Practical Privacy with Orla Dormer

Orla Dormer

Practical Privacy is a podcast for privacy professionals who want to understand how privacy and AI governance work in the real world. Hosted by Orla Dormer, the series brings together experienced practitioners to discuss common operational challenges, from scaling GDPR programs and answering data questions internally, to navigating AI governance and legacy tooling constraints. Each episode focuses on practical lessons, honest reflections, and what teams wish they had known earlier. This podcast is designed as a reference for privacy leaders looking to improve how privacy actually operates inside organisations.

  1. 7h ago

    Automating processor RoPAs & proving privacy's business value| Adrien Hug-Korda

    Keeping a processor Record of Processing Activities up to date is one of the least glamorous—but most critical—operational challenges in privacy. In this episode, Orla Dormer is joined by Adrien Hug-Korda, European Data Protection Board Expert and former Privacy Director at Contentsquare, to discuss how privacy teams can automate processor RoPAs, manage large-scale processing operations, and build compliance processes that continue working as organisations grow. Adrien shares practical lessons from the digital marketing industry, explains how to avoid creating compliance processes that rely on constant manual effort, discusses handling DSRs in cookie-based environments, and offers advice on showing the business value of privacy programmes to leadership. If you're responsible for privacy operations, governance, or compliance at scale, this episode is full of practical ideas you can apply immediately. 📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise. 🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

    Automating processor RoPAs & proving privacy's business value| Adrien Hug-Korda

  2. 7h ago

    Operationalising AI governance in a high-growth fintech environment | Taylor Galusha

    What does practical AI governance actually look like day to day in a high-growth FinTech environment? In this episode of Practical Privacy, Orla Dormer speaks with Taylor Galusha, Lead Privacy and AI Counsel at Chime, about operationalising AI governance through scalable AI vendor assessments. Taylor explains why manual reviews are difficult to sustain, how robust playbooks can create consistency, and how AI can support the first draft of vendor assessment reviews when given clear guidance, examples, and logic trees. This episode explores how privacy and AI governance teams can move faster, escalate risks more clearly, and build stronger documentation — without removing human judgement from the final decision. 📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise. 🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

    Operationalising AI governance in a high-growth fintech environment | Taylor Galusha

  3. Jul 2

    Why privacy programmes fail to scale | Cristina Costache

    Most organisations have privacy policies. Far fewer have privacy capabilities that actually scale. In this episode, Cristina Costache, DPO & CISO at Noventiq, explores one of the most persistent challenges facing privacy teams: transforming compliance from a documentation exercise into an operational capability embedded within the organisation. 📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise. 🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

    Why privacy programmes fail to scale | Cristina Costache

  4. Jun 23

    Scaling ROPA, PIAs & privacy documentation across 1,000+ applications | Aaron Mendelsohn

    How do you complete privacy documentation across hundreds of teams and more than 1,000 applications without overwhelming the business? In this episode of Practical Privacy, Orla Dormer is joined by Aaron Mendelsohn, Director and Senior Privacy Officer at The LEGO Group, to discuss how his team rebuilt and scaled privacy documentation across a large global organisation. Aaron explains how they combined privacy technology, risk-based prioritisation, and extensive team enablement to successfully document over 1,000 applications within a 12-month period. He also shares why privacy professionals need to move beyond policy writing and spend more time understanding how product and engineering teams actually work. This episode covers: • Scaling ROPAs, PIAs and privacy documentation programmes • Using risk-based approaches to focus effort where it matters most • The role of change management in privacy success • Building stronger relationships with internal stakeholders • Creating sustainable compliance processes that teams will actually use • Future opportunities to combine privacy, AI and broader compliance assessments A practical conversation for privacy leaders, DPOs and compliance professionals looking to improve documentation processes without creating unnecessary friction for the business. 📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise. 🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

    Scaling ROPA, PIAs & privacy documentation across 1,000+ applications | Aaron Mendelsohn

  5. Jun 11

    Enhancing privacy, security & compliance without slowing business growth | Fred Descloux

