The Privacy Insider: Conversations on Data Privacy & AI, Compliance & GDPR

We sit down with Philip Rathle, Chief Technology Officer of Neo4j, to explore a question that’s becoming urgent in the age of AI: What happens when powerful models operate without context, governance, or explainability?

As generative AI reshapes enterprise technology, graph databases are quietly becoming a foundational layer for accuracy, transparency, and data control. Philip shares why AI systems struggle without structured relationships, how graphs reduce hallucinations, and what this means for privacy teams navigating Customer 360, data subject requests, and regulatory pressure.

Key Takeaways:

00:00 Introduction.

02:30 From chemical engineering to data architecture.

05:45 What a graph database actually is, and why it’s simpler than it sounds.

10:30 Why relational databases struggle with complex, connected data.

17:45 The AI tailwind: hallucinations, explainability, and governance.

23:10 Customer 360 and resolving fragmented identities.

28:15 Handling data subject access and deletion requests with graphs.

30:45 The double-edged sword: when graph power becomes surveillance risk.

37:00 AI models, privacy controls, and why not everything belongs in an LLM.

41:30 Confessions from a CTO: privacy habits in real life.

Resources Mentioned:

Philip Rathle

https://www.linkedin.com/in/prathle/

Neo4j | LinkedIn

https://www.linkedin.com/company/neo4j/

Neo4j | Website

https://neo4j.com

GraphRAG Manifesto

https://neo4j.com/blog/genai/graphrag-manifesto/

Neo4j GraphAcademy

https://graphacademy.neo4j.com/

Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode. 

For more information, visit osano.com 

#GraphDatabase #Neo4J #AIPrivacy

With California expanding enforcement, launching the DROP system, and signaling what comes next for automated decision-making and data brokers, privacy expectations for businesses are becoming clearer — and harder to ignore. Tom Kemp, Executive Director of the California Privacy Protection Agency, is one of the few people shaping US privacy enforcement who understands business realities from the inside. We discuss what changes when a former tech CEO becomes a regulator, how California balances innovation with enforcement, and why making privacy easier for consumers is the real unlock.

Key Takeaways:

00:00 Introduction.

05:10 How firsthand GDPR compliance shaped California’s privacy framework. 

08:45 Why California believes innovation and privacy can coexist.

13:40 What the California Privacy Protection Agency actually does.

18:50 How enforcement works, and what regulators want businesses to understand.

23:30 Why transparency and cooperation matter during enforcement actions.

28:10 How states collaborate on privacy enforcement across jurisdictions.

33:00 What the DROP system is and why it changes deletion of information from data brokers.

41:00 How California defines a data broker.

47:00 What’s next for privacy regulation in California. 

52:00 Why federal privacy laws should set a floor, not a ceiling.

56:30 How technology, including AI, could make privacy easier for consumers.

Resources Mentioned:

Tom Kemp

https://www.linkedin.com/in/tomkemp/

California Privacy Protection Agency | LinkedIn

https://www.linkedin.com/company/calprivacy/

California Privacy Protection Agency | Website

https://privacy.ca.gov

Delete Request and Opt-Out Platform (DROP)  

https://privacy.ca.gov/drop

Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode. 

For more information, visit osano.com

#CalPrivacy #CPPA #DROP #DataBroker

As AI systems increasingly shape how people love, parent, vote, and govern, questions about data ownership and human agency become urgent. This conversation is timely because society is quietly outsourcing judgment to machines trained on past data, while policy and ethics struggle to keep pace. That tension makes this discussion essential right now.

This episode features Carl Öhman, Associate Senior Lecturer in Political Science at Uppsala University, whose research examines AI, data, death, and democratic power. Carl explains why digital traces outlive people, how AI increasingly governs present decisions, and what is lost when humans stop taking risks in favor of statistical certainty.

Key Takeaways:

00:00 Introduction.

02:42 Curiosity about the internet shapes a path across sociology, political science, and AI.

07:12 An academic upbringing normalizes uncertainty and intellectual exploration.

10:03 Digital traces persist after death, raising unresolved social and political questions.

15:38 Deceased individuals lack data protection rights, creating privacy and security risks.

19:42 AI systems act as a personified version of society’s digital past.

23:50 Outsourcing decisions to AI weakens faith, courage, and human agency.

29:14 Genuine political dialogue requires vulnerability rather than optimization.

34:39 AI trained on AI risks allowing the dead to govern the living.

45:34 Data privacy is a collective societal issue, not an individual consumer problem.

