3d ago

PP #036: The 30-Second Habit That Changes Stakeholder Conversations

PP #036: The 30-Second Habit That Changes Stakeholder Conversations Nobody raises their hand for a privacy impact assessment. The conversation before it is where the outcome gets decided. Episode Summary In this episode of Privacy Perspectives, host Jodi Daniels breaks down Dr. Alison Wood Brooks' TALK framework and how to run it through a privacy lens. You'll learn what 30 seconds of topic prep does to a conversation, what research on more than 2,000 conversations found about follow-up questions, and discover why assuming the marketing lead just wants to hit their KPIs gets you looped in early. Question of the Day 🗣️ Which letter of TALK is hardest for you in privacy conversations: Topics, Asking, Levity or Kindness? Key Take-aways Spend 30 seconds before a stakeholder call on what the team cares about: launch date, budget, the metric they ownAsk open-ended and follow-up questions; people who ask more of them are better liked and learn moreUse a little levity when the other person is bracing for a no, or when you're adding weeks to their timelineStart from the assumption that the marketing lead who wants the pixel is trying to hit their KPIsAcknowledge out loud that a privacy request is inconvenient, and always offer how to be helpfulTimestamped Outline ⏱️ 00:00 - Opening 00:26 - Zoom call #101 and the school calling 01:52 - "Take care of yourself, your family, and then work" 02:21 - Dr. Alison Wood Brooks and why most of us get conversations wrong 03:34 - Topics: 30 seconds of prep before every conversation 03:56 - Asking: open-ended and follow-up questions 04:53 - Levity: warmth when the other person is bracing for a no 05:13 - Kindness: the one privacy pros undervalue most 06:00 - What this has to do with privacy: running TALK through a privacy lens 07:09 - Connection through conversation, and this week's challenge Links & Resources 🔗 The Diary of a CEO with Dr. Alison Wood Brooks, "The Psychology Of Why People Don't Like You" -> https://podcasts.apple.com/us/podcast/harvards-behaviour-expert-the-psychology-of-why/id1291423644?i=1000741310444More episodes of The Diary of a CEO with Steven Bartlett -> https://stevenbartlett.com/doac/HBR IdeaCast, "The Keys to Great Conversation" (March 2025) -> https://hbr.org/podcast/2025/03/the-keys-to-great-conversationStudy: "It Doesn't Hurt to Ask: Question-Asking Increases Liking" (Journal of Personality and Social Psychology, 2017) -> https://www.hbs.edu/ris/Publication%20Files/Huang%20et%20al%202017_6945bc5e-3b3e-4c0a-addd-254c9e603c60.pdfDr. Alison Wood Brooks, Harvard Business School profile -> https://www.hbs.edu/faculty/Pages/profile.aspx?facId=684820Talk Studios (daily conversation ritual, conversation games, masterclass) -> https://www.talkstudios.com/Subscribe to Privacy Perspectives -> https://redcloveradvisors.com/Connect & CTA 🎯 👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts. 🎁 Every week, Privacy Perspectives breaks down what's happening in privacy and what it means for your business: https://redcloveradvisors.com/ Credits Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Oct 14

PP #034: Knowing Your Privacy Risks Is Only Part of the Process

PP #034: Knowing Your Privacy Risks Is Only Part of the ProcessA torn tire sidewall nobody noticed runs the same three steps a privacy program does. Episode Summary In this episode of Privacy Perspectives, host Jodi Daniels breaks down the three parts of managing privacy risk: identify it, evaluate it, and prepare a response. You'll learn how teams actually find privacy risk, why evaluating it needs a list of criteria and a way to measure each activity against it, and discover why not all risk mitigation can be planned. Question of the Day 🗣️ At work, if you had a privacy risk with a project or initiative, who would you call? Key Take-aways Find privacy risk through monthly conversations, PIAs, security risk assessments and vendor assessmentsEvaluate each activity against a list of criteria, knowing your company has its own risk toleranceWatch for projects flagged but not documented, or documented with no one following up on the riskPlan what you can, and be ready for just-in-time management where planning runs outPut customers first to center your company on what matters most and manage risk accordinglyTimestamped Outline ⏱️ 00:00 - Always check your car before driving it 00:09 - The sidewall tear nobody noticed 00:46 - What the searches said about driving on it 01:15 - The tow, the Uber, and the rainy day fund 02:16 - Why a tire story ties to privacy 02:52 - Identify risk: how teams actually find it 03:42 - Evaluate risk: criteria, measurement and risk tolerance 04:46 - The Syrenis webinar and what keeps going wrong 05:20 - Responding to the risk: insurance and just-in-time management 05:45 - The overall lesson: put customers first Links & Resources 🔗 Subscribe to Privacy Perspectives -> https://redcloveradvisors.com/Connect & CTA 🎯 👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts. 🎁 Every week, Privacy Perspectives breaks down what's happening in privacy and what it means for your business: https://redcloveradvisors.com/ Credits Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Sep 23

