Send us Fan Mail

Episode 274 – Liz MacPherson, Deputy Privacy Commissioner, Office of the Privacy Commissioner, New Zealand

In Episode 274 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Liz MacPherson, Deputy Privacy Commissioner at the Office of the Privacy Commissioner of New Zealand, about how privacy functions as a critical guardrail for innovation rather than a barrier to progress. The discussion focuses on New Zealand’s purpose and context-based privacy framework and why strong privacy foundations enable faster, safer, and more trustworthy data use across government and industry. 

The conversation explores a landmark case involving the use of facial recognition technology in supermarkets, where regulators, businesses, and independent evaluators worked together to test effectiveness, necessity, and proportionality before deployment. Debbie and Liz unpack why biometric data demands heightened scrutiny, how privacy impact assessments and real-world trials can reduce risk, and why facial recognition is not a plug-and-play technology. They also discuss the importance of human oversight, data quality, access controls, transparency to the public, and the risks of bias and misidentification when systems are poorly governed. 

Debbie and Liz also examine New Zealand’s Biometric Processing Privacy Code and its role in setting clear thresholds for biometric use, including limits on categorization and inference. The episode highlights why data retention is one of the most overlooked sources of organizational risk, how unnecessary data creates downstream harm, and why treating personal information as a treasure rather than an asset to be exploited builds long-term trust. Liz emphasizes that organizations succeed when they place people at the center of data decisions and design privacy as part of the full information lifecycle.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC

Send us Fan Mail

In Episode 273 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Kohei Kurihara, CEO and Founder of Privacy by Design Lab, about the relationship between privacy, trust, and innovation across Japan and the broader Asia-Pacific region. Kohei shares how his background in startups, blockchain, and digital identity led him to focus on privacy as a foundational element of sustainable technology.

The discussion explores the distinction between security and privacy, including why technical safeguards alone cannot establish trust. Debbie and Kohei examine privacy by design as a proactive discipline, contrasting it with reactive compliance-driven approaches. They discuss why companies that embed privacy early can move faster, innovate responsibly, and build stronger relationships with users rather than slowing progress.

The episode also examines cultural perspectives on privacy in Japan and Asia, including how collective values, family structures, and trust-based relationships influence attitudes toward data sharing. Kohei emphasizes that privacy expectations are shaped by history and culture, and that global frameworks must account for these differences. The conversation reinforces that trust, not compliance alone, is what ultimately determines whether technology is accepted and sustained.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC

Send us Fan Mail

In Episode 272 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Sean Pauzauskie, Medical Director at the Neurorights Foundation, about the emergence of neurorights and why brain data represents one of the most sensitive frontiers in privacy and human rights. Sean explains what neurorights are, how they developed from advances in neurotechnology, and why mental privacy, identity, and free will must be protected as technology becomes capable of reading and influencing brain activity.

Debbie and Sean explore the five core neurorights, including mental privacy, fair access to mental augmentation, personal identity, free will, and freedom from algorithmic bias. They discuss real-world neurotechnology use cases, from medical treatment to consumer wellness devices, and why commercialization increases the urgency of governance. The episode examines risks such as discrimination, surveillance, and misuse of neural data, even in the absence of malicious intent.

The conversation also highlights Colorado’s groundbreaking neural data protections and how state-level action can address human rights gaps left by federal consumer-focused laws. Debbie and Sean discuss why states can serve as laboratories for rights-based protections, how neurorights differ from traditional data privacy, and what policymakers, companies, and individuals should be thinking about as neurotechnology becomes mainstream.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC

Send us Fan Mail

In Episode 271 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Ridwan Oloyede, Emerging Technologies and Technology Policy Lead, about the rapid evolution of data protection across Africa and why global conversations often misunderstand or oversimplify the continent. Ridwan shares insights into how privacy and technology policy have matured across African jurisdictions and why Africa should not be treated as a monolith in global regulatory discussions.

The conversation explores the growth of data protection laws, regulators, and professional communities across the continent, including how capacity building, certification, and cross-border collaboration are shaping the next generation of privacy leadership. Debbie and Ridwan discuss common misconceptions, the importance of local context, and how African countries diverge meaningfully on issues such as post-mortem privacy, registration requirements, audits, and cross-border data transfers.

They also examine how legal traditions that predate the GDPR influence modern African privacy frameworks, including differing approaches to legal bases for processing and consent. Ridwan emphasizes the need for better global research, storytelling, and representation to accurately reflect what is happening on the ground. The episode highlights Africa’s growing role in shaping global privacy norms through innovation, pragmatism, and preventative approaches to data protection.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC

Send us Fan Mail

In Episode 270 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Filipe Pinto, researcher, strategist, and author of Consumer-Controlled Digital Twin Architecture, about the future of personal data control and what it means to move beyond consent-based privacy models. The conversation centers on Filipe’s concept of consumer-controlled digital twins and why true privacy requires technical and architectural change rather than reliance on legal agreements alone.

Debbie and Filipe examine the limitations of today’s cloud-centric data ecosystem, including how consent has become performative rather than protective. They discuss the idea of de facto control versus de jure control of data, the risks of biased and incomplete data-driven inferences, and why personal data systems are fundamentally designed to remember rather than forget. The episode explores how engineered privacy could shift power back to individuals by keeping data at the edge and allowing AI models to move without transferring raw personal data.

The discussion also addresses equity, access, and feasibility, including concerns about whether consumer-controlled systems could unintentionally create new digital divides. Debbie and Filipe explore how privacy engineering, open collaboration, and cross-disciplinary thinking are required to design systems that respect autonomy while remaining practical and scalable. The episode challenges listeners to rethink privacy not as a regulatory checkbox, but as an architectural and societal design choice.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC

Send us Fan Mail

In Episode 269 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Kimberly Lancaster, Founder and CEO of Avalon Privacy and Compliance. They discuss the evolving relationship among privacy, security, and compliance and why companies must treat these functions as interconnected elements of trust rather than isolated disciplines. Kimberly explains how organizations of all sizes can build stronger programs by emphasizing transparency, shared responsibility, and thoughtful data stewardship throughout the enterprise.