Resources Mentioned:

Carl Öhman

https://www.linkedin.com/in/carl-ohman-769bb3115/

Uppsala University | LinkedIn

https://www.linkedin.com/school/uppsala-university/

Uppsala University | Website

https://www.uu.se/en

“The Afterlife of Data” by Carl Öhman

https://press.uchicago.edu/ucp/books/book/chicago/A/bo209942751.html

Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode. 

For more information, visit osano.com.

#DataPrivacyWeek #DataPrivacyDay #DataEthics #AIEthics #GDPR

Privacy, digital rights, and government responses to new technology are under heavy pressure right now as AI scales and more of life happens online. But data protection is not a partisan or optional issue. No matter who is in power or where people live, safeguarding personal information and basic freedoms takes constant vigilance and a readiness to push back on harmful uses of tech.

Brent Homan, Commissioner of the Office of the Data Protection Authority, shares how modern enforcement works in practice. He explains why privacy is universal, how regulators move quickly through cooperation, and what privacy by design must look like as AI and youth-focused platforms expand.

Key Takeaways:

00:00 Introduction.

05:05 Many privacy leaders come from wider public-interest work. 

13:10 Good enforcement aims for fast, fair fixes first. 

19:39 Ongoing regulator-business dialogue prevents bigger harms. 

24:54 Cross-border teamwork strengthens oversight. 

28:14 Youth privacy improves when adults listen and guide. 

34:32 Digital safety grows through habits and learning. 

39:23 Privacy supports informed choice, not secrecy. 

46:13 Privacy-by-design matters most as AI expands.

Resources Mentioned:

Brent Homan

https://www.linkedin.com/in/brent-homan-32063785/?originalSubdomain=gg

Office of the Data Protection Authority | LinkedIn

https://www.linkedin.com/company/odpa/

Office of the Data Protection Authority | Website

https://www.odpa.gg

Global Privacy Assembly

https://globalprivacyassembly.com/

Global Privacy Enforcement Network sweep

https://www.privacyenforcement.net/index.php/content/2025-global-privacy-enforcement-network-sweep-focuses-protection-childrens-privacy

 ODPA Guernsey podcast

https://podcasts.apple.com/gb/podcast/odpa-data-protection-teabreak/id1469372070

Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode. 

For more information, visit osano.com 

#GDPR #dataprivacy #childrensprivacy

Concerns about AI, workplace surveillance, and digital privacy are redefining how companies manage people. As automation scales and monitoring expands, the question is not what to measure but why we should. The urgency sits in the tradeoff between efficiency and human dignity, and now is the moment to set guardrails that protect workers and support responsible innovation.

Matt Scherer, Senior Policy Counsel for Workers' Rights and Technology of the Center for Democracy & Technology, explains how algorithmic management and data-driven decisions are changing hiring, evaluation, and termination. Matt connects legal reality to technical practice and shows where policy clarity matters most.

Key Takeaways:

00:00 Introduction.

02:55 A non-linear path can lead to meaningful work at the intersection of law and technology.

06:40 Technical fluency strengthens policy analysis and improves collaboration with practitioners.

09:11 Civil society organizations advance digital rights through research and advocacy.

13:09 The growth of flexible work arrangements affects access to worker protections.

29:05 Algorithmic management changes how organizations monitor and evaluate people.

34:17 Human judgment remains essential for fair and responsible employment decisions.

42:47 Attempts to quantify intrinsic qualities raise privacy and ethical concerns.

45:28 Policy and regulation lag behind rapid advances in workplace technology.

Resources Mentioned:

Matt Scherer

https://www.linkedin.com/in/matthewus/

Center for Democracy & Technology | LinkedIn

https://www.linkedin.com/company/center-for-democracy-&-technology/

Center for Democracy & Technology | Website

http://cdt.org

"Warning: Bossware May Be Hazardous to Your Health" CDT report

https://cdt.org/wp-content/uploads/2021/07/2021-07-29-Warning-Bossware-May-Be-Hazardous-To-Your-Health-Final.pdf

Privacy Badger (EFF browser extension)

https://privacybadger.org/

“Belated Feudalism” by Karen Orren

https://www.cambridge.org/ph/universitypress/subjects/politics-international-relations/american-government-politics-and-policy/belated-feudalism-labor-law-and-liberal-development-united-states?format=PB&isbn=9780521422543

Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode. 

For more information, visit osano.com 

#ADMT #AI #DataPrivacy

Dr. Tehilla Shwartz Altshuler, Senior Fellow at the Israel Democracy Institute, is at the forefront of conversations where technology, democracy, and human rights collide. As nations scramble to regulate fast-moving innovation, her perspective is critical now. With Israel recently updating its privacy law and global debates intensifying around AI, smart glasses, and workplace surveillance, Tehilla’s work highlights what’s at stake if regulation lags behind reality.

