Practical Privacy with Orla Dormer

Traditional privacy teams were never designed for agile digital transformation.
In this episode of Practical Privacy, Orla Dormer speaks with Naureen Hussain, Founder of Luminate Advisers and former DPO at Virgin Media, about how privacy leaders can support rapid digital transformation without compromising compliance or creating unacceptable risks.

Naureen shares why adding more privacy resources initially failed, how her team embedded into product and digital workflows, and why adopting a product mindset fundamentally changed the way the privacy function operated. The conversation explores cross-functional collaboration, agile delivery, privacy by design, and the importance of experimentation and user-centric compliance processes.

📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise.

🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

In Episode 12 of Practical Privacy, Orla Dormer is joined by Ben Westwood, Head of Compliance and DPO at the Motor Insurers’ Bureau, to discuss one of the biggest challenges facing privacy and compliance professionals today: How do you deliver proactive change when reactive work never stops? Ben shares how structured annual planning, maturity assessments, risk registers, and alignment with business objectives have transformed the way his team delivers privacy and compliance outcomes. We discuss:

• Why every privacy team should have a strategic plan
• How to balance proactive vs reactive work
• Using maturity assessments to prioritise effort
• Connecting privacy goals to wider business objectives
• Getting executive buy-in for compliance initiatives
• The importance of reviewing and demonstrating progress

A practical conversation packed with actionable ideas for privacy leaders, DPOs, and compliance professionals trying to create meaningful change inside busy organisations.

📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise.

🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

Building a scalable vendor assessment process sounds straightforward—until you’re dealing with 50,000+ vendors across 40+ countries.In this episode, Natalija Bitiukova (Head of Data Protection & Digital Law at Carlsberg) shares how her team tackled this challenge in practice, moving beyond fragmented systems and “paper compliance” to a more operational, scalable approach.We discuss:

• The pitfalls of running privacy and security assessments separately
• Why most vendor assessments fail after the questionnaire stage
• How to simplify assessments for real users (not lawyers)
• The importance of data quality and realistic resourcing
• Change management in large, decentralized organisations
• Getting leadership buy-in by framing compliance as a business issue

A practical conversation for anyone working on vendor risk, GDPR, NIS2, or scaling compliance processes.
About the podcast:
Practical Privacy explores how privacy and security teams solve real-world challenges at scale.
Brought to you by TrustWorks https://www.trustworks.io/

📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise.

🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

In this episode of Practical Privacy, Orla Dormer speaks with Vicky Owens, Senior Data Privacy and Compliance Counsel at SkyShowtime, about the challenges of being a global data protection leader.

Vicky shares why a privacy-only mindset often falls short, and how understanding business priorities, aligning with stakeholders, and positioning privacy as an enabler is key to success. A practical conversation on influence, prioritisation, and making privacy work in complex organisations.

📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise.

🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

What does it take to build a global privacy framework that actually works? In this episode, Marcelo Canha, Global Privacy Director and DPO at Organon, shares his experience designing a privacy program from scratch across 80+ countries — starting with a technically perfect framework that ultimately failed.

The lesson? Complexity doesn’t scale. Marcelo explains how shifting to a simple, practical approach — focused on DPIAs, RoPAs, and real business needs — made the difference, and why buy-in is not just a buzzword, but a strategy. A must-listen for privacy leaders navigating global compliance, limited resources, and the gap between regulation and reality.

📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise.

🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

What does it really take to become a DPO?

In this episode, Naveed Malik (Group DPO at Informa) shares his journey from a non-traditional background into a senior privacy role — and why technical expertise alone isn’t enough.

From building leadership skills outside of work to learning inside established governance frameworks, this episode explores the practical steps needed to bridge the gap and grow into a DPO role.

📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise.

🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

In this episode of Practical Privacy, Orla Dormer speaks with Roy Kamp, Director at UKG and former DPO at Wayfair and McAfee, about a common challenge in vendor negotiations: customers insisting on Standard Contractual Clauses (SCCs) even when they may not apply.

Roy explains why this happens, why negotiating every SCC request doesn’t scale, and how reframing the discussion around actual data flows rather than contractual positions can reduce friction and improve trust with customers.

The conversation explores practical ways privacy teams can enable sales and legal teams, use transparency to build credibility, and avoid unnecessary complexity in customer DPAs.

📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise.

🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

In this episode of Practical Privacy, we explore one of the most common misconceptions in SaaS and AI development: the belief that data can truly be fully anonymized.

Orla Dormer speaks with Noemie Weinbaum – Managing Counsel at UKG, about why organizations should stop assuming their datasets are anonymous and instead treat them as pseudonymized personal data. They discuss why true anonymization is extremely difficult under GDPR standards, how SaaS companies often use the same datasets for both service delivery and AI training, and why this creates real risks around re-identification, compliance, and customer trust.

Noemie also shares practical advice on building the right governance approach from the start — integrating privacy into the software development lifecycle, involving product and engineering teams early, and creating a cultural shift toward transparent data protection practices. 


📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise.

🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

In this episode of Practical Privacy, Orla Dormer speaks with Avishay Klein, Head of Privacy, AI and Cyber Department at Barnea Jaffa Lande. They discuss why privacy programs often fail at implementation — from unrealistic data retention timelines to top-down governance models that teams cannot operationalise. The conversation explores practical ways to align GDPR and AI governance requirements with real business capabilities, emphasising collaboration, understanding operational constraints, and designing processes that teams can actually implement.

📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise.

🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

How do you make AI Act and GDPR training something people actually pay attention to?
In this episode of Practical Privacy, Orla Dormer speaks with Jared Browne, Fexco Group Head of Privacy & AI Governance, about turning regulatory training into engaging, story-driven experiences. From framing AI Act sessions as a murder mystery to delivering AI literacy as a playful “Overlords of the Rings” narrative, Jared shares how storytelling, humor, and structure dramatically improve attention and retention. 

📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise.

🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/