The conversation explores the real world challenges companies face when scaling governance, including vendor diligence, access controls, continuous monitoring, and the risks created when teams assume that technology alone can solve problems. Kimberly describes why proactive privacy practices, including data inventories and lifecycle thinking, make companies more resilient, reduce downstream crises, and strengthen their ability to respond to new regulations without disruption.

Debbie and Kimberly also examine the human side of privacy work, highlighting how culture, empowerment, and community learning shape successful programs. Kimberly shares her wish for a future where transparency becomes the foundation for trust and where companies design experiences that offer convenience without requiring people to sacrifice their data unknowingly. She emphasizes that privacy leadership is ultimately about enabling people to grow, make better decisions, and help organizations operate with integrity.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC

Send us Fan Mail

In Episode 268 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Anuj Jain, Lead Privacy Engineer at S&P Global. They discuss the role of privacy engineering in shifting data stewardship earlier in the technology lifecycle and how privacy-focused design strengthens both compliance and innovation. Anuj explains why many organizations still view privacy narrowly through a legal or security lens and why technical privacy practices are essential for building sustainable, enterprise wide maturity.

The conversation explores how privacy engineering transforms real operational workflows, including the review of cookies and tracking technology, automation of assessments, governance of AI systems, and managing risk through proactive testing and technical controls. Anuj provides insight into how S&P Global structures its privacy program across legal, technology, and business teams, creating a model of cross functional collaboration that allows privacy to scale.

Debbie and Anuj also discuss the cultural dimensions of privacy and how expectations differ across regions such as India, Europe, and the United States. They examine the impact of consumer awareness, regulatory timelines, and local norms on how individuals and companies interpret privacy. Anuj closes with practical insights about the power individuals have to influence corporate behavior through their choices and questions, and why thoughtful human decision making remains essential even in an AI driven world.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC

Send us Fan Mail

In Episode 267 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Federico Marengo, Associate Partner at White Label Consultancy in Italy. They explore the accelerating intersection of privacy, artificial intelligence, and governance, and discuss how organizations can build practical, responsible AI programs that align with existing privacy and security frameworks. Federico explains why AI governance cannot exist in a vacuum and must be integrated with the policies, controls, and operational practices companies already use.

The conversation delves into the challenges organizations face in adopting AI responsibly, including understanding the requirements of the EU AI Act, right-sizing compliance expectations for organizations of different scales, and developing programs that allow innovation while managing risk. Federico highlights the importance of educating leadership about where AI regulations actually apply, since many businesses overestimate their obligations, and he explains why clarity around high-risk systems is essential for reducing unnecessary fear and confusion.

Debbie and Federico also discuss future trends for global AI and privacy governance, including whether companies will eventually adopt unified enterprise frameworks rather than fragmented jurisdiction-specific practices. They explore how organizations can upskill their teams, embed governance into product development, and normalize AI as part of standard technology operations. Federico shares his vision for a world where professionals collaborate to advance best practices and help organizations embrace AI with confidence rather than hesitation.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC

Send us Fan Mail

In Episode 266 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks to Matthew Kay, Group Data Protection Officer at Shawbrook. Their discussion centers on pragmatic data protection, responsible governance, and the realities of advising organizations that are rapidly scaling or adopting emerging technologies. Matthew explains why trust-building, timing, and understanding the business context are essential for privacy professionals seeking to drive meaningful change.

Debbie and Matthew explore the challenges created by fast-moving artificial intelligence adoption, including transparency gaps, organizational pressures to automate, and the difficulty of maintaining meaningful oversight as data processing grows more complex. Matthew describes how privacy professionals can enable innovation by identifying mitigations early, embedding privacy by design, and guiding business leaders toward safe, sustainable data use. They also discuss why effective data protection requires risk balancing rather than rigid absolutism, and how credibility and constructive engagement support long term compliance.

Their conversation concludes with a focus on the future of data management and the importance of ongoing stewardship. Matthew reflects on the parallels between data governance in everyday life and large corporate environments, emphasizing continuous organization, monitoring, and clarity of purpose. Debbie and Matthew highlight why global communities benefit from sharing best practices across jurisdictions and how pragmatic, human-centered governance helps strengthen trust and resilience in a rapidly evolving digital landscape.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC

Send us Fan Mail

In Episode 265 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks to James Robson, Data Protection Officer for the Labour Party in the United Kingdom. Together, they explore how public sector organizations and political entities navigate modern data protection challenges while balancing public trust, transparency, and societal benefit. Their conversation highlights why research data, safe data environments, and responsible access structures are increasingly essential for tackling complex social problems.

Debbie and James discuss the importance of privacy-preserving data sharing for research and the practical realities of enabling societal value without compromising individual rights. James describes his work supporting research ecosystems, including the creation of secure data archives, the role of the Office for National Statistics, and how the United Kingdom’s “five safes” framework helps protect high-risk datasets in controlled environments. They also examine the ethical considerations around using sensitive data to improve outcomes for vulnerable groups, and how organizations can design safe, centralized systems without sacrificing privacy.

In the final segment, Debbie and James reflect on the future of data minimization, trust, and governance. They consider how architectures that strictly limit data use could reshape long-term privacy protections and discuss the human element required to steward data responsibly. Their conversation underscores the need for collaboration across government, research institutions, and technology teams to build trustworthy systems that support both privacy and public benefit.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC