Data Privacy Detective

Data Privacy Detective

By Joe Dehner - Global Data Privacy LawyerNewsTechnologyTech News
Download on the App Store

Data Privacy Detective episodes

  • Episode 114 - News Digest: CA Privacy Rights Act, FTC settlement w/ GoodRX, and proposed EU Data Act

    The Data Privacy Detective welcomes Frost Brown Todd attorneys Mike Nitardy and Yugo Nagashima to cover three important developments in the world of data privacy:

     

    -Updates to the California Privacy Rights Act (“CPRA”) – highlights of final regulations just issued

    -FTC settlement with GoodRX - the first enforcement of the Health Breach Notification Rule – its meaning for the healthcare industry and us

    -European Commission’s proposed “Data Act,” which could radically change the rules of data sharing and stimulate competition in tech sector

     

    Time stamps:

    01:15 - California Privacy Rights Act amendments

    07:58 - FTC settlement with GoodRX

    11:55 - EU Data Act proposal

    18 min
  • Episode 113 - Business Email Compromise Attacks: What Can Be Done?

    Business Email Compromise – it’s a major way that global thieves steal trillions of dollars. Bill Repasky, an attorney at Frost Brown Todd LLP, with years of experience in electronic payments and cyber-fraud defense, explains how attacks of this type occur, why they are growing, what can be done to prevent them, and what a business can do if attacked this way.


    Common types of Business Email Compromise attacks are what appear to be incoming customer payments, outgoing payments to suppliers of goods and services, and internal attacks (where a mal-actor takes over an employee’s email account at the business). While anti-phishing training is important, it is not enough. Businesses can minimize risk of loss by upgrading institutional defenses this podcast discusses. Tune in for a tune up on how businesses can deal with the rising global crime wave of Business Email Compromise.

    Time stamps:


    00:46 - What is Business Email Compromise?


    03:28 - What businesses are being targeted?


    05:35 - What are the common threads we see in business email attacks?


    08:24 - How do internal business email attacks occur?


    11:00 - How is public information on social media used as part of email attacks?


    11:38 - Key things businesses can do to prevent attacks?


    14:20 - What is “out-of-band” verification and how can it help prevent attacks?


    17:15 - What should a business do once it knows it has been attacked?

    21 min
  • Episode 112 - Data Privacy and Canada

    Canada and the United States are each other’s major commercial partner. Many U.S. companies have Canadian customers and collect and process personal information about Canadians. They must therefore understand Canada’s and its provinces’ regulation of personal data privacy. The Canadian regulation of data privacy is very complex, with a maze of the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial laws and regulations.


    In this conversation with Lyndsay Wasser, a Toronto-based attorney at the Canadian law firm McMillan LLP, the Data Privacy Detective asks what cross-border businesses should know about privacy and data security in Canada, as well as looming changes on the U.S.’s northern horizon.


    Time stamps:


    01:05 - What is the general state of data privacy and security law and regulation within Canada?


    02:33 - What does Quebec do differently?


    03:18 - Do foreign companies need to consider individual provincial laws in addition to the federal laws?


    05:27 - How is the Canadian privacy regime similar to the EU's GDPR? How is it different?


    07:14 - What should a US company know if it collects data from Canadian users?


    08:16 - How does Canada address data localization?


    09:43 - What does the future look like for data privacy law in Canada?


    13:06 - What advice would Lyndsay give on the type of guidance companies should seek regarding Canadian data privacy?

    16 min
  • Episode 111 - What Is Your Privacy Worth?

    “If it’s free, then you are the product.” We carry in our pockets devices that have powerful mechanisms for collecting our information–where we go, what we buy, and even how fast we move. Every time we scroll through social media on our phones, we are submitting extremely precise data about what we might be interested in… even down to how many seconds we slow down to look at an individual post. By using these products and services, we are in effect consenting to this data collection, which comes back to us in the form of targeted advertising. 


    But is there an alternative? What can we do if we want to use these services but don’t want to give over so much of our personal information? Ryan Patersen’s company Unplugged is betting that there are many people willing to pay more for more privacy. The products and services Unplugged offers present a fascinating test case in how much people value their privacy, and Ryan joins the Data Privacy Detective podcast to tell us all about it. 


    Learn more about Unplugged at their website – https://www.unplugged.com/ 

    Time stamps:


    01:23 – How do our devices collect data on us?


    03:57 – How do companies use our data?


    07:22 – What are the privacy risks?


    08:44 – What is Unplugged doing differently?


    14:10 – How much money is each user worth to the big tech companies as an ad delivery conduit?

