Send a text

Episode e277- Tom Kemp The Data Diva Talks Privacy Podcast

Tom Kemp, Executive Director of the California Privacy Protection Agency

In Episode 277 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, the Data Diva, speaks with Tom Kemp, Executive Director of the California Privacy Protection Agency, about California’s role as the de facto privacy bellwether in the United States and how regulatory expectations are shifting from policy development to operational enforcement and accountability.

Debbie and Tom discuss key regulatory focus areas, including the Delete Request and Opt-Out Platform (DROP), Automated Decision-Making Technologies (ADMT), Opt-Out Preference Signals (OOPS), Global Privacy Control (GPC), cybersecurity audits, and privacy risk assessments. The conversation explores how these initiatives reflect a broader shift toward measurable governance, technical compliance, and demonstrable accountability.

They also discuss how regulators assess data risk, emerging enforcement trends, and what companies should be thinking about now as privacy programs start and mature. Tom explains how organizations can prepare for evolving expectations around governance, risk management, and documentation, and what strong privacy governance looks like going forward.

The episode concludes with Tom Kemp’s message to organizations about accountability, risk awareness, and responsible innovation as privacy regulation continues to evolve alongside artificial intelligence and emerging technologies.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send a text

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send a text

In Episode 275 of the Data Diva Talks Privacy Podcast, Debbie Reynolds, the Data Diva, speaks with personal data privacy consultant Toin Berry about how personal data is collected, combined, inferred, and reused in ways that can significantly affect individuals without their awareness. The conversation focuses on how modern data ecosystems operate beyond direct data collection, emphasizing how inference and aggregation can shape outcomes for people in ways that are difficult to see and even harder to challenge.

Throughout the episode, Debbie and Toin explore how personal data moves through complex networks that include platforms, data brokers, analytics firms, and secondary users. They discuss how information collected in one context can be repurposed in another, how inferred attributes can be treated as facts, and how predictive models can influence decisions about individuals in employment, housing, access to services, and social standing. The discussion also addresses how these practices affect autonomy and agency, particularly when individuals are unaware that profiles are being created about them based on behavioral signals rather than explicit disclosures.

The conversation further examines the limits of commonly promoted privacy controls, such as deletion requests and consent mechanisms, when data has already been copied, enriched, or redistributed across multiple systems. Debbie and Toin talk about the role of data brokers, the recycling of personal data, and the challenges individuals face when trying to understand where their data travels and how it is ultimately used. They also compare approaches to privacy protection in different jurisdictions, including perspectives shaped by European data protection frameworks and U.S. sector based models, highlighting how cultural and regulatory differences influence expectations and outcomes.

This episode also emphasizes the importance of education and data literacy in privacy conversations. Rather than focusing on fear or alarm, Debbie and Toin discuss the need for clearer explanations of how data-driven systems work, how inferences are generated, and what meaningful prevention looks like in practice. The discussion reinforces the idea that privacy is fundamentally about human impact, agency, and long-term consequences, and that understanding data use is essential for protecting people in increasingly complex digital environments.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send a text

Episode 274 – Liz MacPherson, Deputy Privacy Commissioner, Office of the Privacy Commissioner, New Zealand

In Episode 274 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Liz MacPherson, Deputy Privacy Commissioner at the Office of the Privacy Commissioner of New Zealand, about how privacy functions as a critical guardrail for innovation rather than a barrier to progress. The discussion focuses on New Zealand’s purpose and context-based privacy framework and why strong privacy foundations enable faster, safer, and more trustworthy data use across government and industry. 

The conversation explores a landmark case involving the use of facial recognition technology in supermarkets, where regulators, businesses, and independent evaluators worked together to test effectiveness, necessity, and proportionality before deployment. Debbie and Liz unpack why biometric data demands heightened scrutiny, how privacy impact assessments and real-world trials can reduce risk, and why facial recognition is not a plug-and-play technology. They also discuss the importance of human oversight, data quality, access controls, transparency to the public, and the risks of bias and misidentification when systems are poorly governed. 

Debbie and Liz also examine New Zealand’s Biometric Processing Privacy Code and its role in setting clear thresholds for biometric use, including limits on categorization and inference. The episode highlights why data retention is one of the most overlooked sources of organizational risk, how unnecessary data creates downstream harm, and why treating personal information as a treasure rather than an asset to be exploited builds long-term trust. Liz emphasizes that organizations succeed when they place people at the center of data decisions and design privacy as part of the full information lifecycle.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send a text

In Episode 273 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Kohei Kurihara, CEO and Founder of Privacy by Design Lab, about the relationship between privacy, trust, and innovation across Japan and the broader Asia-Pacific region. Kohei shares how his background in startups, blockchain, and digital identity led him to focus on privacy as a foundational element of sustainable technology.

The discussion explores the distinction between security and privacy, including why technical safeguards alone cannot establish trust. Debbie and Kohei examine privacy by design as a proactive discipline, contrasting it with reactive compliance-driven approaches. They discuss why companies that embed privacy early can move faster, innovate responsibly, and build stronger relationships with users rather than slowing progress.

The episode also examines cultural perspectives on privacy in Japan and Asia, including how collective values, family structures, and trust-based relationships influence attitudes toward data sharing. Kohei emphasizes that privacy expectations are shaped by history and culture, and that global frameworks must account for these differences. The conversation reinforces that trust, not compliance alone, is what ultimately determines whether technology is accepted and sustained.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send a text

In Episode 272 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Sean Pauzauskie, Medical Director at the Neurorights Foundation, about the emergence of neurorights and why brain data represents one of the most sensitive frontiers in privacy and human rights. Sean explains what neurorights are, how they developed from advances in neurotechnology, and why mental privacy, identity, and free will must be protected as technology becomes capable of reading and influencing brain activity.

Debbie and Sean explore the five core neurorights, including mental privacy, fair access to mental augmentation, personal identity, free will, and freedom from algorithmic bias. They discuss real-world neurotechnology use cases, from medical treatment to consumer wellness devices, and why commercialization increases the urgency of governance. The episode examines risks such as discrimination, surveillance, and misuse of neural data, even in the absence of malicious intent.

The conversation also highlights Colorado’s groundbreaking neural data protections and how state-level action can address human rights gaps left by federal consumer-focused laws. Debbie and Sean discuss why states can serve as laboratories for rights-based protections, how neurorights differ from traditional data privacy, and what policymakers, companies, and individuals should be thinking about as neurotechnology becomes mainstream.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send a text

In Episode 271 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Ridwan Oloyede, Emerging Technologies and Technology Policy Lead, about the rapid evolution of data protection across Africa and why global conversations often misunderstand or oversimplify the continent. Ridwan shares insights into how privacy and technology policy have matured across African jurisdictions and why Africa should not be treated as a monolith in global regulatory discussions.

The conversation explores the growth of data protection laws, regulators, and professional communities across the continent, including how capacity building, certification, and cross-border collaboration are shaping the next generation of privacy leadership. Debbie and Ridwan discuss common misconceptions, the importance of local context, and how African countries diverge meaningfully on issues such as post-mortem privacy, registration requirements, audits, and cross-border data transfers.

They also examine how legal traditions that predate the GDPR influence modern African privacy frameworks, including differing approaches to legal bases for processing and consent. Ridwan emphasizes the need for better global research, storytelling, and representation to accurately reflect what is happening on the ground. The episode highlights Africa’s growing role in shaping global privacy norms through innovation, pragmatism, and preventative approaches to data protection.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send a text

In Episode 270 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Filipe Pinto, researcher, strategist, and author of Consumer-Controlled Digital Twin Architecture, about the future of personal data control and what it means to move beyond consent-based privacy models. The conversation centers on Filipe’s concept of consumer-controlled digital twins and why true privacy requires technical and architectural change rather than reliance on legal agreements alone.

Debbie and Filipe examine the limitations of today’s cloud-centric data ecosystem, including how consent has become performative rather than protective. They discuss the idea of de facto control versus de jure control of data, the risks of biased and incomplete data-driven inferences, and why personal data systems are fundamentally designed to remember rather than forget. The episode explores how engineered privacy could shift power back to individuals by keeping data at the edge and allowing AI models to move without transferring raw personal data.

The discussion also addresses equity, access, and feasibility, including concerns about whether consumer-controlled systems could unintentionally create new digital divides. Debbie and Filipe explore how privacy engineering, open collaboration, and cross-disciplinary thinking are required to design systems that respect autonomy while remaining practical and scalable. The episode challenges listeners to rethink privacy not as a regulatory checkbox, but as an architectural and societal design choice.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send a text

In Episode 269 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Kimberly Lancaster, Founder and CEO of Avalon Privacy and Compliance. They discuss the evolving relationship among privacy, security, and compliance and why companies must treat these functions as interconnected elements of trust rather than isolated disciplines. Kimberly explains how organizations of all sizes can build stronger programs by emphasizing transparency, shared responsibility, and thoughtful data stewardship throughout the enterprise.

The conversation explores the real world challenges companies face when scaling governance, including vendor diligence, access controls, continuous monitoring, and the risks created when teams assume that technology alone can solve problems. Kimberly describes why proactive privacy practices, including data inventories and lifecycle thinking, make companies more resilient, reduce downstream crises, and strengthen their ability to respond to new regulations without disruption.

Debbie and Kimberly also examine the human side of privacy work, highlighting how culture, empowerment, and community learning shape successful programs. Kimberly shares her wish for a future where transparency becomes the foundation for trust and where companies design experiences that offer convenience without requiring people to sacrifice their data unknowingly. She emphasizes that privacy leadership is ultimately about enabling people to grow, make better decisions, and help organizations operate with integrity.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send a text

In Episode 268 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Anuj Jain, Lead Privacy Engineer at S&P Global. They discuss the role of privacy engineering in shifting data stewardship earlier in the technology lifecycle and how privacy-focused design strengthens both compliance and innovation. Anuj explains why many organizations still view privacy narrowly through a legal or security lens and why technical privacy practices are essential for building sustainable, enterprise wide maturity.

The conversation explores how privacy engineering transforms real operational workflows, including the review of cookies and tracking technology, automation of assessments, governance of AI systems, and managing risk through proactive testing and technical controls. Anuj provides insight into how S&P Global structures its privacy program across legal, technology, and business teams, creating a model of cross functional collaboration that allows privacy to scale.

Debbie and Anuj also discuss the cultural dimensions of privacy and how expectations differ across regions such as India, Europe, and the United States. They examine the impact of consumer awareness, regulatory timelines, and local norms on how individuals and companies interpret privacy. Anuj closes with practical insights about the power individuals have to influence corporate behavior through their choices and questions, and why thoughtful human decision making remains essential even in an AI driven world.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC