Meru Data's Podcast

As businesses rapidly integrate AI into everyday operations, legal risk assessments are often struggling to keep pace. This creates growing challenges at the intersection of employment law, privacy, data protection, and emerging AI regulations.

In this webinar, Priya Keshav, Founder & CEO of Meru Data, along with Deepa Menon and Hannah Wilkins, Partners at Eversheds Sutherland, shared practical insights on navigating the evolving legal, privacy, and employment-related challenges associated with workplace AI.

The session explored the key risks businesses should consider before introducing AI tools into the workplace and highlighted how businesses can better understand and manage risks throughout the AI lifecycle, from adoption to the ongoing use.

Topics covered:

• Legal and regulatory considerations for workplace AI across jurisdictions
• Risks associated with AI tools such as chatbots, virtual assistants, and transcription platforms
• Employee monitoring, BYOD risks, and biometric data implications
• Managing contracts, privilege, confidentiality, and trade secret risks
• Workforce impacts and governance considerations in AI adoption

Children’s privacy is rapidly evolving beyond traditional COPPA compliance. New state laws, expanding FTC enforcement, age assurance requirements, and app store accountability measures are reshaping how businesses manage data related to minors and teens. 

In this episode of Simplifying for Success, Priya Keshav, Founder and CEO of Meru Data, is joined by Nerissa Coyle McGinn, Partner at Loeb & Loeb LLP, to discuss the changing regulatory landscape and what businesses need to do to prepare. The conversation covers key enforcement trends, emerging age verification requirements, app store accountability laws, and the growing expectation for organizations to address children’s privacy through governance and operational practices. 

Topics Covered 

• Expanding FTC enforcement and its impact on children’s data 
• State age assurance and age-appropriate design laws 
• App store accountability requirements 
• Key lessons from recent enforcement actions 
• Age verification, parental controls, and compliance challenges 
• Practical steps businesses can take to prepare for evolving requirements 

California’s updated CCPA regulations raised the bar for privacy and security governance, introducing phased cybersecurity audit obligations for qualifying businesses beginning in 2026.

In this episode, Priya Keshav, Founder & CEO of Meru Data LLC, and Austin Manes, Privacy Counsel at Herbert Smith Freehills Kramer LLP, provide a practical understanding of what these requirements mean, how to determine whether your organization may be affected, and how to prepare for compliance.

Topics include:

• An overview of the new CCPA cybersecurity audit requirements

• What must be audited, who is responsible, and upcoming compliance deadlines

• Practical strategies to meet key compliance obligations

 This webinar is approved by the IAPP - International Association of Privacy Professionals (IAPP) for Continuing Privacy Education (CPE) Credits.  

Recent updates to the CCPA Regulations establish clear standards for conducting privacy risk assessments, introducing new obligations around timing, documentation, executive oversight, and ongoing review. For many organizations, these requirements represent a significant shift from informal privacy reviews to structured, auditable compliance processes.

In this webinar, Priya Keshav, Founder & CEO of Meru Data LLC, and Jennifer Sheridan, Founder of JLSheridan Law, will break down:

• When risk assessments are required under the updated regulations.
• What regulators expect to see in a compliant assessment.
• How timelines, updates, and attestations affect operational planning.
• Common pitfalls and practical strategies for readiness.

The California Delete Act and the Data Rights Online Portal (DROP) system introduce new compliance requirements for businesses managing consumer data and privacy requests. Join us for an informative webinar with Priya Keshav, Founder & CEO of Meru Data LLC, and Jordan L. Fischer,  Founder & Managing Partner of Fischer Law LLC, as they discuss the implications of this legislation and what organizations need to know to prepare for the evolving regulatory landscape.

As privacy regulations continue to expand, organizations must ensure their data governance and compliance frameworks are equipped to address new obligations under the California Delete Act and the DROP system. This session will provide practical insights to help businesses understand their responsibilities and establish effective processes for managing deletion requests and regulatory compliance.

Topics Covered:

• Preparing Your Business for Compliance
• Who It Applies To
• Understanding Regulatory Requirements
• Sustainable Compliance Practices 

The Federal Trade Commission’s recent settlements and enforcement actions are redefining how organizations handle data consent and retention. In this episode, Priya Keshav, Founder & CEO of Meru Data LLC, and James A. Sherer, Partner at Baker & Hostetler LLP, examine the real‑world implications of these developments for corporate data retention programs.

The conversation highlights what companies need to do to align their retention practices with evolving regulatory expectations while still maintaining operational efficiency. It also outlines practical steps for building sustainable, compliant, and future‑ready data retention frameworks.

