She Said Privacy/He Said Security

Jodi and Justin Daniels
She Said Privacy/He Said Security

This is the She Said Privacy / He Said Security podcast with Jodi and Justin Daniels. Like any good marriage, Jodi and Justin will debate, evaluate, and sometimes quarrel about how privacy and security impact business in the 21st century.

  1. قبل ٥ أيام

    Integrating Privacy Across Healthcare, Retail, and Business Operations

    Natalie LaPorta is the Chief US Privacy Officer for Walgreens, where she focuses on various privacy matters that impact US patient and consumer data privacy, including state and federal data privacy compliance, complex contract negotiations, digital privacy, de-identification, AI, analytics, and marketing. Prior to her most recent role at Walgreens, Natalie was an Associate Attorney at Dentons US LLP, where she handled healthcare regulatory, tax-exempt bond finance, and M&A matters. She holds a bachelor’s degree in political science from Benedictine University and a law degree from The John Marshall Law School. In this episode… New privacy laws, requirements, and expanding health data definitions require organizations to rethink and adjust their privacy programs accordingly. For companies like Walgreens, navigating these changes entails addressing both long-standing regulations, such as HIPAA, and emerging privacy laws that govern a broader scope of data. As businesses juggle diverse regulatory requirements, shifting data definitions, and operational demands, how can they create a privacy program that is effective and adaptable? Walgreens’ approach to privacy exemplifies how businesses can adapt to an evolving regulatory landscape. Effective privacy programs start with understanding how shifting privacy requirements impact different business functions, from marketing to IT and analytics. With privacy regulations now extending beyond HIPAA to include other forms of personal information, companies need to develop tailored privacy strategies, provide ongoing education, and build strong relationships across departments to ensure privacy measures are integrated into everyday business operations. By making privacy a proactive and collaborative effort, companies can enhance compliance and reduce risks. In this episode of She Said Privacy/He Said Security, Jodi and Justin Daniels speak with Natalie LaPorta, Chief US Privacy Officer at Walgreens, about the evolution of privacy programs in the healthcare and retail sectors. Natalie shares her journey of building a privacy legal function at Walgreens, the importance of building cross-functional relationships, and how tailored approaches can address privacy challenges. She also offers practical advice for creating a privacy culture and shares insights on navigating vendor relationships and using technology to support compliance efforts.

    ٢٩ من الدقائق
  2. ٢ رجب

    Developing Resilient Cybersecurity Strategies for Businesses

    Shay Colson is a Co-founder and Managing Partner at Intentional Cybersecurity, a risk assessment and strategic advisory firm. After spending his early career as a security engineer for the US Government, he worked for a global consulting firm.  In this episode… The evolving cyber landscape constantly presents new challenges that require businesses to elevate their cybersecurity posture. With the release of NIST CSF 2.0, organizations now have a stronger framework to guide their approach, focusing on governance as a critical function. This addition emphasizes the importance of integrating cybersecurity as a core business function rather than treating it as a siloed IT function. How can organizations adapt to this evolving landscape while improving resilience and reducing risk? Governance now leads NIST CSF 2.0 as the primary function, emphasizing the importance for organizations to clearly define cybersecurity ownership, responsibilities, and decision-making processes. Organizations need to move beyond treating cybersecurity as a technical issue to recognizing it as a core business function. And, as threat actors become more sophisticated and leverage AI to accelerate cyber attacks, businesses need to adopt governance models that promote agility, resilience, and proactive risk management. This means integrating security and privacy frameworks into business operations. In this episode of She Said Privacy/He Said Security, Jodi and Justin Daniels speak with Shay Colson, Managing Partner and Co-founder of Intentional Cybersecurity, about the critical role governance plays in building cyber resilience. Shay explains how companies can use frameworks like NIST CSF 2.0 to implement scalable cybersecurity strategies without overextending their resources. He also shares insights on the intersection of security and privacy, AI-driven risk assessments, and why focusing on the basics is essential before adopting advanced solutions.

