Privacy by Design: Making Consent Meaningful

The AI revolution is here. Organizations worldwide are racing to adopt AI, regulators are introducing new rules, and professionals are asking the same question: How can we innovate with AI while staying compliant, ethical, and trustworthy? KEY MOMENTS02:14 Meet Jamal Ahmed02:37  EU AI Act09:00 EU AI Act Explained12:52 How will it impact innovation in EU17:14 Careers and Skills Shift22:05 Hype Cycle23:33 Jamal Book “ The Easy Peasy Guide to EU AI Act”29:44 Final Thanks and Outro In this episode of the FIT4Privacy Podcast, host Punit Bhatia sits down with Jamal Ahmed, privacy expert, AI governance advisor, and author of The Easy Peasy Guide to the EU AI Act, to decode the EU AI Act in simple, practical language. Together, they explore why many experts call the EU AI Act the "GDPR moment for AI", what it means for businesses worldwide, and why executives, privacy professionals, compliance leaders, and AI practitioners can no longer afford to ignore AI governance. AI adoption is no longer optional. The real challenge is ensuring that AI is used safely, responsibly, and in compliance with emerging regulations. Organizations that build strong AI governance today will be better positioned to earn trust, manage risk, and stay competitive in the future. If you enjoy conversations about AI Governance, Privacy, GDPR, EU AI Act, Responsible AI, Cybersecurity, Compliance, and Digital Trust, subscribe to the FIT4Privacy Podcast and turn on notifications. ABOUT THE GUESTJamal is an astute and influential Privacy Consultant, strategist, Board advisor, and Fellow of Information Privacy. He is a charismatic leader, progressive thinker, and innovator in the privacy sector who directs complex Global Privacy Programmed. Considered by his peers and clients to be one of the UK’s preeminent privacy experts, he has the credibility and gravitas to engender confidence. He is a sought-after commentator contributing to the BBC, ITV News Euronews, Talk Radio, The Independent, and The Guardian, amongst others. His Privacy Pros Podcast reaches audiences in 72 countries and is ranked the number one privacy podcast in the world and one of the top 3 GDPR podcasts. Jamal strives to be a great leader, listener, and coach. He has grown a talented, high-performing team who protects the privacy of 1 billion + data subjects and are international expert in data privacy, GDPR, and cybersecurity. Jamal and his team are driven by the principles of simplifying and demystifying privacy, removing complexities, and educating clients to forge a privacy-by-design culture that enables clients to build their internal privacy capability and capacity.ABOUT THE HOSTPunit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organizational culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentoring and coaching privacy professionals. Punit is the author of books “Be Ready for GDPR” which was rated as the best GDPR Book, “AI & Privacy – How to Find Balance”, “Intro To GDPR”, and “Be an Effective DPO”. Punit is a global speaker who has spoken at over 30 global events. Punit is the creator and host of the FIT4PRIVACY Podcast.Resources & LinksGuest LinksJamal Ahmed• LinkedIn: https://www.linkedin.com/in/kmjahmed/ • Website: https://besteuaiactbook.com/Grow Skills (Privacy Courses & Insights)• Courses: https://growskills.store/courses/• Insights: https://growskills.store/insights/• Website: https://growskills.store/FIT4Privacy • Website: https://www.fit4privacy.com• Podcast: https://www.fit4privacy.com/podcast• Blog: https://www.fit4privacy.com/blog• YouTube: http://youtube.com/fit4privacyPunit Bhatia• Website: https://www.punitbhatia.comBooks• Be Ready for GDPR• AI & Privacy – How to Find Balance• Intro to GDPR• Be an Effective DPO