    In this episode of Practical Privacy, Orla Dormer is joined by Fred Descloux, privacy, security, and governance leader, to discuss how organisations can align engineering, security, privacy, and compliance in fast-moving environments where execution speed is critical. Drawing on his experience in highly regulated industries, Fred shares why traditional compliance approaches often create friction, bottlenecks, and what he describes as "compliance theatre"—generating documentation without meaningfully reducing risk. Together they explore how to: • Embed privacy and security directly into engineering workflows • Move away from compliance as a gatekeeping function • Focus on outcomes rather than perfection • Build scalable operating models that support growth • Make privacy and security everyone's responsibility • Avoid creating bottlenecks while maintaining strong controls • Prepare for audits through operational excellence rather than audit-driven processes • Balance business agility with regulatory expectationsA practical conversation for privacy professionals, security leaders, compliance teams, and anyone trying to support innovation without compromising governance. 🎧 Follow Practical Privacy for more real-world lessons from privacy, security, and compliance leaders. 📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise. 🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

    Enhancing privacy, security & compliance without slowing business growth | Fred Descloux

  6. Jun 2

    How to be a digital enabler without compromising compliance | Naureen Hussain

    Traditional privacy teams were never designed for agile digital transformation. In this episode of Practical Privacy, Orla Dormer speaks with Naureen Hussain, Founder of Luminate Advisers and former DPO at Virgin Media, about how privacy leaders can support rapid digital transformation without compromising compliance or creating unacceptable risks. Naureen shares why adding more privacy resources initially failed, how her team embedded into product and digital workflows, and why adopting a product mindset fundamentally changed the way the privacy function operated. The conversation explores cross-functional collaboration, agile delivery, privacy by design, and the importance of experimentation and user-centric compliance processes. 📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise. 🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

    How to be a digital enabler without compromising compliance | Naureen Hussain

  7. May 21

    How privacy teams can deliver proactive change | Ben Westwood

    In Episode 12 of Practical Privacy, Orla Dormer is joined by Ben Westwood, Head of Compliance and DPO at the Motor Insurers’ Bureau, to discuss one of the biggest challenges facing privacy and compliance professionals today: How do you deliver proactive change when reactive work never stops? Ben shares how structured annual planning, maturity assessments, risk registers, and alignment with business objectives have transformed the way his team delivers privacy and compliance outcomes. We discuss:Why every privacy team should have a strategic planHow to balance proactive vs reactive workUsing maturity assessments to prioritise effortConnecting privacy goals to wider business objectivesGetting executive buy-in for compliance initiativesThe importance of reviewing and demonstrating progressA practical conversation packed with actionable ideas for privacy leaders, DPOs, and compliance professionals trying to create meaningful change inside busy organisations. 📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise. 🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

    How privacy teams can deliver proactive change | Ben Westwood

  8. May 12

    Building a Scalable Vendor Assessment Process (GDPR & NIS2) | Natalija Bitiukova

    Building a scalable vendor assessment process sounds straightforward—until you’re dealing with 50,000+ vendors across 40+ countries.In this episode, Natalija Bitiukova (Head of Data Protection & Digital Law at Carlsberg) shares how her team tackled this challenge in practice, moving beyond fragmented systems and “paper compliance” to a more operational, scalable approach.We discuss: The pitfalls of running privacy and security assessments separatelyWhy most vendor assessments fail after the questionnaire stageHow to simplify assessments for real users (not lawyers)The importance of data quality and realistic resourcingChange management in large, decentralized organisationsGetting leadership buy-in by framing compliance as a business issueA practical conversation for anyone working on vendor risk, GDPR, NIS2, or scaling compliance processes. About the podcast: Practical Privacy explores how privacy and security teams solve real-world challenges at scale. Brought to you by TrustWorks https://www.trustworks.io/ 📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise. 🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

    Building a Scalable Vendor Assessment Process (GDPR & NIS2) | Natalija Bitiukova
See All (18)

About

Practical Privacy is a podcast for privacy professionals who want to understand how privacy and AI governance work in the real world. Hosted by Orla Dormer, the series brings together experienced practitioners to discuss common operational challenges, from scaling GDPR programs and answering data questions internally, to navigating AI governance and legacy tooling constraints. Each episode focuses on practical lessons, honest reflections, and what teams wish they had known earlier. This podcast is designed as a reference for privacy leaders looking to improve how privacy actually operates inside organisations.

Information