Practical Privacy with Orla Dormer

Orla Dormer
  • 0,0 (0)
  • ECONOMÍA Y EMPRESA
  • SEMANAL

Practical Privacy is a podcast for privacy professionals who want to understand how privacy and AI governance work in the real world. Hosted by Orla Dormer, the series brings together experienced practitioners to discuss common operational challenges, from scaling GDPR programs and answering data questions internally, to navigating AI governance and legacy tooling constraints. Each episode focuses on practical lessons, honest reflections, and what teams wish they had known earlier. This podcast is designed as a reference for privacy leaders looking to improve how privacy actually operates inside organisations.

Episodios

  1. How privacy teams can deliver proactive change | Ben Westwood

    HACE 5 D

    How privacy teams can deliver proactive change | Ben Westwood

    In Episode 12 of Practical Privacy, Orla Dormer is joined by Ben Westwood, Head of Compliance and DPO at the Motor Insurers’ Bureau, to discuss one of the biggest challenges facing privacy and compliance professionals today: How do you deliver proactive change when reactive work never stops? Ben shares how structured annual planning, maturity assessments, risk registers, and alignment with business objectives have transformed the way his team delivers privacy and compliance outcomes. We discuss:Why every privacy team should have a strategic planHow to balance proactive vs reactive workUsing maturity assessments to prioritise effortConnecting privacy goals to wider business objectivesGetting executive buy-in for compliance initiativesThe importance of reviewing and demonstrating progressA practical conversation packed with actionable ideas for privacy leaders, DPOs, and compliance professionals trying to create meaningful change inside busy organisations.

    12 min
  2. Building a Scalable Vendor Assessment Process (GDPR & NIS2) | Natalija Bitiukova

    12 MAY

    Building a Scalable Vendor Assessment Process (GDPR & NIS2) | Natalija Bitiukova

    Building a scalable vendor assessment process sounds straightforward—until you’re dealing with 50,000+ vendors across 40+ countries.In this episode, Natalija Bitiukova (Head of Data Protection & Digital Law at Carlsberg) shares how her team tackled this challenge in practice, moving beyond fragmented systems and “paper compliance” to a more operational, scalable approach.We discuss: The pitfalls of running privacy and security assessments separatelyWhy most vendor assessments fail after the questionnaire stageHow to simplify assessments for real users (not lawyers)The importance of data quality and realistic resourcingChange management in large, decentralized organisationsGetting leadership buy-in by framing compliance as a business issueA practical conversation for anyone working on vendor risk, GDPR, NIS2, or scaling compliance processes. About the podcast: Practical Privacy explores how privacy and security teams solve real-world challenges at scale. Brought to you by TrustWorks https://www.trustworks.io/

    8 min
  3. Being a global data protection leader (why privacy alone isn’t enough) | Vicky Owens

    4 MAY

    Being a global data protection leader (why privacy alone isn’t enough) | Vicky Owens

    In this episode of Practical Privacy, Orla Dormer speaks with Vicky Owens, Senior Data Privacy and Compliance Counsel at SkyShowtime, about the challenges of being a global data protection leader. Vicky shares why a privacy-only mindset often falls short, and how understanding business priorities, aligning with stakeholders, and positioning privacy as an enabler is key to success. A practical conversation on influence, prioritisation, and making privacy work in complex organisations.

    5 min
  4. Designing a global privacy framework (what actually works) | Marcelo Canha

    4 MAY

    Designing a global privacy framework (what actually works) | Marcelo Canha

    What does it take to build a global privacy framework that actually works? In this episode, Marcelo Canha, Global Privacy Director and DPO at Organon, shares his experience designing a privacy program from scratch across 80+ countries — starting with a technically perfect framework that ultimately failed. The lesson? Complexity doesn’t scale. Marcelo explains how shifting to a simple, practical approach — focused on DPIAs, RoPAs, and real business needs — made the difference, and why buy-in is not just a buzzword, but a strategy. A must-listen for privacy leaders navigating global compliance, limited resources, and the gap between regulation and reality.

    9 min
  5. How to become a DPO (without a traditional background) | Naveed Malik

    8 ABR

    How to become a DPO (without a traditional background) | Naveed Malik

    What does it really take to become a DPO? In this episode, Naveed Malik (Group DPO at Informa) shares his journey from a non-traditional background into a senior privacy role — and why technical expertise alone isn’t enough. From building leadership skills outside of work to learning inside established governance frameworks, this episode explores the practical steps needed to bridge the gap and grow into a DPO role.

    11 min
  6. Customer DPAs and the overuse of SCCs: Fixing data transfer friction | Roy Kamp

    30 MAR

    Customer DPAs and the overuse of SCCs: Fixing data transfer friction | Roy Kamp

    In this episode of Practical Privacy, Orla Dormer speaks with Roy Kamp, Director at UKG and former DPO at Wayfair and McAfee, about a common challenge in vendor negotiations: customers insisting on Standard Contractual Clauses (SCCs) even when they may not apply. Roy explains why this happens, why negotiating every SCC request doesn’t scale, and how reframing the discussion around actual data flows rather than contractual positions can reduce friction and improve trust with customers. The conversation explores practical ways privacy teams can enable sales and legal teams, use transparency to build credibility, and avoid unnecessary complexity in customer DPAs.

    10 min
  7. Stop calling it anonymous: The reality of pseudonymized data in SaaS | Noemie Weinbaum

    18 MAR

    Stop calling it anonymous: The reality of pseudonymized data in SaaS | Noemie Weinbaum

    In this episode of Practical Privacy, we explore one of the most common misconceptions in SaaS and AI development: the belief that data can truly be fully anonymized. Orla Dormer speaks with Noemie Weinbaum – Managing Counsel at UKG, about why organizations should stop assuming their datasets are anonymous and instead treat them as pseudonymized personal data. They discuss why true anonymization is extremely difficult under GDPR standards, how SaaS companies often use the same datasets for both service delivery and AI training, and why this creates real risks around re-identification, compliance, and customer trust. Noemie also shares practical advice on building the right governance approach from the start — integrating privacy into the software development lifecycle, involving product and engineering teams early, and creating a cultural shift toward transparent data protection practices.

    8 min
  8. Why privacy programs fail at implementation | Avishay Klein

    9 MAR

    Why privacy programs fail at implementation | Avishay Klein

    In this episode of Practical Privacy, Orla Dormer speaks with Avishay Klein, Head of Privacy, AI and Cyber Department at Barnea Jaffa Lande. They discuss why privacy programs often fail at implementation — from unrealistic data retention timelines to top-down governance models that teams cannot operationalise. The conversation explores practical ways to align GDPR and AI governance requirements with real business capabilities, emphasising collaboration, understanding operational constraints, and designing processes that teams can actually implement.

    10 min
  9. Making privacy & AI governance training actually engaging | Jared Browne

    23 FEB

    Making privacy & AI governance training actually engaging | Jared Browne

    How do you make AI Act and GDPR training something people actually pay attention to? In this episode of Practical Privacy, Orla Dormer speaks with Jared Browne, Fexco Group Head of Privacy & AI Governance, about turning regulatory training into engaging, story-driven experiences. From framing AI Act sessions as a murder mystery to delivering AI literacy as a playful “Overlords of the Rings” narrative, Jared shares how storytelling, humor, and structure dramatically improve attention and retention.

    10 min
  10. Embedding AI governance across 39 countries | Martin Woodward

    12 FEB

    Embedding AI governance across 39 countries | Martin Woodward

    Embedding AI governance across 39 countries is not just a compliance exercise, it’s a change management challenge. In this episode of Practical Privacy, Orla Dormer speaks with Martin Woodward, Director Global Legal & Global Responsible AI Officer at Randstad, about building a global AI governance program in a decentralized organization. Martin shares why a centralized, top-down approach led to slow adoption, and how appointing Responsible AI Officers in each market transformed engagement and ownership. He also explains why culture should shape your governance strategy, especially in a human-centric organization. If you're starting or scaling AI governance, this episode offers practical lessons on turning principles into action across borders.

    7 min
  11. Why Privacy can’t be solved by legal teams alone | Helen Graham

    29 ENE

    Why Privacy can’t be solved by legal teams alone | Helen Graham

    In Episode 2 of Practical Privacy, Orla Dormer is joined by Helen Graham (Global Head of Privacy at IVC Evidensia) to unpack one of the biggest challenges privacy teams face today: keeping up with a constant wave of new and evolving data legislation. Helen shares why compliance can’t be treated as a legal exercise alone, how operational context is critical to assessing real business impact, and why effective privacy programmes depend on cross-functional and cross-border collaboration.  The conversation also reflects on leadership, buy-in, and the ongoing need for privacy professionals to explain and defend why privacy matters, even after years in the role. A practical discussion for anyone working to make privacy scalable, sustainable, and embedded in the business.

    12 min
  12. When RoPA becomes a checkbox (and how to fix It) | Dave Evans

    22 ENE

    When RoPA becomes a checkbox (and how to fix It) | Dave Evans

    In this first episode of Practical Privacy, Orla Dormer sits down with Dave Evans to unpack a problem many privacy teams recognise instantly: having a ROPA that technically exists, but does not actually help you answer real questions.

    11 min
  • 12 episodios

Información

Practical Privacy is a podcast for privacy professionals who want to understand how privacy and AI governance work in the real world. Hosted by Orla Dormer, the series brings together experienced practitioners to discuss common operational challenges, from scaling GDPR programs and answering data questions internally, to navigating AI governance and legacy tooling constraints. Each episode focuses on practical lessons, honest reflections, and what teams wish they had known earlier. This podcast is designed as a reference for privacy leaders looking to improve how privacy actually operates inside organisations.

Ficha técnica