"It's that GDPR moment all over again."AI adoption is accelerating across industries, but with opportunity comes responsibility. In this clip from the FIT4Privacy Podcast, AI governance expert and author Jamal Ahmed explains why the EU AI Act is becoming one of the most important regulations for organizations worldwide.Discover why executives must pay attention, how the EU AI Act compares to GDPR, and what businesses need to know to stay compliant, competitive, and trustworthy in the age of AI."No AI means no business in future."Watch the full episode for deeper insights into AI governance, compliance, and the future of responsible AI.Resources & Links Guest Links Jamal Ahmed • LinkedIn: https://www.linkedin.com/in/kmjahmed/  • Website: https://besteuaiactbook.com/    Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/ • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy  Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO 

What if privacy wasn't just compliance but a competitive advantage?  KEY MOMENTS 00:00 – Season Eight Kickoff 03:00 – When is the right time to start considering Privacy Compliance? 05:18 - How do you see Privacy when you are helping your clients? 07:51 - Software Design or Product Design Perspective 13:20 - “Love at First Sight” How does the book guide people in converting ideas 15:50 – Privacy in the Face of Creating Trust 18:16 – About Erin Rollenhagen and how to reach her 20:33 – AI Changing Product Builds 22:23 – Book Links and Wrap UpAs AI becomes increasingly embedded in products and services, Punit and Erin discuss the challenges and opportunities AI presents for privacy, trust, and product development. They explore responsible AI use, the importance of protecting sensitive data, and how AI can help organizations improve software development, security, and customer experience.Whether you are a product manager, software developer, privacy professional, business leader, or entrepreneur preparing to launch a new product, this episode offers practical guidance on balancing innovation, compliance, user experience, and trust.ABOUT THE GUEST  Erin Rollenhagen is the Founder and CEO of People-Friendly Tech and the author of Love at First Launch: A visionary’s guide to bringing extraordinary tech to life. With nearly two decades of experience guiding visionary executives, Erin has led over 200 successful technology launches spanning startups, healthcare, finance, and other highly regulated industries.  Her work has been featured in TechCrunch and Axios, earned national awards, and positioned her as a trusted partner for leaders determined to build more than just functional products. Erin’s approach centers on preserving the magic of the original vision, balancing compliance with creativity, and designing experiences that spark deep emotional connection. Whether working with C-suite innovators or fast-growth entrepreneurs, Erin helps transform bold ideas into platforms that delight users, reshape businesses, and redefine industries.  ABOUT THE HOST    Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.    Resources & Links Guest Links Erin Rollenhagen • LinkedIn: https://www.linkedin.com/in/erin-rollenhagen-b4b7317/ , https://www.linkedin.com/company/people-friendly-tech/   Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/ • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy  Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO 

Privacy notices, cookie banners, and consent forms are often treated as compliance checkboxes, but do users really understand them?In this episode of the FIT4Privacy Podcast, Punit and Erin explore how privacy, compliance, and user experience can work together to build trust. Learn why the timing of consent matters, how to present privacy information in simple and meaningful ways, and why the best privacy experiences are delivered now users need them most.Discover practical examples of just-in-time notices, granular privacy controls, preference centers, and user-friendly communication that help organizations meet compliance requirements while creating a better customer experience.🎧 Listen to the full conversation on YouTube, Spotify, or Apple Podcasts by searching FIT4Privacy Podcast.Resources & LinksGuest Links Erin Rollenhagen • LinkedIn: https://www.linkedin.com/in/erin-rollenhagen-b4b7317/ , https://www.linkedin.com/company/people-friendly-tech/   Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/ • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO 

