Privacy Huddle: A data privacy & AI governance podcast

A lot of privacy advice hinges on regulatory guidance and tech evaluation. But what about the people and persuasion part of in-house privacy leadership? That's the conversation in this week's Privacy Huddle.

Host and Head of Marketing Colleen Barry sat down with Maria Buccieri, Senior Director of Enterprise Compliance at Amtrak, who has built privacy programs across three very different organizations: a community bank, a state transportation agency, and now one of the most recognized brands in the country.

Her career start? Selling cars. And it turns out sizing people up on the lot translates surprisingly well to getting an organization to care about privacy.

The Privacy Huddle is back from a short hiatus and the timing couldn’t be better.

Host and Head of Marketing at Ketch, Colleen Barry sat down with Alysa Hutnik, Partner at Kelley Drye, to unpack the record $17 billion proposed settlement against Meta and what it means for privacy teams. The key is that there are lessons to be learned even if you are not big tech.

Last week, CalPrivacy announced its first audit in a series of sectoral audits.

That was the topic of conversation on this week's Privacy Huddle, where Host and Head of Marketing, Colleen Barry at Ketch sat down with Alysa Hutnik, Partner, Kelley Drye to break down what the agency's first sectoral audit actually signals, and how privacy teams can get ready before a request lands.

In Privacy Huddle Episode #101, host Colleen Barry sits down with Aubrey Wesser, Managing Associate General Counsel for U.S. Privacy at Verizon, for a wide-ranging conversation on managing compliance in the fast-changing U.S. privacy landscape.

We discuss:

• Risk assessments

• Children's privacy

• Leveraging AI

This week we’re dropping the 100th episode of the Privacy Huddle. Who would've thought that our little privacy podcast would come this far!

Privacy leaders are facing more pressure than ever—and the old approaches to compliance may no longer be enough.

In this episode of The Privacy Huddle, Colleen Barry is joined by Alisa Hutnik and Maxwell Anderson to discuss the biggest conversations coming out of the Cincero Chief Privacy Officer Forum in Chicago.

Topics include:

- Why traditional data mapping projects often fail

Whether you're a Chief Privacy Officer, privacy engineer, legal counsel, compliance professional, or marketing leader, this conversation offers practical insights into today's evolving privacy landscape.

Raise your hand if you've received a demand letter. Spoiler: you’re not alone. When we ask in privacy conference sessions, 70 - 80% of the room shoots their hand up. Dealing with demand letters has become part of the privacy program norm. In this week's Privacy Huddle, Host and Head of Marketing Colleen Barry and Co-founder & Head of Product Maxwell Anderson break down exactly what privacy teams should have in place before one lands on their desk. What they cover: Why plaintiff's

Privacy enforcement is evolving quickly — and brands can no longer rely on “vendor limitations” as an excuse.

In this episode of The Privacy Huddle, Colleen Barry sits down with Ezra Sternstein (AMC Global Media) and Max Anderson (Ketch) to unpack the latest privacy enforcement trends, identity management challenges, vendor accountability, and the growing convergence of privacy and cybersecurity.

Ezra shares unique insights from his background at the New York Attorney General’s Bureau of Internet & Technology, where he investigated privacy and cybersecurity violations firsthand. The conversation dives into recent Disney and Sling settlements, cross-device identity requirements, CCPA cybersecurity amendments, data mapping strategies, and how privacy leaders should prepare for the next wave of regulation.

If you work in privacy, security, compliance, adtech, martech, or legal operations, this episode offers practical guidance on what regulators actually care about — and what organizations must do now to stay ahead.

Some days, the content is great but the tech has other plans. Please bear with the video quality on this one.

In the latest Privacy Huddle, Colleen Barry sits down with Alysa Hutnik, Partner at Kelley Drye, to cover three things on every privacy leader's radar right now:

The SECURE Data Act. Not because it's crossing the finish line anytime soon, but because the elements inside it, particularly around third-party auditing and compliance certification, are signals worth paying attention to now, before they show up elsewhere.

Demand letters. They're not going away. But having the right consent management setup, clean tag configuration, and a defensible banner isn't just good hygiene, it's what gives legal teams something to work with when the letters land.

The U.S. Privacy Summit is back. October 15th, San Francisco, Convene. Free to attend. The anti-conference returns for year two.

Watch the full episode.

Frictionless opt-outs keep coming up.

In this week’s Privacy Huddle, Maxwell Anderson joins Colleen Barry live from the Ketch booth at IAPP to break down what’s coming directly from regulators and recent enforcement conversations.

The headline isn’t new. The expectations are just getting more specific.

Regulators are focused on how opt-outs are implemented, not just whether they exist. And that’s where things start to break down.

Frictionless doesn’t mean “easier UX.” It means removing barriers entirely:

Because if the process introduces friction, it introduces risk.

There’s also a broader signal behind all of this: responsibility sits with the business, not the vendor.

If your implementation doesn’t hold up, it’s your name on the investigation.

We also got into a recurring source of confusion across teams: this isn’t a cookie banner problem.

It’s about how clearly you present “Do Not Sell or Share,” and whether that choice is actually enforced across your environment.