Legal, marketing and product were all in the room. Nobody could say which cookie tool they had.

Episode Summary

In this episode of Privacy Perspectives, host Jodi Daniels breaks down why so many companies can't say who owns each part of their privacy program.

You'll learn why an existing pixel with no prior review has to be treated as new, why each ad-tech vendor deserves its own review, and discover the six questions a good privacy charter answers.

Question of the Day 🗣️

Which privacy area in your company has the least clear owner right now, the privacy notice, privacy rights, cookie consent software, data inventory, privacy risk assessments, TPRM, or training?

Key Take-aways

• See what it costs when nobody owns the consent software, from pixel governance to an untested banner
• Learn why an existing pixel with no prior review has to be treated as if everything is new
• Understand why Jodi recommends each ad-tech vendor get its very own review
• Use the six questions a good privacy charter answers, starting with who owns which part of privacy
• Swap "the privacy team owns it" for a single named owner in each area of your program

Timestamped Outline ⏱️

00:00 - Opening: who's doing what at home
00:30 - The conversation where nobody could name the cookie tool
01:03 - Ownership confusion is common, not unusual
01:13 - New pixels, existing pixels, and why there is no baseline
01:53 - Ad-tech vendors, TPRM, and why each one gets its own review
02:44 - Why jumping straight to fixes feels right
03:45 - Why a privacy program needs a strategy
04:14 - The six questions a good charter answers
04:43 - Why "the privacy team owns it" is not specific enough
06:06 - What to ask in your next meeting

Links & Resources 🔗

• Privacy Program Management Guide -> https://redcloveradvisors.com/privacy-program-management-guide/
• IAB Diligence Platform (SafeGuard Privacy) -> https://safeguardprivacy.com/iab-diligence-platform/
• Subscribe to Privacy Perspectives -> https://redcloveradvisors.com/

Connect & CTA 🎯

👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts.

🎁 Every week, Privacy Perspectives breaks down what's happening in privacy and what it means for your business: https://redcloveradvisors.com/

Credits

Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Two-thirds of businesses don't reach year ten. Nine years in, here is what she chose not to do.

Episode Summary

In this episode of Privacy Perspectives, host Jodi Daniels marks nine years of Red Clover Advisors with nine lessons from keeping a privacy consulting firm alive.

You'll learn why being one of the fastest growing firms was never the goal, what it takes to hand work over when you are the detail-oriented one, and how nine years reshaped what privacy expertise even means.

Question of the Day 🗣️

Of the nine lessons, which one resonates most with you, and which one are you still working on? Share in the comments.

Key Take-aways

• See why a mission statement only counts once it shows up in your process, reports, and client language
• Learn what turning down misaligned work protects, and why hard conversations happen by phone
• Understand why knowing every role in your business first is what tells you which ones to outsource
• Hear why staying in one lane and referring the rest has been better business than expanding
• Track what nine years did to the legal landscape, from GDPR alone to a state-by-state patchwork

Timestamped Outline ⏱️

00:00 - Opening - the first Red Clover call, at my kitchen table
01:13 - Nine years of a women-owned business, and the odds
02:14 - Have a mission statement
04:13 - Trusting people is hard, building a culture is harder
06:22 - Priorities aren't the same for every firm
07:54 - Know every role before you outsource any of it
08:58 - Stay in your lane even when you could expand
10:35 - Knowing how to actually take a break
11:59 - GDPR, CCPA and 23-plus state privacy laws
13:00 - The thread through all of it

Links & Resources 🔗

• Subscribe to Privacy Perspectives -> https://redcloveradvisors.com/

Connect & CTA 🎯

👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts.

🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead: https://redcloveradvisors.com/

Credits

Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Six emails from a retailer she never signed up with landed in her work inbox in three days.

Episode Summary

In this episode of Privacy Perspectives, host Jodi Daniels breaks down how a retailer got her work email without her ever giving it, and why the obvious explanation, her husband's account, wasn't it.

You'll learn how identity resolution vendors match anonymous website visitors to purchased email pools, and what privacy, marketing, and HR teams should be asking their vendors in writing.

Question of the Day 🗣️

If you asked your marketing team today which identity resolution or household matching tools are in place, would you get vendor names back, or just a category? Share in the comments.