    18 min
  • Episode 110 - Dutch Treatment: The Netherlands & Tech Giants

    Tech giants like Google, Apple, and Facebook incur huge Euro fines from European Union data privacy authorities. This is a “stick” approach, perhaps more like a “club,” of forcing EU rules upon global companies, aiming to force tech giants to change data privacy policies and practices to GDPR’s strict demands.

    Enter the Netherlands - with a different way of achieving changes in privacy practices through a joint approach. A January 23, 2023 New York Times article by Natasha Singer highlighted the Dutch carrot and teamwork way of getting companies to embrace EU rules without first resort to financial penalties. This podcast considers how the Dutch treatment – an audit and negotiation approach – offers a successful means of boosting personal privacy through collaborative solutions. Tune in for a refreshing example of how data privacy authorities and technology giants can work together to achieve common personal data privacy goals.

    New York Times article - How the Netherlands Is Taming Big Tech (Jan 18, 2023) by Natasha Singer - Link: https://www.nytimes.com/2023/01/18/technology/dutch-school-privacy-google-microsoft-zoom.html

    Time stamps:
    0:21 - How the Netherlands has approached GDPR compliance

    1:41 - GDPR fines have gotten the attention of Big Tech companies

    3:03 - NYT article by Natasha Singer on Dutch approach to Big Tech

    7:40 - The Dutch’s different approach of collaboration rather than lawsuits has been effective

    11 min
  • Episode 103 - The Future of Data Management
    William McKnight, one of the most highly published analysts in information management, offers insights into the future of how big data and artificial intelligence are changing the world. The McKnight Consulting Group is a leading data strategy and implementation firm that helps businesses solve complex problems through the use of growing personal information databases.
    Learn from this podcast who is watching us and how our personal data is collected, shared, and used. Discover new analytic uses by enterprises in master data management, how artificial intelligence mines our data to create a burgeoning array of products and services. Hear how AI and other critical technologies will change the world in the next ten years. And consider how this will affect our privacy and what we can do about it.
    If you have ideas for more interviews or stories, please email [email protected]
    26 min
  • Episode 102 - Data Brokers and Our Private Location Information
    Data brokers acquire and sell data that includes personal location information. This exposes to others visits of women seeking pregnancy healthcare options, the church, synagogue, or mosque we attend, and other sensitive information we would prefer to be kept private. In August 2022, the U.S. Federal Trade Commission sued Kochava, an Idaho based data broker, claiming that it engages in an unfair business practice by sharing location data it gathers from data sources.
    Mike Swift, Chief Global Digital Risk Correspondent for MLex Market Insight, a Lexis-Nexis global news organization, discusses the lawsuit and the vital privacy interests at stake. On October 25, 2022, Kochava filed a motion to dismiss and earlier preemptively sued the FTC. Kochava aggressively argues that the FTC lacks authority to make its claims and that data brokers serve an important, positive function.
    The Kochava suit will test whether there is federal authority to regulate the sharing of sensitive private information through data brokers. If not, data brokers may be almost entirely unregulated, able to do virtually anything they wish with personal information we did not knowingly authorize them to obtain and sell. You’ll learn what businesses can do amidst a chaotic and evolving global legal compliance and what individuals can do to protect their sensitive personal location information.
    If you have ideas for more interviews or stories, please email [email protected].
    25 min
  • Episode 101 - Data Breaches - The impact on consumers and company personnel
    Data breaches are now daily news, like weather reports. Podcast 101 digs beneath the headlines into what happens with data incidents that result in breaches – where our personal information goes, whether it’s ever truly recoverable, what businesses can to do to prevent and address breaches, what consumers can do about it, and how one company officer became the first U.S. person to be criminally convicted for mishandling a company’s data breach.
    Andy Lunsford, founder/CEO of BreachRx, offers insights and advice for what companies and individuals can do about data breaches. Companies that have a data response plan in place and test it in advance are best positioned to deal with them. The October 5, 2022 conviction of Uber’s former Chief Information Security Officer highlighted the rising risks involved for business officers charged with data breach management. Consumers can act immediately when informed that their data was breached. Despite the need for a global standard about data breach response time and other non-political aspects of cross-border data, there is none, and not even a U.S. common approach.
    Tune in to understand what happens when a data breach occurs and what each of us can do to respond to it.
    If you have ideas for more interviews or stories, please email [email protected].
    21 min

About Data Privacy Detective

From the publisher's feed

The internet in its blooming evolution makes personal data big business – for government, the private sector and denizens of the dark alike. The Data Privacy Detective explores how governments balance the interests of personal privacy with competing needs for public security, public health and other communal goods. It scans the globe for champions, villains, protectors and invaders of personal privacy and for the tools and technology used by individuals, business and government in the great competition between personal privacy and societal good order.