    ٣٧ من الدقائق
  3. ١٨‏/٠٦‏/١٤٤٦ هـ

    Privacy as a Business Driver: How To Build Effective Programs

    Julia Shullman is the General Counsel and Chief Privacy Officer at Telly, the world's first dual-screen smart TV fully paid for by advertising. Prior to Telly, Julia was General Counsel and Chief Privacy Officer at TripleLift, through its $1.4B acquisition by Vista Equity Partners. She also held various leadership positions, including Chief Privacy Counsel and Lead Attorney, Publisher Technology Group at AppNexus, through its $1.6B sale to AT&T. Before advertising, Julia spent a decade in mergers and acquisitions at both Latham & Watkins and UBM. She is recognized as an industry leader at the intersection of privacy, products, advertising, policy, and strategy. In this episode… Navigating the intersection of privacy, product, and advertising demands strategy. Companies need to view privacy as integral to their operations and growth, especially in highly regulated industries like AdTech. Without effective privacy programs, companies face potential deal disruptions, diminished valuations, and reputational damages. For early-stage companies in particular, failing to integrate privacy into their operations can hinder growth, derail funding opportunities, and even lead to regulatory scrutiny. How can organizations ensure that privacy is both a priority and an enabler of success? Developing effective privacy programs requires a tailored, pragmatic approach. Leaders need to educate their teams on privacy obligations and integrate privacy practices into business processes. This includes fostering collaboration among privacy experts and cross-functional departments, such as engineering and marketing, while adapting to industry-specific nuances. In this episode of She Said Privacy/He Said Security, Jodi and Justin Daniels speak with Julia Shullman, General Counsel and Chief Privacy Officer at Telly, about building privacy programs that drive business success. Drawing from her extensive experience in M&A, privacy, and AdTech, Julia offers insights into balancing privacy with business monetization goals. She discusses the importance of understanding industry dynamics and the role of privacy in facilitating successful exits and partnerships. Julia emphasizes the value of cross-departmental collaboration and education in creating privacy solutions that resonate with a company’s culture and business objectives. She also provides tips on how organizations can align their privacy programs with broader business strategies to build trust, ensure compliance, and drive innovation.

    ٣٢ من الدقائق
  4. ١١‏/٠٦‏/١٤٤٦ هـ

    Your Data, Your Rules: How Cloaked Puts You in Control of Privacy and Security

    Arjun and Abhijay Bhatnagar are Co-founders of Cloaked, a consumer privacy company. As developers and privacy advocates, they have created a secure, all-in-one privacy platform that gives consumers control over their personal information while helping reshape how industries access, use, and think about data. In this episode… The digital world often exposes individuals to risks through seemingly simple data points like phone numbers and emails. These identifiers can reveal a lot of personal information, making users vulnerable to phishing, spam, identity theft, and malicious AI-driven impersonation. As companies collect, share, and sell personal information more than ever, there is a pressing need for solutions that prioritize user control, privacy, and security. What steps can you take to safeguard your personal information? Companies like Cloaked are changing the game and offering individuals a way to regain control over their personal information by allowing users to create unique identifiers, like emails, phone numbers, and passwords, for every digital interaction. The platform also enables users to clean up past data footprints and limit future vulnerabilities while employing a siloed database architecture that keeps personal information secure even in the event of a system breach. In this episode of She Said Privacy/He Said Security, Jodi and Justin Daniels chat with Arjun and Abhijay Bhatnagar, Co-founders of Cloaked, about how their platform addresses critical privacy challenges and empowers users to reclaim control of their personal information. Arjun and Abhijay share how Cloaked's features, like identity masking and password and passcode manager tools, help users navigate today’s privacy and security complexities easily and confidently. They also provide actionable privacy tips, such as limiting permissions, and discuss how Cloaked aims to combat AI misuse.