Key Take-aways

• Learn why her husband's account wasn't the connection, though it's everyone's first guess
• Understand how identity resolution vendors match anonymous site visitors to purchased email pools
• See how a cold welcome sequence lands in a work inbox and the paper trail it leaves
• Get the questions privacy, marketing, and HR should be putting to vendors in writing
• Know why a cookie banner and managed opt-outs don't cover this kind of data sharing

Timestamped Outline ⏱️

00:00 - Opening - six emails from a retailer I never signed up with
00:55 - Why it wasn't my husband's account
01:19 - This is the universe of adtech
02:49 - Identity resolution and email onboarding vendors
03:33 - What happens when this lands in a work email
05:04 - The privacy risk underneath this
08:02 - What each team should be asking: privacy, marketing, HR
10:28 - Just because we can, doesn't mean we should

Links & Resources 🔗

• Red Clover Advisors' marketing and cookie governance assessment -> https://redcloveradvisors.com/cookie-governance-checklist/
• Subscribe to Privacy Perspectives -> https://redcloveradvisors.com/

Connect & CTA 🎯

👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts.

🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead: https://redcloveradvisors.com/

Credits

Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

A framework gets you organized. It doesn't make you compliant. Here's the gap most companies miss.

Episode Summary

In this episode of Privacy Perspectives, host Jodi Daniels breaks down why the NIST Privacy Framework - or any framework - was never built to tell you what the law actually requires.

You'll learn where NIST's five functions stop and GDPR, CCPA, and state law obligations begin, and how to build the legal matrix underneath your framework.

Question of the Day 🗣️

If you had to build the legal matrix underneath your framework this week, which requirement would you be least confident you have covered?

Key Take-aways

• Understand why a security mindset breaks down when applied to privacy programs
• Learn what the NIST Privacy Framework's five functions actually cover, and don't
• See where Identify-P stops and GDPR's Article 30 and 35 obligations begin
• Know the difference between a PIA, a DPIA, and CCPA's privacy risk assessment
• Get the questions to ask before assuming one framework satisfies every law

Timestamped Outline ⏱️

00:00 - Opening - the question I get asked on repeat
00:37 - Where a security mindset trips people up in privacy
01:52 - What the NIST Privacy Framework actually is
03:44 - Identify-P and GDPR Articles 30 and 35
04:40 - Govern-P, DPOs, and executive certification under CCPA
06:03 - Risk assessment, PIA, DPIA, PRA - not the same thing
07:44 - Where the specifics live: opt-out wording and sensitive data
10:28 - The GDPR and CCPA trap
13:40 - A framework gets you organized. The law gets you compliant.

Links & Resources 🔗

• Stauss Firm resource center (sensitive data categories chart) -> https://staussfirm.com/sparc/
• She Said Privacy, He Said Security: NIST AI RMF co-author episode -> https://redcloveradvisors.com/ai-governance-at-scale/
• Red Clover Advisors Privacy Program Assessment -> https://redcloveradvisors.com/privacyoperations/privacyprogramassessment
• Subscribe to Privacy Perspectives -> https://redcloveradvisors.com/

Connect & CTA 🎯

👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts.

🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead: https://redcloveradvisors.com/

Credits

Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Three state privacy regulators, no slides, no talking points - here's what actually gets companies in trouble.

Episode Summary

In this episode of Privacy Perspectives, host Jodi Daniels breaks down what three state privacy regulators - from New Jersey, Delaware, and Connecticut - actually look for when they open an inquiry.

You'll learn why documentation beats perfection, why opt-out symmetry matters, and why selling or sharing data doesn't end your responsibility for it.

Question of the Day 🗣️

Of the five gaps regulators keep seeing - documentation, opt-outs, data sharing, stale notices, sensitive data - which one would your company need to close first?

Key Take-aways

• Learn what a "good faith effort" looks like to regulators, and why perfection isn't the bar
• See why a documented paper trail beats one reconstructed after an inquiry letter arrives
• Understand opt-out symmetry - one click to opt in can't become five to opt out
• Know that selling or sharing data doesn't end your responsibility for how it's used
• Spot the "last updated" warning light regulators use to size up your whole program

Timestamped Outline ⏱️

00:00 - Opening - a fireside chat with three state regulators
00:41 - Regulators are just people (and privacy offices are growing)
02:08 - Nobody's asking for perfect - documentation and good faith
03:11 - Why evasive answers drag investigations out
04:24 - Opt-outs: the freedom to choose, change, and choose again
05:59 - Selling data doesn't end your responsibility for it
07:13 - A stale privacy notice is a warning light
09:19 - Sensitive data, profiling, and kids
12:12 - Where it all lands: trust and compliance
13:33 - Poll results - operationalizing privacy

Links & Resources 🔗

• Connecticut Attorney General's CTDPA resource page -> https://portal.ct.gov/ag/sections/privacy/the-connecticut-data-privacy-act
• Newsletter: The Compliance Gap Hiding in Plain Sight -> https://redcloveradvisors.com/the-compliance-gap-hiding-in-plain-sight/
• Red Clover Advisors downloadable guides and templates -> https://redcloveradvisors.com/downloadable-resources/
• Schedule a consultation with Red Clover Advisors -> https://redcloveradvisors.com/contact/
• Follow Red Clover Advisors on LinkedIn -> https://www.linkedin.com/company/redcloveradvisors/
• Subscribe to Privacy Perspectives -> https://redcloveradvisors.com/

Connect & CTA 🎯

👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts.

🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead: https://redcloveradvisors.com/

Credits

Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

The banner is up and the box is checked. That's usually where the checking stops, and where the gaps start.

Episode Summary

In this episode of Privacy Perspectives, host Jodi Daniels breaks down why a live cookie banner is not proof your consent setup is working.

You'll learn the 7 places cookie compliance consistently breaks, which web properties fall off the radar while they keep collecting data, and what a lightweight, repeatable cookie audit process looks like.

Question of the Day 🗣️

When's the last time someone actually checked whether your consent setup is doing what it should be doing? Share in the comments.

Key Take-aways

• A cookie banner going live is a starting point, not proof the consent setup is doing what it should
• Cookie compliance consistently breaks in 7 places, from cookies miscategorized as strictly necessary to a setup nobody wrote down
• Global Privacy Control working on one site does not mean it works across the rest of your properties
• Landing pages, recruiting sites and microsites fall off the radar first while they keep collecting data
• Scanning tools help, but a repeatable audit process on a set schedule is what actually closes the gaps

Timestamped Outline ⏱️

00:00 - Opening: why cookie audits are in demand right now
00:19 - Set it up, feel good, move on: the pattern behind the gap
00:57 - The retailer example: what "handled" looks like from the outside
01:17 - What the audit actually found
01:52 - The 7 places the gap consistently shows up
04:26 - Why the gaps hide: the web property inventory
04:41 - Scanning tools, and why a tool alone isn't enough
05:24 - What this means for your program
06:22 - The question to ask this week

Links & Resources 🔗

• Red Clover Advisors' guide to building a repeatable cookie audit process → https://redcloveradvisors.com/cookie-audit-process/
• Subscribe to Privacy Perspectives → https://redcloveradvisors.com/

Connect & CTA 🎯

👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts.

🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead. Subscribe so you don't miss the next one: https://redcloveradvisors.com/

Credits

Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

250 years of celebrating freedom, and one right never makes the toast.

Episode Summary

In this episode of Privacy Perspectives, host Jodi Daniels marks 250 years of independence by making the case that privacy is the freedom holding up every other one we celebrate.

You'll learn why privacy looks like early democracy right now, which three rights matter most to consumers, and why the person building the privacy program is also the person it is meant to protect.

Question of the Day 🗣️

What part of privacy work do you wish more people understood or appreciated? Share it in the comments.

Key Take-aways

• Privacy looks like early democracy: the intention is declared, but the systems are still being built
• Three rights anchor it: knowing what data a company holds, asking for deletion, and saying no to how it is used
• The patchwork of state privacy laws means the rules still shift depending on where you live
• Privacy is not one freedom sitting beside the others, it is the one holding them up
• The person building the privacy program is a consumer too, protected by the same work

Timestamped Outline ⏱️

00:00 - Opening: July 4th memories and what 250 years marks
01:50 - Freedom and privacy are not that different
02:08 - The patchwork of state privacy laws
02:46 - Privacy is the freedom holding the others up
03:54 - You are a consumer too
05:17 - The fight is not over, and that is the point
06:44 - Happy 250th: closing

Links & Resources 🔗

• Subscribe to Privacy Perspectives → https://redcloveradvisors.com/

Connect & CTA 🎯

👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts.

🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead. Subscribe so you don't miss the next one: https://redcloveradvisors.com/

Credits

Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

A deletion request hits your web form, bounces between marketing and legal, and the 45-day clock keeps running.

Episode Summary

In this episode of Privacy Perspectives, host Jodi Daniels breaks down why privacy rights requests fall apart - not because companies skip the whole program, but because nobody owns the end-to-end process.

You'll learn how to map every team that touches a request, why response templates sitting in a shared drive are not a process, and what a short practical training actually needs to cover.

Question of the Day 🗣️

If a deletion request came in tomorrow, could your team handle it start to finish without improvising? Tell us what's working (or what's missing) in the comments.

