We Get Privacy

#WeGetPrivacy #RecruitmentFraud #AI #DataPrivacy #CyberSecurity

Fake applicants, fraudulent recruiters and AI-enabled deception are creating real-time security, compliance and reputational risks for employers. We Get Privacy cohosts Damon Silver and Joe Lazzarotti examine the issues from both sides of the hiring process, providing practical steps employers can take to verify candidates, strengthen safeguards and third-party relationships, and respond effectively when suspicious conduct arises.

Chapter
0:00 Cold open
0:54 Welcome to We Get Privacy
1:55 Today's question: recruitment fraud
2:54 Fake hires and insider threats
4:18 Scammers posing as recruiters
5:23 North Korean remote IT worker schemes
6:40 OFAC sanctions and breach fallout
7:42 How impersonation scams surface
8:48 Spoofed emails and look-alike branding
10:43 Building a response program
11:12 Vetting your recruiting process
12:06 Résumé red flags
13:06 Identity verification and biometrics
14:38 Warning job seekers on your careers page
16:07 Scanning for misuse and requesting takedowns
16:58 A fraud response playbook
17:45 Limiting access for remote hires
18:40 Monitoring for unusual activity
19:51 Investigating suspected bad actors
21:53 Reporting to law enforcement
22:35 Wrap-up

AI-enabled threats are rapidly outpacing traditional cybersecurity defenses, creating increasingly sophisticated risks to an organization’s data and systems. Podcast co-hosts Joe Lazzarotti and Damon Silver offer practical strategies for protecting sensitive data against AI-generated incidents through data minimization and mapping, access controls, vendor management, incident response and other strategies.

#AIContracts #AIGovernance #DataPrivacy #RiskManagement #LegalCompliance

Companies negotiating AI-related contract provisions increasingly have to balance innovation flexibility with evolving regulatory rigidity. In this episode, co-hosts Joe Lazzarotti and Damon Silver discuss the AI clauses increasingly appearing in vendor and customer agreements and share practical strategies for negotiating them in alignment with a company’s AI governance program.

Chapters

0:00 Introduction: AI Terms in Contracts
1:36 Where AI Contract Terms Appear
2:58 Can Your Organization Agree?
6:08 Scoping AI Use and Restrictions
10:48 Disclosure and Change Management
12:37 Narrowing Compliance Clauses
15:23 Materiality, Scope, and Execution
17:39 Audit Rights and Data Segregation
20:46 Insurance Coverage
22:29 Indemnification and Liability Caps
24:24 Subcontractor AI Use
25:23 Human Review Requirements
27:22 Closing Takeaways

#ArtificialIntelligence #AIProcurement #VendorRisk #AIContracts #DataPrivacy

Companies expose themselves to significant legal, compliance and operational risks when contracting for or procuring AI technologies. In this episode of We Get Privacy, co-hosts Damon Silver and Joe Lazzarotti break down the AI-specific provisions — from disclosure obligations and data use to liability, audit rights and human oversight employers — that companies should address during vendor contracting.

Chapters

0:00 Welcome and Episode Overview
1:15 The AI Procurement Question
2:19 Understanding How Vendors Use AI
6:09 Reviewing MSAs and DPAs
7:40 AI Recordkeeping Requirements
8:55 Vendor Data Use and Model Training
10:45 De-Identification and Re-Identification
11:39 AI Disclosure and Contract Definitions
13:52 Human Review and High-Risk Decisions
16:54 Liability and Indemnification
19:25 Colorado Law and Intended Use
21:47 Prompt Data and DPA Scope
23:45 Negotiating AI Audit Rights
24:55 Exercising Vendor Oversight
28:20 Closing Thoughts

From AI-assisted interviews, applicant scoring tools, dash cams, targeted advertising and employee productivity monitoring, CCPA risk assessment obligations can arise in unexpected places. Podcast cohosts Joe Lazzarotti and Damon Silver discuss common practices that may now trigger these California requirements and offer practical guidance for building risk assessments into existing compliance workflows. 

New CCPA requirements are turning employers’ everyday data activity into potential compliance exposure. In this episode, Jackson Lewis Privacy, AI and Cybersecurity co-leaders Joe Lazzarotti and Damon Silver discuss the CCPA-defined “high-risk” activities that may trigger risk assessment obligations and offer practical guidance for building a workable assessment process, coordinating with vendors and documenting decisions in ways that supports compliance. 

Integrating AI into hiring and other employment processes increasingly raises important legal and compliance risks — especially if those tools cross the line from supporting decisions to making them. In this We Get Privacy episode, Jackson Lewis principals Damon Silver and Joe Lazzarotti explore California’s new Automated Decision-Making Technology regulations and offer employers subject to its requirements some practical guidance on evaluating the roles of automated tools and human oversight. 

#DataPrivacy #ArtificialIntelligence #Cybersecurity #TechRisk

As AI-powered smart glasses and related emerging tech blur the line between everyday activity and constant data collection, organizations face growing privacy, security and compliance risks. In this episode, Jackson Lewis Privacy, AI and Cybersecurity co-leaders Damon Silver and Joe Lazzarotti clarify what these technologies are, why they’re raising red flags across industries, and how employers should respond. 

Chapters

00:00 Introduction to AI Smart Glasses and Their Resurgence

02:46 What Are AI Smart Glasses and How Do They Work?

04:09 Privacy Risks and Ethical Concerns with Smart Glasses

05:25 Industry Responses and Bans on Smart Glasses

06:14 Legal Considerations for Recording and Data Collection

07:59 Challenges in Obtaining Consent and Managing Privacy

08:57 Regulatory Environment and Data Security in Different Sectors

10:01 Employer Policies and Banning Smart Glasses in the Workplace

11:06 Balancing Benefits and Risks of Smart Glasses in Business

11:45 Future Outlook and the Need for Governance and Controls

12:56 Conclusion and Key Takeaways for Organizations

Escalating vendor cyber risk, tighter regulatory expectations and fast-moving AI-driven threats increasingly make checkbox diligence insufficient. In this episode, 360 Advanced’s Director of Compliance Strategy, Eric Ratcliffe, joins co-hosts Damon Silver and Joe Lazzarotti to discuss system and organizational control framework reports and how businesses can use them to address critical gaps and make vendor assessments.

As AI tools, workplace monitoring technologies, and data‑driven platforms expand, organizations face growing exposure from collecting, sharing, and retaining more data than they need for defined purposes. In this episode of We Get Privacy, Jackson Lewis Principals Joe Lazzarotti and Damon Silver, co‑leaders of the firm’s Privacy, AI, and Cybersecurity group, break down the data minimization principle and how organizations can use it to better manage data breach, class action litigation, and regulatory risk.