Privacy & Security Insights with PICCASO

Theory is easy. Operational pressure is where privacy programs actually get tested - and right now, AI is doing the testing. In this episode, Steve and Alex move the conversation to where it matters: the day-to-day decisions privacy teams are navigating, the gaps in current tooling, and how to make AI work for governance without letting it quietly erode human accountability. What's covered in this...

The latest episode of the Privacy & Security Insights Podcast with PICCASO is here, featuring Carolyn Hubble, Director of ICO Legal Service (FOIA & Prosecutions). She explores the growing focus on criminal data prosecutions, where the ICO is securing prison sentences, community service, and financial penalties for serious data offences under laws like the Computer Misuse Act and Proceeds o...

Kicking off the new season, José Martín Quesada, CEO and Co-Founder of Krew, takes on one of today’s big challenges: finding the right balance between driving innovation with AI and meeting privacy regulations like GDPR and CCPA. In this episode, José shares practical advice for organisations looking to use advanced AI technologies while staying on top of data protection requirements. He shares co...

In the latest Privacy & Security insights episode, Gregor Rutow, Global Data Protection Officer at Allianz Partners SAS, explores the power of Privacy Operations in building scalable, efficient Data Protection Management Systems (DPMS). Gregor shares practical insights on how to align privacy goals with business objectives. He discusses the use of tools like Data Protection Maturity Assessment...

In the latest episode, we sit down with Robert Bond to unravel the complexities of risk assessments in today’s data-driven world. Robert brings his wealth of experience to the table, offering a compelling look at how Data Protection Impact Assessments (DPIAs) are not just a regulatory checkbox but a powerful tool for protecting privacy, ensuring transparency, and safeguarding your organisation's r...

In this episode, Lorraine Pinter delves into the controversial topic of employee monitoring in the modern workplace. Lorraine sheds light on the nuanced challenges employers face, such as maintaining morale and trust while ensuring compliance. She underscores the ethical considerations, illustrating how a respectful approach to monitoring can foster a positive workplace culture. Her guidance empow...

In this episode on "The Value of a DPO", Gillian Cossey talks about the influence and intrinsic value that a DPO holds based on her own 20 years of experience in the field. Gillian's passion for the importance of DPO's is clearly felt in this vivid episode, where she relates to those in her industry who are also plagued by terms like "blockers". She underscores the wizard-like navigation, creativi...

In this episode on "AI Regulation, Governance and Data Privacy Implications", Jenna Franklin brings firsthand insights about the influence of landmark regulations like the EU AI Act and discusses both the advantages and challenges these laws present to innovation and privacy. This episode shares essential strategies for developing effective AI governance programs that ensure responsible AI use and...

In this episode on "Privacy and Blockchain" Ash Costello points out the challenges that blockchain entities face in complying with GDPR requirements due to the inherent characteristics of blockchain and distributed leger technologies, such as immutability and global accessibility. Ash proposes several potential strategies for mitigating risk through transparent disclosure and informed consent for...

In this episode on "The Role of Privacy in ESG" by Julia Bonder-Le Berre, Head of Global Privacy at Iron Mountain she explores the integral role of privacy in the evolving ESG landscape, emphasising its connection to environmental impact, social responsibility, and governance practices. The discussion underscores the potential for organisations to boost their ESG ratings by prioritising privacy pr...

In this episode on "Data Privacy Risk - How To Navigate The Complexities" by Nick Graham, Partner at Dentons Law Firm as he delves into the complexities of data privacy risk, emphasising the evolving legal landscape with a surge in global data privacy laws. The impact of technology, especially generative AI, is highlighted in the context of compliance challenges. Nick discusses various existing fr...

In this episode on "Blockchain and Privacy - are they contradictory? Vivienne highlights the growth of digital money and cryptocurrencies in the blockchain space and the rising need for privacy to become part of the conversation. The increasing reliance and prevalence of this new form of money and banking in the world raises the question of how privacy can be integrated into blockchain design. Viv...

In this episode on "Measuring the Effectiveness of Privacy Regulation' Steve Wright explores the complexity of evaluating privacy regulation effectiveness. He emphasises the need for assistance from external experts, including regulatory authorities, researchers, industry representatives, and civil society organisations. Evaluating privacy regulations requires careful consideration and collaborati...

In this episode "Data Ethics: A Question of Trust?" Cameron Craig will discuss how companies cause potential negative impacts of data collection, use and sharing on individuals and society. It is crucial for businesses to address these ethical challenges by developing clear ethical principles, adopting common assessment frameworks, establishing governance structures, integrating ethical principles...

In this episode "Managing Third-Party Supplier Risk- a Data Privacy Perspective" Kirsten Mycroft will discuss how companies can outsource data processing activities, whilst they cannot outsource accountability for data protection. She will provide valuable insight on this critical topic and practical tips for effectively managing data privacy risks in third-party outsourcing arrangements.

In this episode, we speak with Graham Hunt, Director of Insights and Data at Capgemini (UK) and Natasja Pieterman, Data Privacy Lead at Capgemini (NL), to explore one of the most significant technological advancements of our time: Generative AI. Graham and Natasja share their perspectives on the implications of Generative AI for the future of privacy. Throughout this episode, they address the foll...

In this episode, we had a conversation with Dr Philipp Raether, Group Chief Privacy Officer at Allianz, about the significance of Privacy by Design and Default (PbD) and the protection of personal data within a multinational corporation. Within this podcast episode, Dr Philipp delves into the intricacies of embedding privacy by design, outlining the meticulous steps that yield the desired outcomes...

In this episode, we discuss Retention & Deletion - The Data Lifecycle with Paul Jordan, the Chair of PICCASO. Paul explores organisations' critical challenges in maintaining strict data policies aligned with GDPR and other data privacy laws. The ever-growing collection of personal and non-personal data in the digital age calls for careful planning and documentation of the data lifecycle. Unfor...

In this first episode of Privacy Insights with PICCASO, Senior Security Specialist at Microsoft Anne Woodley discusses her article on AI as a Security Ally and the opportunities that this emerging technology creates for the global security landscape. In this podcast episode, some of the ideas we discuss include: The intersection of AI and the cloud in the context of cybersecurity and data protecti...