Key Take-aways

• Most companies have the pieces - a web form, an inbox, templates - but never connected them into one process
• Map every step from intake to documentation, then name an owner and a handoff for each one
• Any step without a clear owner or a documented handoff is where the process will fall apart
• Employee requests operate differently than consumer requests and pull in HR and sometimes outside counsel
• Training does not need to be a long compliance course, just what to do first and who owns each step

Timestamped Outline ⏱️

00:00 - Opening: the workout that wouldn't let go of a privacy problem
01:18 - When a deletion request lands with marketing
01:53 - Employee requests vs consumer requests: different handling, same confusion
02:25 - The ownership problem nobody names
03:30 - Having a template is not the same as having a process
04:38 - Know where the data is: why data inventory matters
05:01 - A policy without training goes nowhere
06:24 - The rep that connects everything
07:03 - The question to ask yourself this week

Links & Resources 🔗

• Red Clover Advisors Privacy Rights Guide → https://redcloveradvisors.com/privacy-rights-roadmap-business-guide/
• Subscribe to Privacy Perspectives → https://redcloveradvisors.com/

Connect & CTA 🎯

👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts.

🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead. Subscribe so you don't miss the next one: https://redcloveradvisors.com/

Credits

Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Your CRM is bleeding money, and privacy is the strategic fix nobody's using.

Episode Summary

In this episode of Privacy Perspectives, host Jodi Daniels breaks down why every unnecessary CRM record is costing you money, creating risk, and doing nothing for your pipeline.

You'll learn how data minimization cuts licensing costs, why LinkedIn scraping backfires, and how sales-ready privacy documentation closes deals faster than your competitors can respond.

Question of the Day 🗣️

Has your privacy program ever directly saved money or helped close a deal? What was the moment it stopped being "just compliance" for your team?

Key Take-aways

• Cut CRM licensing costs by purging records that will never convert
• Turn data minimization into a competitive edge, not just a compliance checkbox
• Build a trust center that skips months of vendor due diligence
• Use privacy documentation as a sales asset that closes deals faster
• Avoid the hidden risk of LinkedIn scraping and bulk contact imports

Timestamped Outline ⏱️

00:00 – Opening: the fear pitch and why Jodi rejected it
00:44 – Privacy as a strategic asset, not a legal obligation
01:59 – The CRM problem nobody talks about
02:43 – One bad record, three real costs
03:28 – Data minimization as a business advantage
04:32 – The marketing team that got excited about privacy
06:23 – The sales process nobody optimizes
07:25 – Trust centers and sales-ready documentation
09:03 – The bigger picture: privacy pays for itself

Links & Resources 🔗

• Vanta (Red Clover Advisors is a Vanta partner) → https://redcloveradvisors.com/contact/
• Subscribe to Privacy Perspectives → https://redcloveradvisors.com/

Connect & CTA 🎯

👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts.

🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead: https://redcloveradvisors.com/

Credits

Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

A room full of top privacy pros called their own conference a "therapy session" - here's what that tells us.

Episode Summary

In this episode of Privacy Perspectives, host Jodi Daniels breaks down what she learned from two days at D.C.'s biggest privacy gathering - where one leader called the event their "annual therapy session" and another wished for a magic wand.

You'll learn why trust in big business is at historic lows, how the state privacy patchwork is frustrating even seasoned practitioners, and how privacy teams are already using AI to work more efficiently.

Question of the Day

After two days of candid conversations in D.C., the theme that kept coming back was how hard this all is right now. What part of privacy work feels hardest for you this year - the legal complexity, the AI questions, or something else entirely? Share in the comments.

Key Take-aways

• Big business is the second least trusted institution - and privacy is the bridge back to trust
• The state privacy law patchwork is creating more practitioner frustration than ever
• Current privacy laws put the burden on consumers rather than companies collecting data
• Privacy teams are finding practical ways to use AI tools in their own daily work
• Flexibility matters more than perfect processes in today's privacy landscape

Timestamped Outline

00:00 - Two days in D.C.
00:28 - Bruce Mehlman's keynote on trust and disruption
02:18 - Privacy as the bridge between trust and technology
02:41 - The state privacy patchwork and practitioner frustration
04:08 - Why privacy laws put the burden on consumers
04:54 - Kids privacy, age verification, and unintended consequences
06:24 - Privacy pros using AI tools in their own work
08:06 - When AI agents start making the decisions
08:38 - The thunderstorm story and why flexibility matters
09:40 - The bottom line - your work matters

Links & Resources

• Red Clover Advisors Privacy Program Maturity Self-Assessment → https://redcloveradvisors.com/privacy-program-maturity-self-assessment/
• Bruce Mehlman's "Age of Disruption" Substack → https://brucemehlman.substack.com/
• Subscribe to Privacy Perspectives → https://redcloveradvisors.com/

Connect & CTA

Subscribe & leave a review on Apple Podcasts.

Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead. Subscribe so you don't miss the next one: https://redcloveradvisors.com/

Credits

Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.