PP #033: Your Privacy Program Probably Has No Named Owners

PP #033: Your Privacy Program Probably Has No Named Owners Legal, marketing and product were all in the room. Nobody could say which cookie tool they had. Episode Summary In this episode of Privacy Perspectives, host Jodi Daniels breaks down why so many companies can't say who owns each part of their privacy program. You'll learn why an existing pixel with no prior review has to be treated as new, why each ad-tech vendor deserves its own review, and discover the six questions a good privacy charter answers. Question of the Day 🗣️ Which privacy area in your company has the least clear owner right now, the privacy notice, privacy rights, cookie consent software, data inventory, privacy risk assessments, TPRM, or training? Key Take-aways See what it costs when nobody owns the consent software, from pixel governance to an untested bannerLearn why an existing pixel with no prior review has to be treated as if everything is newUnderstand why Jodi recommends each ad-tech vendor get its very own reviewUse the six questions a good privacy charter answers, starting with who owns which part of privacySwap "the privacy team owns it" for a single named owner in each area of your programTimestamped Outline ⏱️ 00:00 - Opening: who's doing what at home 00:30 - The conversation where nobody could name the cookie tool 01:03 - Ownership confusion is common, not unusual 01:13 - New pixels, existing pixels, and why there is no baseline 01:53 - Ad-tech vendors, TPRM, and why each one gets its own review 02:44 - Why jumping straight to fixes feels right 03:45 - Why a privacy program needs a strategy 04:14 - The six questions a good charter answers 04:43 - Why "the privacy team owns it" is not specific enough 06:06 - What to ask in your next meeting Links & Resources 🔗 Privacy Program Management Guide -> https://redcloveradvisors.com/privacy-program-management-guide/IAB Diligence Platform (SafeGuard Privacy) -> https://safeguardprivacy.com/iab-diligence-platform/Subscribe to Privacy Perspectives -> https://redcloveradvisors.com/Connect & CTA 🎯 👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts. 🎁 Every week, Privacy Perspectives breaks down what's happening in privacy and what it means for your business: https://redcloveradvisors.com/ Credits Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Sep 16

PP #032: Nine Years In, and Growth Was Never the Goal

PP #032: Nine Years In, and Growth Was Never the Goal Two-thirds of businesses don't reach year ten. Nine years in, here is what she chose not to do. Episode Summary In this episode of Privacy Perspectives, host Jodi Daniels marks nine years of Red Clover Advisors with nine lessons from keeping a privacy consulting firm alive. You'll learn why being one of the fastest growing firms was never the goal, what it takes to hand work over when you are the detail-oriented one, and how nine years reshaped what privacy expertise even means. Question of the Day 🗣️ Of the nine lessons, which one resonates most with you, and which one are you still working on? Share in the comments. Key Take-aways See why a mission statement only counts once it shows up in your process, reports, and client languageLearn what turning down misaligned work protects, and why hard conversations happen by phoneUnderstand why knowing every role in your business first is what tells you which ones to outsourceHear why staying in one lane and referring the rest has been better business than expandingTrack what nine years did to the legal landscape, from GDPR alone to a state-by-state patchworkTimestamped Outline ⏱️ 00:00 - Opening - the first Red Clover call, at my kitchen table 01:13 - Nine years of a women-owned business, and the odds 02:14 - Have a mission statement 04:13 - Trusting people is hard, building a culture is harder 06:22 - Priorities aren't the same for every firm 07:54 - Know every role before you outsource any of it 08:58 - Stay in your lane even when you could expand 10:35 - Knowing how to actually take a break 11:59 - GDPR, CCPA and 23-plus state privacy laws 13:00 - The thread through all of it Links & Resources 🔗 Subscribe to Privacy Perspectives -> https://redcloveradvisors.com/Connect & CTA 🎯 👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts. 🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead: https://redcloveradvisors.com/ Credits Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Sep 9

PP #031: How a Retailer Got the Email I Never Gave Them

PP #031: How a Retailer Got the Email I Never Gave Them Six emails from a retailer she never signed up with landed in her work inbox in three days. Episode Summary In this episode of Privacy Perspectives, host Jodi Daniels breaks down how a retailer got her work email without her ever giving it, and why the obvious explanation, her husband's account, wasn't it. You'll learn how identity resolution vendors match anonymous website visitors to purchased email pools, and what privacy, marketing, and HR teams should be asking their vendors in writing. Question of the Day 🗣️ If you asked your marketing team today which identity resolution or household matching tools are in place, would you get vendor names back, or just a category? Share in the comments. Key Take-aways Learn why her husband's account wasn't the connection, though it's everyone's first guessUnderstand how identity resolution vendors match anonymous site visitors to purchased email poolsSee how a cold welcome sequence lands in a work inbox and the paper trail it leavesGet the questions privacy, marketing, and HR should be putting to vendors in writingKnow why a cookie banner and managed opt-outs don't cover this kind of data sharing Timestamped Outline ⏱️ 00:00 - Opening - six emails from a retailer I never signed up with 00:55 - Why it wasn't my husband's account 01:19 - This is the universe of adtech 02:49 - Identity resolution and email onboarding vendors 03:33 - What happens when this lands in a work email 05:04 - The privacy risk underneath this 08:02 - What each team should be asking: privacy, marketing, HR 10:28 - Just because we can, doesn't mean we should Links & Resources 🔗 Red Clover Advisors' marketing and cookie governance assessment -> https://redcloveradvisors.com/cookie-governance-checklist/Subscribe to Privacy Perspectives -> https://redcloveradvisors.com/ Connect & CTA 🎯 👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts. 🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead: https://redcloveradvisors.com/ Credits Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Sep 2

PP #030: What Privacy Framework Should You Adopt? NIST? ISO?

PP #030: What Privacy Framework Should You Adopt? NIST? ISO? A framework gets you organized. It doesn't make you compliant. Here's the gap most companies miss. Episode Summary In this episode of Privacy Perspectives, host Jodi Daniels breaks down why the NIST Privacy Framework - or any framework - was never built to tell you what the law actually requires. You'll learn where NIST's five functions stop and GDPR, CCPA, and state law obligations begin, and how to build the legal matrix underneath your framework. Question of the Day 🗣️ If you had to build the legal matrix underneath your framework this week, which requirement would you be least confident you have covered? Key Take-aways Understand why a security mindset breaks down when applied to privacy programsLearn what the NIST Privacy Framework's five functions actually cover, and don'tSee where Identify-P stops and GDPR's Article 30 and 35 obligations beginKnow the difference between a PIA, a DPIA, and CCPA's privacy risk assessmentGet the questions to ask before assuming one framework satisfies every lawTimestamped Outline ⏱️ 00:00 - Opening - the question I get asked on repeat 00:37 - Where a security mindset trips people up in privacy 01:52 - What the NIST Privacy Framework actually is 03:44 - Identify-P and GDPR Articles 30 and 35 04:40 - Govern-P, DPOs, and executive certification under CCPA 06:03 - Risk assessment, PIA, DPIA, PRA - not the same thing 07:44 - Where the specifics live: opt-out wording and sensitive data 10:28 - The GDPR and CCPA trap 13:40 - A framework gets you organized. The law gets you compliant. Links & Resources 🔗 Stauss Firm resource center (sensitive data categories chart) -> https://staussfirm.com/sparc/She Said Privacy, He Said Security: NIST AI RMF co-author episode -> https://redcloveradvisors.com/ai-governance-at-scale/Red Clover Advisors Privacy Program Assessment -> https://redcloveradvisors.com/privacyoperations/privacyprogramassessmentSubscribe to Privacy Perspectives -> https://redcloveradvisors.com/ Connect & CTA 🎯 👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts. 🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead: https://redcloveradvisors.com/ Credits Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Aug 26

PP #029: I Hosted 3 State Regulators. Here's What Gets Companies in Trouble

PP #029: I Hosted 3 State Regulators. Here's What Gets Companies in Trouble Three state privacy regulators, no slides, no talking points - here's what actually gets companies in trouble. Episode Summary In this episode of Privacy Perspectives, host Jodi Daniels breaks down what three state privacy regulators - from New Jersey, Delaware, and Connecticut - actually look for when they open an inquiry. You'll learn why documentation beats perfection, why opt-out symmetry matters, and why selling or sharing data doesn't end your responsibility for it. Question of the Day 🗣️ Of the five gaps regulators keep seeing - documentation, opt-outs, data sharing, stale notices, sensitive data - which one would your company need to close first? Key Take-aways Learn what a "good faith effort" looks like to regulators, and why perfection isn't the barSee why a documented paper trail beats one reconstructed after an inquiry letter arrivesUnderstand opt-out symmetry - one click to opt in can't become five to opt outKnow that selling or sharing data doesn't end your responsibility for how it's usedSpot the "last updated" warning light regulators use to size up your whole program Timestamped Outline ⏱️ 00:00 - Opening - a fireside chat with three state regulators 00:41 - Regulators are just people (and privacy offices are growing) 02:08 - Nobody's asking for perfect - documentation and good faith 03:11 - Why evasive answers drag investigations out 04:24 - Opt-outs: the freedom to choose, change, and choose again 05:59 - Selling data doesn't end your responsibility for it 07:13 - A stale privacy notice is a warning light 09:19 - Sensitive data, profiling, and kids 12:12 - Where it all lands: trust and compliance 13:33 - Poll results - operationalizing privacy Links & Resources 🔗 Connecticut Attorney General's CTDPA resource page -> https://portal.ct.gov/ag/sections/privacy/the-connecticut-data-privacy-actNewsletter: The Compliance Gap Hiding in Plain Sight -> https://redcloveradvisors.com/the-compliance-gap-hiding-in-plain-sight/Red Clover Advisors downloadable guides and templates -> https://redcloveradvisors.com/downloadable-resources/Schedule a consultation with Red Clover Advisors -> https://redcloveradvisors.com/contact/Follow Red Clover Advisors on LinkedIn -> https://www.linkedin.com/company/redcloveradvisors/Subscribe to Privacy Perspectives -> https://redcloveradvisors.com/ Connect & CTA 🎯 👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts. 🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead: https://redcloveradvisors.com/ Credits Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Aug 19

PVP #028: Your Cookie Banner Isn't Proof You're Compliant

PVP #028: Your Cookie Banner Isn't Proof You're Compliant The banner is up and the box is checked. That's usually where the checking stops, and where the gaps start. Episode Summary In this episode of Privacy Perspectives, host Jodi Daniels breaks down why a live cookie banner is not proof your consent setup is working. You'll learn the 7 places cookie compliance consistently breaks, which web properties fall off the radar while they keep collecting data, and what a lightweight, repeatable cookie audit process looks like. Question of the Day 🗣️ When's the last time someone actually checked whether your consent setup is doing what it should be doing? Share in the comments. Key Take-aways A cookie banner going live is a starting point, not proof the consent setup is doing what it shouldCookie compliance consistently breaks in 7 places, from cookies miscategorized as strictly necessary to a setup nobody wrote downGlobal Privacy Control working on one site does not mean it works across the rest of your propertiesLanding pages, recruiting sites and microsites fall off the radar first while they keep collecting dataScanning tools help, but a repeatable audit process on a set schedule is what actually closes the gaps Timestamped Outline ⏱️ 00:00 - Opening: why cookie audits are in demand right now 00:19 - Set it up, feel good, move on: the pattern behind the gap 00:57 - The retailer example: what "handled" looks like from the outside 01:17 - What the audit actually found 01:52 - The 7 places the gap consistently shows up 04:26 - Why the gaps hide: the web property inventory 04:41 - Scanning tools, and why a tool alone isn't enough 05:24 - What this means for your program 06:22 - The question to ask this week Links & Resources 🔗 Red Clover Advisors' guide to building a repeatable cookie audit process → https://redcloveradvisors.com/cookie-audit-process/Subscribe to Privacy Perspectives → https://redcloveradvisors.com/ Connect & CTA 🎯 👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts. 🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead. Subscribe so you don't miss the next one: https://redcloveradvisors.com/ Credits Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Aug 5

PVP #026: Every Freedom You Celebrate Depends on This One

PVP #026: Every Freedom You Celebrate Depends on This One250 years of celebrating freedom, and one right never makes the toast. Episode Summary In this episode of Privacy Perspectives, host Jodi Daniels marks 250 years of independence by making the case that privacy is the freedom holding up every other one we celebrate. You'll learn why privacy looks like early democracy right now, which three rights matter most to consumers, and why the person building the privacy program is also the person it is meant to protect. Question of the Day 🗣️ What part of privacy work do you wish more people understood or appreciated? Share it in the comments. Key Take-aways Privacy looks like early democracy: the intention is declared, but the systems are still being builtThree rights anchor it: knowing what data a company holds, asking for deletion, and saying no to how it is usedThe patchwork of state privacy laws means the rules still shift depending on where you livePrivacy is not one freedom sitting beside the others, it is the one holding them upThe person building the privacy program is a consumer too, protected by the same work Timestamped Outline ⏱️ 00:00 - Opening: July 4th memories and what 250 years marks 01:50 - Freedom and privacy are not that different 02:08 - The patchwork of state privacy laws 02:46 - Privacy is the freedom holding the others up 03:54 - You are a consumer too 05:17 - The fight is not over, and that is the point 06:44 - Happy 250th: closing Links & Resources 🔗 Subscribe to Privacy Perspectives → https://redcloveradvisors.com/ Connect & CTA 🎯 👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts. 🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead. Subscribe so you don't miss the next one: https://redcloveradvisors.com/ Credits Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Jul 29

PP #025: Nobody Owns Your Privacy Rights Process

PP #025: Nobody Owns Your Privacy Rights Process A deletion request hits your web form, bounces between marketing and legal, and the 45-day clock keeps running. Episode Summary In this episode of Privacy Perspectives, host Jodi Daniels breaks down why privacy rights requests fall apart - not because companies skip the whole program, but because nobody owns the end-to-end process. You'll learn how to map every team that touches a request, why response templates sitting in a shared drive are not a process, and what a short practical training actually needs to cover. Question of the Day 🗣️ If a deletion request came in tomorrow, could your team handle it start to finish without improvising? Tell us what's working (or what's missing) in the comments. Key Take-aways Most companies have the pieces - a web form, an inbox, templates - but never connected them into one processMap every step from intake to documentation, then name an owner and a handoff for each oneAny step without a clear owner or a documented handoff is where the process will fall apartEmployee requests operate differently than consumer requests and pull in HR and sometimes outside counselTraining does not need to be a long compliance course, just what to do first and who owns each step Timestamped Outline ⏱️ 00:00 - Opening: the workout that wouldn't let go of a privacy problem 01:18 - When a deletion request lands with marketing 01:53 - Employee requests vs consumer requests: different handling, same confusion 02:25 - The ownership problem nobody names 03:30 - Having a template is not the same as having a process 04:38 - Know where the data is: why data inventory matters 05:01 - A policy without training goes nowhere 06:24 - The rep that connects everything 07:03 - The question to ask yourself this week Links & Resources 🔗 Red Clover Advisors Privacy Rights Guide → https://redcloveradvisors.com/privacy-rights-roadmap-business-guide/Subscribe to Privacy Perspectives → https://redcloveradvisors.com/ Connect & CTA 🎯 👉 Enjoyed this? Subscribe & leave a review on Apple Podcasts. 🎁 Every week, Privacy Perspectives breaks down what's happening in privacy, what it means for your business, and how to stay ahead. Subscribe so you don't miss the next one: https://redcloveradvisors.com/ Credits Host: Jodi Daniels © 2026 Red Clover Advisors. All rights reserved.

Privacy Perspectives with Jodi Daniels

Episodes

PP #036: The 30-Second Habit That Changes Stakeholder Conversations

PP #034: Knowing Your Privacy Risks Is Only Part of the Process

PP #033: Your Privacy Program Probably Has No Named Owners

PP #032: Nine Years In, and Growth Was Never the Goal

PP #031: How a Retailer Got the Email I Never Gave Them

PP #030: What Privacy Framework Should You Adopt? NIST? ISO?

PP #029: I Hosted 3 State Regulators. Here's What Gets Companies in Trouble

PVP #028: Your Cookie Banner Isn't Proof You're Compliant

PVP #026: Every Freedom You Celebrate Depends on This One

PP #025: Nobody Owns Your Privacy Rights Process

About

Information