What is AI governance? Who is an AI governance professional? How is AI governance different from ISO/IEC 42001, privacy compliance, or the EU AI Act?  KEY MOMENTS 02:20 - How do you see this world of AI changing so fast? 5:20 - AI Governance Concept 12:20 - AI Governance Professional Definition 15:33 - Skills Framework and Roles 19:41 - Why AIGP Not Regional Like CIPP 27:37 - Why Get AIGP Certified 32:25 - How to Connect and Wrap Up  In this episode of the FIT4Privacy Podcast, host Punit Bhatia welcomes Ashley Casovan, Managing Director of the IAPP AI Governance Center, to explore the rapidly evolving world of AI governance. Ashley shares her journey from developing Canada's pioneering guidance on automated decision-making systems to leading global conversations on AI governance, professional skills, and responsible AI practices. Together, they discuss why AI governance has become a critical discipline, how organizations can manage AI risks and opportunities, and what professionals need to know to succeed in this emerging field.  Whether you're a privacy professional, compliance officer, AI practitioner, risk manager, auditor, or business leader, this episode provides valuable insights into building trustworthy, responsible, and effective AI governance programs.  🎧 Listen now to understand how organizations can turn responsible AI principles into practical governance frameworks.  ABOUT THE GUEST As the managing director of the IAPP’s AI Governance Center, Casovan serves as the primary thought leader and public voice for the IAPP on AI governance, while providing strategic direction and contributions to the development of practical, relevant and timely content for the AIGC. Casovan will lead the AIGC engagement efforts with industry leaders, senior policy makers, regulators and international organizations to ensure AI governance is top of mind when discussing AI’s potential. Through roles in the public sector at the municipal and federal levels, Casovan developed expertise in responsible AI, standards, policy, open government and data governance. As the former director of data and digital for the government of Canada, Casovan previously led the development of the world’s first national government policy for responsible AI.  Building from this work, Casovan served as the Executive Director of the Responsible AI Institute, a multi-stakeholder non-profit dedicated to mitigating harm from the use of AI systems, a member of OECD’s AI Policy Observatory Network of Experts, a member of the World Economic Forum's AI Governance Alliance, an Executive Board Member of the International Centre of Expertise in Montréal on Artificial Intelligence and as a member of the IFIP/IP3 Global Industry Council within the  ABOUT THE HOST    Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.    Resources & Links  Guest Links Ashley Casovan • LinkedIn: https://www.linkedin.com/in/ashley-casovan-b3247211/  • Website: https://iapp.org/   Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/ • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy  Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO 

AI has changed the risk landscape faster than many organizations could have anticipated. But what does that mean for privacy, cybersecurity, ethics, and compliance professionals?In this episode of the FIT4Privacy Podcast, we explore how governance has evolved from data governance and privacy governance to the broader world of AI governance.The conversation looks at what AI governance really means, why privacy alone is no longer enough, and how organizations can balance innovation with risks around transparency, accuracy, ethics, cybersecurity, and societal impact.We also explore the evolution of AI governance before ChatGPT, lessons from Canada's approach to automated decision-making systems, and why organizations don't necessarily need another committee but do need a coordinated approach to managing AI risks.Tune in for a deeper conversation on AI, privacy, ethics, and the future of responsible governance.🎧 Catch the full episode on YouTube, Spotify, and Apple Podcasts.Resources & Links Guest Links Ashley Casovan • LinkedIn: https://www.linkedin.com/in/ashley-casovan-b3247211/  • Website: https://iapp.org/   Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/ • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy  Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO 

What happens when the CTO and CISO roles come together in one person?  KEY MOMENTS 2:14 New risks come up or amplify? 3:12Copilot Rollout Risks 6:50 How to prevent this scenario? 9:20 AI Opportunity Mindset 13:23 As a CISO CTO, how do they use AI on a regular basis? 14:50 Starting use cases of AI 18:55 What ProArch does? 21:30 Conclusion  In this episode, Punit Bhatia speaks with Ben Wilcox about balancing innovation and security in the age of AI. They explore whether AI introduces new risks or amplifies existing ones, and what organizations must consider when scaling tools like Microsoft Copilot.  The discussion highlights the importance of data governance, access controls, and proper configuration to avoid unintended privacy risks. Ben also shares practical AI use cases from productivity gains to building agents and explains how organizations can start their AI journey responsibly. Overall, this episode offers a balanced view of AI as both an opportunity and a risk, with actionable insights for adopting it securely and effectively.  ABOUT THE GUEST Ben Wilcox is the CISO and CTO at ProArch, where he leads cybersecurity strategy and cloud innovation for enterprise clients. With deep expertise in risk management, compliance, and AI-driven security, Ben helps organizations navigate evolving threats while building resilient, future-ready systems.  ABOUT THE HOST    Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.    Resources & Links  Guest Links Ben Wilcox • LinkedIn: https://www.linkedin.com/in/ben-wilcox/ • Website: https://www.proarch.com  Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/ • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy  Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy How to Find Balance • Intro to GDPR • Be an Effective DPO 

Scaling Copilot: Hidden Risks & Data ExposureMost organizations are adopting Microsoft Copilot as a natural extension of their existing Microsoft environment, but scaling it is not as simple as assigning licenses.In this discussion, Punit Bhatia and Ben Wilcox explore what really happens when Copilot is introduced into environments with scattered data, unstructured information, and complex access permissions.They highlight how AI doesn’t create new risks but makes existing ones visible and usable. Copilot can surface data based on access rights even when those permissions were never properly reviewed.A real-world example shows how an employee unintentionally accessed a coworker’s personal improvement plan due to misconfigured permissions, turning it into a potential privacy breach.The conversation emphasizes that successful Copilot adoption requires proper data governance, clear access controls, and mechanisms such as data classification, sensitivity labeling, and encryption.This is not a plug-and-play exercise organization that must prepare their data before scaling AI.🎧 To catch the full discussion, search FIT4Privacy on YouTube, Spotify, or Apple Podcasts.  Resources & Links  Guest Links Ben Wilcox • LinkedIn: https://www.linkedin.com/in/ben-wilcox/ • Website: https://www.proarch.com  Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/ • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy  Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO    

What if AI could monitor your compliance controls 24/7 more consistently than any team ever could?KEY MOMENTS   1:50  What are AI agents and why should business leaders care? 5:24  Is that agent or limited capability agent? 8:13  Is that the dimension this agent can go to?  13:50  How can AI agents help? 22:30  How to handle risks when it comes to AI agents? 26:24  Dislike in the journey of entrepreneur  In this episode of the FIT4Privacy Podcast, Punit Bhatia speaks with Richa Kaul, CEO of ComplYant, to unpack what AI agents really are and what they are not. They clarify the difference between true agentic AI and simple “call-and-response” tools, and explore how AI agents are transforming governance, risk, and compliance (GRC).  This conversation goes beyond hype to offer practical, enterprise-ready insights on using AI responsibly in compliance.  👉 Listen now and rethink how AI can support smarter, continuous compliance.  ABOUT THE GUEST Richa Kaul is the Founder and CEO of Complyance, a privacy and compliance platform that helps companies simplify data protection and regulatory requirements. A seasoned leader in data privacy and governance, Richa is known for translating complex compliance challenges into practical, scalable solutions for modern businesses.  ABOUT THE HOST    Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.    Resources & Links  Guest Links Richa Kaul • LinkedIn:  https://www.linkedin.com/in/richa-kaul/ https://www.linkedin.com/company/complyancehq • Website: https://www.complyance.com/   Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/  • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy  Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO 

Real Use Cases of AI Agents  AI in compliance beyond theory.What can AI agents really do?In this episode from the FIT4Privacy Podcast, we move from concepts to concrete use cases highlighting how AI agents are already transforming compliance into practice. From continuous 24/7 control monitoring to automating third-party risk assessments, the shift is clear.No more periodic checks. No more chasing vendors. Instead, organizations gain continuous oversight, deeper insights, and real risk visibility.The conversation also highlights an important transition: compliance teams moving from operational tasks to strategic decision-making.👉 Listen to see how AI agents are turning compliance into a proactive, continuous function.  Resources & Links Guest Links Richa Kaul • LinkedIn:  https://www.linkedin.com/in/richa-kaul/ https://www.linkedin.com/company/complyancehq • Website: https://www.complyance.com/  Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/  • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy  Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO