AI-enabled threats are rapidly outpacing traditional cybersecurity defenses, creating increasingly sophisticated risks to an organization’s data and systems. Podcast co-hosts Joe Lazzarotti and Damon Silver offer practical strategies for protecting sensitive data against AI-generated incidents through data minimization and mapping, access controls, vendor management, incident response and other strategies.

#AIContracts #AIGovernance #DataPrivacy #RiskManagement #LegalCompliance

Companies negotiating AI-related contract provisions increasingly have to balance innovation flexibility with evolving regulatory rigidity. In this episode, co-hosts Joe Lazzarotti and Damon Silver discuss the AI clauses increasingly appearing in vendor and customer agreements and share practical strategies for negotiating them in alignment with a company’s AI governance program.

Chapters

0:00 Introduction: AI Terms in Contracts
1:36 Where AI Contract Terms Appear
2:58 Can Your Organization Agree?
6:08 Scoping AI Use and Restrictions
10:48 Disclosure and Change Management
12:37 Narrowing Compliance Clauses
15:23 Materiality, Scope, and Execution
17:39 Audit Rights and Data Segregation
20:46 Insurance Coverage
22:29 Indemnification and Liability Caps
24:24 Subcontractor AI Use
25:23 Human Review Requirements
27:22 Closing Takeaways

#ArtificialIntelligence #AIProcurement #VendorRisk #AIContracts #DataPrivacy

Companies expose themselves to significant legal, compliance and operational risks when contracting for or procuring AI technologies. In this episode of We Get Privacy, co-hosts Damon Silver and Joe Lazzarotti break down the AI-specific provisions — from disclosure obligations and data use to liability, audit rights and human oversight employers — that companies should address during vendor contracting.

Chapters

0:00 Welcome and Episode Overview
1:15 The AI Procurement Question
2:19 Understanding How Vendors Use AI
6:09 Reviewing MSAs and DPAs
7:40 AI Recordkeeping Requirements
8:55 Vendor Data Use and Model Training
10:45 De-Identification and Re-Identification
11:39 AI Disclosure and Contract Definitions
13:52 Human Review and High-Risk Decisions
16:54 Liability and Indemnification
19:25 Colorado Law and Intended Use
21:47 Prompt Data and DPA Scope
23:45 Negotiating AI Audit Rights
24:55 Exercising Vendor Oversight
28:20 Closing Thoughts

From AI-assisted interviews, applicant scoring tools, dash cams, targeted advertising and employee productivity monitoring, CCPA risk assessment obligations can arise in unexpected places. Podcast cohosts Joe Lazzarotti and Damon Silver discuss common practices that may now trigger these California requirements and offer practical guidance for building risk assessments into existing compliance workflows. 

New CCPA requirements are turning employers’ everyday data activity into potential compliance exposure. In this episode, Jackson Lewis Privacy, AI and Cybersecurity co-leaders Joe Lazzarotti and Damon Silver discuss the CCPA-defined “high-risk” activities that may trigger risk assessment obligations and offer practical guidance for building a workable assessment process, coordinating with vendors and documenting decisions in ways that supports compliance. 

Integrating AI into hiring and other employment processes increasingly raises important legal and compliance risks — especially if those tools cross the line from supporting decisions to making them. In this We Get Privacy episode, Jackson Lewis principals Damon Silver and Joe Lazzarotti explore California’s new Automated Decision-Making Technology regulations and offer employers subject to its requirements some practical guidance on evaluating the roles of automated tools and human oversight. 

#DataPrivacy #ArtificialIntelligence #Cybersecurity #TechRisk

As AI-powered smart glasses and related emerging tech blur the line between everyday activity and constant data collection, organizations face growing privacy, security and compliance risks. In this episode, Jackson Lewis Privacy, AI and Cybersecurity co-leaders Damon Silver and Joe Lazzarotti clarify what these technologies are, why they’re raising red flags across industries, and how employers should respond. 

Chapters

00:00 Introduction to AI Smart Glasses and Their Resurgence

02:46 What Are AI Smart Glasses and How Do They Work?

04:09 Privacy Risks and Ethical Concerns with Smart Glasses

05:25 Industry Responses and Bans on Smart Glasses

06:14 Legal Considerations for Recording and Data Collection

07:59 Challenges in Obtaining Consent and Managing Privacy

08:57 Regulatory Environment and Data Security in Different Sectors

10:01 Employer Policies and Banning Smart Glasses in the Workplace

11:06 Balancing Benefits and Risks of Smart Glasses in Business

11:45 Future Outlook and the Need for Governance and Controls

12:56 Conclusion and Key Takeaways for Organizations

Escalating vendor cyber risk, tighter regulatory expectations and fast-moving AI-driven threats increasingly make checkbox diligence insufficient. In this episode, 360 Advanced’s Director of Compliance Strategy, Eric Ratcliffe, joins co-hosts Damon Silver and Joe Lazzarotti to discuss system and organizational control framework reports and how businesses can use them to address critical gaps and make vendor assessments.

As AI tools, workplace monitoring technologies, and data‑driven platforms expand, organizations face growing exposure from collecting, sharing, and retaining more data than they need for defined purposes. In this episode of We Get Privacy, Jackson Lewis Principals Joe Lazzarotti and Damon Silver, co‑leaders of the firm’s Privacy, AI, and Cybersecurity group, break down the data minimization principle and how organizations can use it to better manage data breach, class action litigation, and regulatory risk.

When an organization’s data systems are compromised, they face the daunting challenge of sorting through mountains of sensitive data under intense regulatory pressure. In this episode of We Get Privacy for Work, hosts Joe Lazzarotti and Damon Silver are joined by Matt Morocco, Director and Cyber Practice Lead at Consilio, to break down the real-world complexities of data mining after a breach. Together, they discuss why data mining is essential and how organizations can streamline the process for faster, smarter incident response.