, Competition and Digital Markets; PETs and Zero-Party Data.  All references and links can be found in this episode’s blog post: Masters of Privacy . Allow us to thank two people in advance...