Key Takeaways:

00:00 Introduction.

05:33 Privacy is essential for protecting autonomy and democracy.

09:19 Legislative changes reshape the landscape of data protection.

16:16 Alternative approaches to regulation emerge between global models.

26:01 New technologies blur the lines between private and public life.

28:54 Governance challenges arise around consent and platform oversight.

38:51 AI systems increasingly influence workplace management and decisions.

41:33 Digital replicas of individuals raise ethical and privacy questions.

43:50 Preparing for the near future becomes the most critical skill.

Resources Mentioned:

Dr. Tehilla Shwartz Altshuler

https://www.linkedin.com/in/tehilla-shwartz-altshuler-8868b6bb/

the Israel Democracy Institute | LinkedIn

https://www.linkedin.com/company/israel-democracy-institute/

The Israel Democracy Institute | Website

https://en.idi.org.il/

NIST (National Institute of Standards and Technology)

https://www.nist.gov/

ISO (International Organization for Standardization)

https://www.iso.org/

EU AI Act

https://artificialintelligenceact.eu/

Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode. 

For more information, visit osano.com

#DataPrivacy #AIandEthics #IsraelDemocracyInstitute #SmartGlasses

Craig Newmark, Founder and CSR of Craig Newmark Philanthropies, has long championed privacy, trustworthy technology, and public service. At a time when AI, online scams, and cyber threats are reshaping daily life, his voice is especially relevant. Guided by early lessons in ethics and civics, Craig has spent decades applying a simple principle: treat people the way you want to be treated. From building one of the internet’s most enduring platforms to funding initiatives in journalism, cybersecurity, and veteran support, his perspective offers a grounding in values and a roadmap for addressing today’s urgent challenges.

Key Takeaways:

00:00 Introduction.

02:29 The early influences that shaped Craig’s values.

04:14 Building trust while navigating law enforcement and online safety.

09:58 Balancing anonymity and accountability in online communities.

15:58 Supporting veterans and military families through long-term commitments.

21:50 Lessons learned from early experiences in programming and technology.

28:56 Expanding philanthropic focus to address modern cybersecurity threats.

40:25 Perspectives on privacy, inclusivity, and digital responsibility.

Resources Mentioned:

Craig Newmark

https://www.linkedin.com/in/craignewmark/

Craig Newmark Philanthropies | LinkedIn

https://www.linkedin.com/company/craig-newmark-philanthropies/

Craig Newmark Philanthropies | Website

https://craignewmarkphilanthropies.org

Electronic Frontier Foundation (EFF)

https://www.eff.org/

Consumer Reports

https://www.consumerreports.org/

Bob Woodruff Foundation

https://bobwoodrufffoundation.org/

Blue Star Families

https://bluestarfam.org/

Wild Bird Fund

https://www.wildbirdfund.org/

Shadowserver

https://www.shadowserver.org/

Global Cyber Alliance

https://globalcyberalliance.org/

Cyber Clinics Consortium

https://cybersecurityclinics.org/

Cyber Resilience Corps

https://cltc.berkeley.edu/program/cyber-resilience-corps/

Take9

https://pausetake9.org/

Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode. 

For more information, visit osano.com

#DataPrivacy #InformationSecurity #GDPRCompliance #CISO

Nir Rothenberg, Chief Information Security Officer of Rapyd, joins us to discuss why building resilient privacy and security frameworks is critical now as fintech companies face heightened scrutiny. With Rapyd expanding globally and navigating rapid acquisitions, Nir shares why a pragmatic approach to compliance and risk management is crucial in an era where privacy regulations are tightening and cyber threats are growing more complex.

Key Takeaways:

00:00 Introduction.

01:54 Building security programs that scale across global regulations.

05:01 Collaborating with legal and compliance teams to strengthen frameworks.

12:57 Maintaining resilience and avoiding burnout in fast-paced roles.

20:55 Consistent system updates significantly strengthen security.

32:24 Problems and lessons from insider risks.

49:55 Balancing data minimization with effective monitoring and logging.

54:31 Applying cybersecurity expertise to strengthen privacy initiatives.

57:37 Opportunities in the growth of payment fields.

Resources Mentioned:

Nir Rothenberg

https://www.linkedin.com/in/nir-rothenberg-5a6b48ba/

Rapyd | LinkedIn

https://www.linkedin.com/company/rapydpayments/

Rapyd | Website

https://www.rapyd.net/

Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode. 

For more information, visit osano.com

#DataPrivacy #InformationSecurity #GDPRCompliance #CISO

Privacy has entered a new era. AI-generated content, ubiquitous surveillance, and unchecked data collection have created a landscape where individuals are constantly tracked but rarely informed. As digital tools outpace policy and public awareness, the need for accessible privacy education has never been greater.

University Distinguished Professor France Bélanger and Professor of Practice Donna Wertalik, both of Virginia Tech, are meeting this moment with a blend of academic depth and public communication. Through their joint initiative, Voices of Privacy, they translate decades of research and marketing insight into practical guidance for navigating the digital world. In this conversation, they discuss behavioral patterns, generational attitudes, flawed policy execution, and how building privacy habits early can shift the culture from passive acceptance to informed control.

Key Takeaways:

(05:10) Meaningful projects often begin with shared values and a simple idea.

(07:20) Remote work was an early signal of evolving surveillance norms.

(10:12) Advocacy in communication and branding can drive awareness around digital harm.

(17:45) Data is constantly collected, and informed choices are essential.

(23:39) Building privacy awareness requires relatable examples and early habit formation.

(28:11) Early education is crucial to shifting how privacy is understood.

(44:49) Strong policies can fall short without thoughtful implementation.

(51:42) Even experts face trade-offs when balancing convenience and privacy.

Resources Mentioned:

France Bélanger | LinkedIn -

https://www.linkedin.com/in/france-belanger/

Donna Wertalik | LinkedIn -

https://www.linkedin.com/in/donnawertalik/

Virginia Tech | LinkedIn -

https://www.linkedin.com/school/virginia-tech/

Voices of Privacy | LinkedIn -

https://www.linkedin.com/showcase/voices-of-privacy/

Voices of Privacy | Website -

https://voices-of-privacy.webflow.io/

Virginia Tech I Website -

http://www.vt.edu/

General Data Protection Regulation (GDPR) -

https://gdpr-info.eu/

Children's Online Privacy Protection Act (COPPA) -

https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa

Dove Real Beauty Campaign -

https://www.dove.com/us/en/campaigns/purpose/real-beauty-pledge.html

Roblox -

https://www.roblox.com/

Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode. 

For more information, visit osano.com

#DataPrivacy #InformationSecurity #GDPRCompliance #CISO

Revenge porn. Doxxing. Online harassment. All of these privacy violations go beyond just inconvenience or loss of money. They result in real emotional and sometimes physical harm for the victim. Until President Trump signed into law the “TAKE IT DOWN” Act in May 2025, legal protections were  fragmented and outdated. How do you fight a virtual attacker? And how do you bring one to justice? Though laws are catching up, the gap between harm and remedy has never been wider, making it critical to rethink how privacy and safety are protected today.

Carrie Goldberg, Victims’ Rights Activist/Founding Attorney of C.A. Goldberg, PLLC, draws on her extensive litigation against tech companies and abusers, as well as personal experience, in this episode. She brings sharp insights into how the legal system is adapting — and where it continues to fall short. Her work offers a timely perspective for businesses navigating privacy, risk, and digital harm in an increasingly volatile landscape.

Key Takeaways:

(04:12) Building a legal career rooted in advocacy and reparations work.

(18:30) Identifying legal gaps in protecting victims of digital abuse.

(22:54) Using litigation as a tool to drive systemic change.

(29:10) Addressing privacy violations in the workplace environment.

(34:54) Understanding the risks of employer negligence in employee safety.

(43:45) Recognizing emerging threats like sextortion and deepfake technology.

(49:25) Examining long-term impacts of online harassment on victims.

(53:47) Noting improvements in tech platform policies while acknowledging persistent risks.

(01:01:50) Achieving significant outcomes through persistent litigation efforts.

Resources Mentioned:

Carrie Goldberg

https://www.linkedin.com/in/carrie-goldberg-04511a6/

C.A. Goldberg, PLLC | LinkedIn

https://www.linkedin.com/company/c-a-goldberg-pllc/

C.A. Goldberg, PLLC | Website

https://www.cagoldberglaw.com/

“Nobody’s Victim” by Carrie Goldberg

https://www.amazon.com/Nobodys-Victim-Fighting-Psychos-Stalkers/dp/052553377X

Omegle

https://omegle.life/

Section 230 Overview

https://www.congress.gov/crs-product/R46751

Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode. 

For more information, visit osano.com.

#DataPrivacy #InformationSecurity #GDPRCompliance #CISO