Topics covered in this session include:

• Key legal requirements for data retention and data minimization
• Designing effective, cross‑platform data‑retention strategies
• Operational considerations for achieving long‑term, sustainable compliance

Join Priya Keshav and Reena Bajowala on this month's podcast as they discuss simplifying for success in AI. Priya Keshav is the founder and owner of Meru Data, where she helps organizations worldwide simplify and sustain privacy and AI governance programs. Reena Bajowala brings deep experience in AI, cybersecurity, and privacy, advising clients on evaluating AI risks, implementing mitigations, and building compliant governance frameworks. In this episode, they discuss how in-house counsel should evaluate new AI technologies, key AI trends, emerging laws and regulations, their impact on compliance programs, and practical approaches to managing AI risk through effective AI governance.

Listen to Meru Data's podcast exploring the rapidly evolving state privacy enforcement landscape and the growing complexities of AdTech compliance. In this episode, we break down the latest regulatory developments, including the California Privacy Protection Agency’s (CPPA) recent enforcement action against Tractor Supply Company and the emergence of a new multi-state privacy enforcement consortium.

Gain practical, actionable insights to strengthen your organization’s privacy program as enforcement risks grow and expectations rise. This session will help you:

• Understand the CPPA’s latest enforcement action against Tractor Supply Company.
• Insights into the objectives and implications of the newly formed state privacy consortium
• Discuss the broader impact these changes could have on your privacy program.
• Guidance on anticipating how these regulatory changes may affect your privacy operations. including tips for training and embedding compliance into business operations

This session is approved by the International Association of Privacy Professionals (IAPP) for Continuing Privacy Education (CPE) credits.

Speakers

Priya Keshav, Founder & CEO, Meru Data LLC
Priya Keshav helps organizations proactively manage privacy risks involving data governance, AI, AdTech, data mapping, and compliance operations. With over 20 years of consulting experience including leadership roles at KPMG she brings deep expertise in privacy, cyber-crime response, eDiscovery, and forensic investigations. Priya frequently speaks at leading industry events across privacy, security, and AI governance.

Sundeep Kapur, Partner, Orrick, Herrington & Sutcliffe LLP
Sundeep Kapur advises global organizations on privacy compliance, regulatory investigations, AdTech, and emerging technology law. With extensive experience across U.S. state privacy laws, FTC regulations, GDPR, children’s safety laws, and AI frameworks, he is a recognized industry leader named Outstanding Contributor to Legal Affairs by the IAB in 2024. He plays a key role in shaping industry-wide AdTech privacy initiatives and serves on the Law360 2025 Cybersecurity & Privacy Editorial Advisory Board.

Listen to Meru Data’s podcast — Cross Border Privacy Rules (CBPR): A Comprehensive Overview

In this episode, we dive into the Cross Border Privacy Rules (CBPR) system, a globally recognized framework designed to streamline data transfers across jurisdictions. As organizations face increasing complexity in meeting international privacy standards, the CBPR certification offers a trusted, interoperable mechanism for managing cross-border data flows — adopted by economies such as the USA, Canada, Japan, Korea, Singapore, Mexico, the Philippines, Taipei, and Australia.

Join our expert panel as they unpack:

• What is the Global CBPR?
• How has the CBPR changed over time and what is its historical significance?
• How does it work? What kinds of companies can get certified?
• What are the benefits of participating?
• Are there areas for growth in the Global CBPR?
• How does CBPR interact with legislative frameworks?

🎙 Speakers:
Priya Keshav, Founder & CEO, Meru Data LLC – A leading voice in privacy, AI governance, and information risk management with 20+ years of consulting experience.
Dr. Divya Sridhar, VP, Global Privacy Division, BBB National Programs – A seasoned privacy policy expert overseeing the CBPR and global self-regulation programs.
Perry Li, Legal Director, OpenSpace

This webinar episode is approved by the International Association of Privacy Professionals (IAPP) for Continuing Privacy Education (CPE) Credits.

🎧 Tune in to gain actionable insights into how CBPR supports compliant, secure, and seamless cross-border data operations in a connected world.

Listen to Meru Data's podcast —
Strategies for AI Governance: Staying Ahead in an Evolving Technologies and New Regulatory Landscape

In this episode Priya Keshav, Founder & CEO of Meru Data, and Shannon Yavorsky, Global Chair of Cyber, Privacy & Data Innovation at Orrick, as they discuss as artificial intelligence rapidly transforms industries, organizations face growing pressure to ensure their AI systems are transparent, accountable, and compliant. In this episode, we explore how strong AI governance frameworks can help mitigate operational risks, prevent legal repercussions, and maintain public trust turning compliance into a strategic advantage.

This conversation is essential for privacy professionals, compliance leaders, and business executives looking to stay ahead in the evolving AI and regulatory environment.

🎓 This webinar is approved by the International Association of Privacy Professionals (IAPP) for Continuing Privacy Education (CPE) credits.