    ٢٧ من الدقائق
  5. ٠٤‏/٠٦‏/١٤٤٦ هـ

    From McPrivacy to Mastery: A Collaborative Approach To Building Strategic Privacy Programs

    Alan Chapell is the President of Chapell & Associates, a law firm serving the interactive technology, media, and advertising industries. He has served for 20 years as an outside counsel and privacy advisor to VC-funded AdTech and MarTech companies. Alan is also the Principal Analyst for The Chapell Report, a monthly continuous information research tool that helps investors and compliance teams understand the key privacy, competition, and regulatory trends driving the advertising and media marketplace. In this episode… Businesses often struggle to balance their privacy programs with the demands of evolving privacy laws and operational obligations. Privacy programs often reveal hidden vulnerabilities — what some call the “privacy underbelly” — that can expose companies to risks. With a growing patchwork of state privacy laws, businesses need to adopt flexible, proactive strategies to maintain compliance while aligning with business objectives. How can privacy and business teams collaborate to build strategic privacy programs? Privacy professionals need to bridge the gap between compliance and operational goals by clearly explaining liability risks to business teams while aligning privacy initiatives with organizational objectives. Leveraging privacy resources like The Chapell Report can provide actionable insights into evolving regulations, helping privacy and business teams simplify complex concepts to collaborate effectively and build trust with each other. In this episode of She Said Privacy/He Said Security, Jodi and Justin Daniels speak with Alan Chapell, President of Chapell & Associates, about balancing privacy programs with business priorities and compliance obligations. Alan discusses strategies for navigating complex privacy regulations, finding hidden vulnerabilities in privacy programs, and aligning privacy efforts with business goals. He also explains the need to push back against his concept of “McPrivacy” — an oversimplification of privacy measures that can create risks in privacy programs.

    ٢٦ من الدقائق
  6. ١٩‏/٠٥‏/١٤٤٦ هـ

    Mothers Against Cyber Crime: Tackling Cyber Threats at Home

    Allie Hunter, author of Mothers Against Cyber Crime, is a cybersecurity awareness advocate, advisory board member at Savvy Cyber Kids, and mother. With a background in psychology, marketing, and behavioral science, she empowers parents to protect their families online. Her work blends storytelling with practical insights, making cyber safety accessible to everyone. In this episode… Cybersecurity awareness is not just for businesses — it’s also essential for families navigating today’s complex digital world. Children’s online activities can expose families to cyber threats like hacking, data breaches, and privacy intrusions, with many parents unaware of the potential risks in everyday technology and digital platforms. From the overlooked risks of unsecured smart devices to gaming platforms and the rising threats of deepfakes and social engineering scams, parents face new threats impacting their children’s safety and privacy. So, how can parents proactively take control of cybersecurity measures while fostering a safer online environment? Simple, yet actionable steps, like enabling two-factor authentication, regularly updating passwords, and fostering open communication with children about online activities are vital for managing their online presence safely. Combining these practices with cybersecurity awareness education equips parents with the tools they need to protect their children in today’s ever-changing digital landscape. In this episode of She Said Privacy/He Said Security, Jodi and Justin Daniels talk with Allie Hunter, author of Mothers Against Cybercrime and a cybersecurity advocate, about how parents can protect their children from cyber threats. Allie highlights common but underestimated threats, such as unsecured smart devices and online gaming vulnerabilities, offering practical tips for enhancing security measures at home. She also discusses her work with Savvy Cyber Kids and shares insights into the development of her “Hunter Method,” a unique training approach that leverages real-life scenarios to help parents identify and respond to cyber threats effectively.

    ٢٦ من الدقائق
  7. ١٢‏/٠٥‏/١٤٤٦ هـ

    Privacy Risk Assessments: Aligning Business With Compliance

    Alan L. Friel is Chair of Squire Patton Boggs’ Data Privacy, Cybersecurity & Digital Assets Practice. He is tier-1 ranked by Chambers, and BTI Consulting Group has named Alan a Client Service All-Star, recognizing lawyers who stand above all others in delivering exceptional client service. In this episode… Evolving privacy regulations like the California Consumer Privacy Act (CCPA) are reshaping the way companies approach data management and compliance. CCPA’s proposed draft regulations would require certain businesses to conduct cybersecurity audits, privacy risk assessments, and implement governance surrounding automated decision-making and AI technologies. While these frameworks help protect consumer data, they also introduce operational challenges and increased expenses for companies. How can companies prepare for compliance while effectively managing data and reducing costs? Privacy compliance is more than a legal requirement — it’s a vital part of sound business strategy. Navigating compliance obligations requires companies to adopt a proactive approach to data governance. Businesses need to implement good data hygiene practices and conduct privacy risk assessments to identify and mitigate risks. These processes help businesses maintain their data inventory, respond to consumer privacy rights requests, and manage information assets. However, the legal landscape remains complicated, with questions about whether some regulatory requirements may conflict with First Amendment protections. In this episode of She Said Privacy/He Said Security, Jodi and Justin Daniels speak with Alan Friel, Chair of the Data Privacy, Cybersecurity & Digital Assets Practice at Squire Patton Boggs, about the costs, benefits, and legal implications of regulatory compliance. Alan explains why businesses should adopt privacy risk assessments as a best practice, regardless of ongoing legal uncertainties, and discusses the intersection of privacy regulations with free speech rights under the First Amendment. He emphasizes the importance of proactive data management practices and governance to navigate compliance challenges and position businesses for long-term success in a shifting regulatory environment.

    ٢٠ من الدقائق
  8. ٠٥‏/٠٥‏/١٤٤٦ هـ

    How Secure is Your Health Data and Why Does it Matter?

    Anna Hall is an educator, mother of two, and Co-founder of Embody, a privacy-forward menstrual health and wellness app. In this episode… As awareness grows around health data privacy, misconceptions about protecting menstrual health data remain widespread. That’s because menstrual health data is often commodified and can be shared or sold without explicit user consent, exposing sensitive information to third parties. With recent legal changes affecting reproductive rights, there is a greater need than ever for secure, user-controlled solutions. What steps should companies take to prioritize and protect sensitive health data? In a rapidly changing health tech landscape, most regulations haven’t adapted to cover personal wellness apps effectively, especially those designed for menstrual health tracking. Companies like Embody address this by implementing local encryption and avoiding default cloud storage, which safeguards privacy and encourages a user-first approach. By eliminating the need for logins and accounts, Embody limits data access, allowing users to track personal health information privately and securely. In this episode of She Said Privacy/He Said Security, Jodi and Justin Daniels talk with Anna Hall, Co-founder of Embody, about developing a privacy- and security-focused menstrual health app. Anna shares the story behind Embody and how the app prioritizes user privacy by eliminating user logins and passwords, keeping user data stored offline and locally on user devices. She highlights misconceptions about menstrual health data privacy and shares how Embody’s design directly addresses these challenges. With features like local encryption and plans to open-source their code, Embody aims to provide secure, user-controlled health tracking that upholds privacy standards.

    ٢٢ من الدقائق
٤٫٨
من ٥
‫١٢ من التقييمات‬

حول

This is the She Said Privacy / He Said Security podcast with Jodi and Justin Daniels. Like any good marriage, Jodi and Justin will debate, evaluate, and sometimes quarrel about how privacy and security impact business in the 21st century.

قد يعجبك أيضًا

للاستماع إلى حلقات ذات محتوى فاضح، قم بتسجيل الدخول.

اطلع على آخر مستجدات هذا البرنامج

قم بتسجيل الدخول أو التسجيل لمتابعة البرامج وحفظ الحلقات والحصول على آخر التحديثات.

تحديد بلد أو منطقة

أفريقيا والشرق الأوسط، والهند

آسيا والمحيط الهادئ

أوروبا

أمريكا اللاتينية والكاريبي

الولايات المتحدة وكندا