Masters of Privacy

Sergio Maldonado

Interviews and updates at the intersection of marketing, data, privacy, and technology. With an eye on a human-centric, demand-led future in which transparency, control, and personal agency play a crucial role. Sergio Maldonado (host) is a dual-qualified lawyer, entrepreneur, investor, guest lecturer at various universities. LL.M in IT & Internet Law, FIP, CIPP/E/US, CIPT. www.mastersofprivacy.com

  1. Gabriela Zanfir-Fortuna: GDPR changes, AI Act hangover, Russmedia

    5D AGO

    Gabriela Zanfir-Fortuna: GDPR changes, AI Act hangover, Russmedia

    Dr. Gabriela Zanfir-Fortuna is a globally recognized data protection law expert, with 15 years of experience in the field split between Europe and the U.S., spanning academia, public service, consulting and policy. She currently is Vice President for Global Privacy at the Future of Privacy Forum, a global non-profit headquartered in Washington DC, coordinating FPF’s offices and partners in Brussels, Tel Aviv, Singapore, Nairobi, and New Delhi, and leading the work on global privacy and data protection developments related to new technologies, including AI. She is also a founding Advisory Board Member of Women in AI Governance, and an affiliated researcher to the LSTS Center of Vrije Universiteit Brussel. Dr. Zanfir-Fortuna worked for the European Data Protection Supervisor and is a member of the Reference Panel of the Global Privacy Assembly – the international organization reuniting data protection authorities around the world, as well as a member of the T20 engagement group of the G20 under Brazil’s Presidency in 2024. She was elected to be part of the Executive Committee of ACM’s Fairness, Accountability and Transparency (FaccT) Conference (2021-2022). Her scholarship on the GDPR is referenced by the Court of Justice of the EU, and in 2023 she won the Stefano Rodota Award of the Council of Europe for the paper “The Thin Red Line: Refocusing Data Protection Law on Automated-Decision-Making“, alongside her co-authors. Dr. Zanfir-Fortuna holds a PhD in Law with a thesis on the rights of the data subject under EU Data Protection Law, and an LLM in Human Rights (University of Craiova). With our guest, here for a third time, we have gone through the logic of the Digital Omnibus package aiming to reform a cluster of important EU regulations, the “birth defects” of the AI Act, the importance of South Korea in the global data protection panorama, and the potential consequences of the recent CJEU case, Russmedia. References: * Gabriela Zanfir-Fortuna at the Future of Privacy Forum * Gabriela Zanfir-Fortuna on LinkedIn * Gabriela Zanfir-Fortuna: A world tour of data protection laws (Masters of Privacy, April 2021) * Data Protection vs. Privacy and Data Privacy: a January 28th conundrum (with Gabriela Zanfir-Fortuna, Masters of Privacy - 2025) * X v Russmedia Digital SRL (CJEU, December 2, 2025). This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe

    39 min
  2. Jacob Feder: Data Clean Rooms, revisited

    FEB 1

    Jacob Feder: Data Clean Rooms, revisited

    It is time to revisit Data Clean Rooms, having dedicated seven previous episodes to the topic across both the English and Spanish-language channels. The convergence of advanced data management techniques, more mature Privacy Enhancing Technologies, and sophisticated 1st-party data-based collaboration scenarios (on the back of AI, retail media, and Connected TV) already call for frequent updates. This is now accompanied by a more nuanced legal analysis that will benefit from the recent EDPS v. SRB (CJEU) case (on the relative nature of “personal data”). Some common, burning questions that you will find answered in this episode: How do you apply Joint Controllership agreements to the various stages in common business cases? How to handle more complex relationships involving two or more parties? References: * Jacob Feder on LinkedIn * Jacob Feder at Fieldfisher * Peter Craddock: EDPS v SRB, the relative nature of personal data, processors, transparency, impact on MarTech and AdTech (Masters of Privacy, September 2025) * Nicola Newitt (Infosum): the legal case for Data Clean Rooms (Masters of Privacy, March 2023) * Matthias Eigenmann (Decentriq): Confidential Computing, contractual relationships and legal bases for Data Clean Rooms (Masters of Privacy, March 2024) * Damien Desfontaines: Differential Privacy in Data Clean Rooms (Masters of Privacy, January 2024) * Guidelines 8/2020 on the targeting of social media users * Fashion ID GmbH & Co. KG v Verbraucherzentrale NRW (CJEU, 2019): The operator of a website that features a Facebook ‘Like’ button can be a controller jointly with Facebook in respect of the collection and transmission to Facebook of the personal data of visitors to its website. * Digital Omnibus Regulation Proposal (EU Commission, November 19th 2025) * Meta Platforms Inc and Others v Bundeskartellamt (CJEU, 2023) This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe

    38 min
  3. Sam Kaplan: Cybersecurity in the age of agentic AI, deep fakes, and social engineering

    JAN 25

    Sam Kaplan: Cybersecurity in the age of agentic AI, deep fakes, and social engineering

    Can AI agents be deployed for enhanced protection? What is a “triple extortion”? How is ransomware evolving? Is there hope for SMEs? Sam Kaplan is a policy, legal, and national security professional with over eighteen years of experience across the public and private sectors. He is currently the Assistant General Counsel for Public Policy & Government Affairs at Palo Alto Networks, providing legal guidance on domestic and international legislative, regulatory, and policy matters, with a focus on cybersecurity, AI governance, privacy, data security, international data flows, and public-private capacity building. Before Palo Alto Networks, Sam led the global product policy team for Facebook’s News Feed and News Tab at Meta Platforms, addressing issues like AI/ML fairness, algorithmic transparency, platform integrity, election security, misinformation, and harmful content. Prior to his private sector roles, Sam spent over thirteen years in the Federal Government. He held senior leadership positions at the U.S. Department of Homeland Security, including Assistant Secretary for Cyber, Infrastructure, Risk and Resilience Policy and Chief Privacy Officer. Earlier government roles included work at the U.S. Department of Justice (Office of Legal Policy, Bureau of Alcohol, Tobacco, Firearms and Explosives, and U.S. Attorney’s Office for the Eastern District of Virginia) and as Counselor to a member of the Privacy and Civil Liberties Oversight Board, focusing on the U.S. Intelligence Community. References: * Sam Kaplan on LinkedIn * Palo Alto Networks * Unit 42 Research (Palo Alto Networks) * Cyber Information Sharing and Collaboration Program (CISCP) at CISA (Cybersecurity and Infrastructure Security Agency) This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe

    36 min
  4. Newsroom: Fall 2025

    12/16/2025

    Newsroom: Fall 2025

    It is time for a seasonal update at the intersection of Marketing, Data, Privacy and Technology. We will stick to our usual five blocks: ePrivacy & regulatory updates; MarTech & AdTech; AI, Competition and Digital Markets; PETs, Zero-Party Data and Customer Centricity; Future of Media. This season’s update includes: * CJEU Russmedia decision (“mere conduit” safe harbour overridden by a marketplace’s role as a data controller) * EU/UK DPA fines (LastPass-ICO, Infobel-APDB, AMEX-CNIL, AENA-AEPD) * California: Public enforcement (by both the AG -JamCity, SlingTV- and the CPPA) and status of CIPA lawsuits * Texas’ AG vs. TV manufacturers * New legislation: EU Digital Omnibus, California’s spree, US Executive Order on AI * Most recent adventures and daring moves of Meta, OpenAI, Google, Apple and X in the face of MarTech/AdTech constraints, market dynamics, antitrust actions and other enforcement initiatives. (Our referenced monographic episode on CIPA/VPPA litigation is available here.) All references and links can be found in a separate blog post available to Masters of Privacy Connect subscribers on our website’s Newsroom section (Newsroom Notes: Fall 2025). Our usual disclaimer: the voice that joins Sergio today is a text-to-speech output generated with Eleven Labs. Happy Holidays to all of you :) This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe

    29 min
  5. Stefano Bennati: dealing with privacy threats in generative AI

    11/23/2025

    Stefano Bennati: dealing with privacy threats in generative AI

    Dr. Stefano Bennati has over a decade of experience developing tools and processes to ensure data-centric organizations comply with privacy, licensing, and responsible AI standards. Our guest has led privacy engineering and responsible AI teams with a global mandate. His work includes building and deploying compliance tools such as code scanners, AI-powered algorithms for personal data detection and anonymization, design processes for compliance with ISO 27701 Privacy IMS and ISO 42001 AI IMS standards. His latest work is a book (co-authored with Dr. Engin Bozdağ) is titled “AI Governance: Secure, privacy-preserving, ethical systems”, a practical and accessible guide to govern AI and mitigate security, privacy, ethics and regulatory risks. References: * Dr. Stefano Bannati on LinkedIn * AI Governance: Secure, privacy-preserving, ethical systems (Engin Bozdağ, Stefano Bennati) - Use this code to get a 50% discount between Nov 25 and Dec 9th 2025: MLBozdag. * Lokke Moerel: using personal data in the development and deployment of AI models (Masters of Privacy, December 2024) * An overview of machine unlearning (Chunxiao Li et al., 2025) * Discussion Paper: Large Language Models and Personal Data (Hamburgische Beauftragte für Datenschutz und Informationsfreiheit) * EDPB Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe

    35 min

Ratings & Reviews

5
out of 5
7 Ratings

About

Interviews and updates at the intersection of marketing, data, privacy, and technology. With an eye on a human-centric, demand-led future in which transparency, control, and personal agency play a crucial role. Sergio Maldonado (host) is a dual-qualified lawyer, entrepreneur, investor, guest lecturer at various universities. LL.M in IT & Internet Law, FIP, CIPP/E/US, CIPT. www.mastersofprivacy.com

You Might Also Like