The Data Diva E279 - Bob Carver and Debbie Reynolds

Send a textBob Carver, CEO, Cybersecurity BoardroomIn this episode, Debbie Reynolds speaks with Bob Carver, CEO of Cybersecurity BoaDebbie Reynolds “The Data Diva” talks to Bob Carver, CEO of Cybersecurity Boardroom, about the evolving cybersecurity and privacy risks created by emerging technologies, connected devices, and increasingly sophisticated threat actors.Bob shares his path into cybersecurity, beginning with a career managing commercial real estate before transitioning into information systems and eventually helping build one of the early internal security programs at Verizon Wireless. He reflects on how cybersecurity has evolved from basic perimeter defenses such as firewalls and intrusion detection systems into a far more complex environment where organizations must secure interconnected systems, APIs, cloud services, and AI technologies.The conversation explores several emerging risks associated with artificial intelligence systems, including model inversion attacks that allow attackers to extract sensitive or proprietary information from AI models, as well as the potential theft of entire AI models through repeated API queries. Debbie and Bob also discuss the security risks associated with agentic AI systems that have administrative permissions to interact with files, databases, or enterprise systems, highlighting the importance of strong guardrails and controlled access.Privacy risks related to connected devices are also discussed, including smart televisions and other IoT technologies that continuously collect and transmit user data to manufacturers and data brokers. Debbie and Bob examine the broader implications of large-scale data collection and the challenges individuals face in maintaining visibility and control over their personal information.The episode also covers common phishing attacks that mimic legitimate security alerts and the importance of verifying requests through official platforms. Finally, Bob discusses the potential future of cybersecurity, highlighting the role that zero-trust architectures and post-quantum encryption may play in strengthening long-term digital security.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5p Debbie Reynolds Consulting, LLC

Send a textChuck Brooks, President, Brooks Consulting International and Adjunct Faculty, Georgetown UniversityIn this episode, Debbie Reynolds speaks with Chuck Brooks about why data privacy and cybersecurity are now strategic imperatives for organizations. The discussion includes Chuck’s Forbes article, “Why Data Privacy Is a Strategic Imperative for Organizations,” and expands on its core themes in the context of today’s rapidly evolving threat landscape.The conversation begins with the rapid evolution of artificial intelligence, including generative AI and agentic AI. Chuck explains how AI is being used not only for productivity and automation but also for sophisticated phishing campaigns, automated vulnerability discovery, ransomware operations, bot-driven attacks, and large-scale fraud. They discuss the risks of agentic AI operating autonomously without clear regulatory guardrails, as well as the dangers of poor data quality when AI systems rely on flawed or excessive data.Debbie and Chuck examine cybersecurity hygiene, including password management, multi-factor authentication, identity protection, social engineering threats, phishing resilience, segmentation of critical data, and the importance of assuming breach as part of an overall resilience strategy. They highlight why small and medium businesses are especially vulnerable in today’s threat environment.The discussion explores the relationship between privacy and cybersecurity, clarifying how privacy is contextual and often elective, while cybersecurity focuses on protecting systems and data integrity. They examine oversharing on social media, identity exploitation, insider threats, trade secret protection, and why organizations must treat data as a strategic asset. The importance of building a culture of privacy within organizations is emphasized as a leadership responsibility rather than a compliance afterthought.IoT risks are addressed, including default passwords, connected devices as attack vectors, endpoint vulnerabilities, and real-world breaches involving unexpected networked devices. The episode also covers data retention risks, overcollection, data minimization, and the need for structured governance frameworks that prioritize high-value data.Finally, the conversation turns to quantum computing. Chuck explains different forms of quantum technologies, including quantum algorithms, sensing, and photonics, and discusses the potential impact of “Q Day” on encryption standards. They explore quantum-resistant algorithms, NIST guidance, and the convergence of quantum and AI as both transformative and disruptive forces.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5p Debbie Reynolds Consulting, LLC

Send a textEpisode e277- Tom Kemp The Data Diva Talks Privacy PodcastTom Kemp, Executive Director of the California Privacy Protection AgencyIn Episode 277 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, the Data Diva, speaks with Tom Kemp, Executive Director of the California Privacy Protection Agency, about California’s role as the de facto privacy bellwether in the United States and how regulatory expectations are shifting from policy development to operational enforcement and accountability.Debbie and Tom discuss key regulatory focus areas, including the Delete Request and Opt-Out Platform (DROP), Automated Decision-Making Technologies (ADMT), Opt-Out Preference Signals (OOPS), Global Privacy Control (GPC), cybersecurity audits, and privacy risk assessments. The conversation explores how these initiatives reflect a broader shift toward measurable governance, technical compliance, and demonstrable accountability.They also discuss how regulators assess data risk, emerging enforcement trends, and what companies should be thinking about now as privacy programs start and mature. Tom explains how organizations can prepare for evolving expectations around governance, risk management, and documentation, and what strong privacy governance looks like going forward.The episode concludes with Tom Kemp’s message to organizations about accountability, risk awareness, and responsible innovation as privacy regulation continues to evolve alongside artificial intelligence and emerging technologies.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5p Debbie Reynolds Consulting, LLC

Send a textBy popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5p Debbie Reynolds Consulting, LLC

Send a textIn Episode 275 of the Data Diva Talks Privacy Podcast, Debbie Reynolds, the Data Diva, speaks with personal data privacy consultant Toin Berry about how personal data is collected, combined, inferred, and reused in ways that can significantly affect individuals without their awareness. The conversation focuses on how modern data ecosystems operate beyond direct data collection, emphasizing how inference and aggregation can shape outcomes for people in ways that are difficult to see and even harder to challenge.Throughout the episode, Debbie and Toin explore how personal data moves through complex networks that include platforms, data brokers, analytics firms, and secondary users. They discuss how information collected in one context can be repurposed in another, how inferred attributes can be treated as facts, and how predictive models can influence decisions about individuals in employment, housing, access to services, and social standing. The discussion also addresses how these practices affect autonomy and agency, particularly when individuals are unaware that profiles are being created about them based on behavioral signals rather than explicit disclosures.The conversation further examines the limits of commonly promoted privacy controls, such as deletion requests and consent mechanisms, when data has already been copied, enriched, or redistributed across multiple systems. Debbie and Toin talk about the role of data brokers, the recycling of personal data, and the challenges individuals face when trying to understand where their data travels and how it is ultimately used. They also compare approaches to privacy protection in different jurisdictions, including perspectives shaped by European data protection frameworks and U.S. sector based models, highlighting how cultural and regulatory differences influence expectations and outcomes.This episode also emphasizes the importance of education and data literacy in privacy conversations. Rather than focusing on fear or alarm, Debbie and Toin discuss the need for clearer explanations of how data-driven systems work, how inferences are generated, and what meaningful prevention looks like in practice. The discussion reinforces the idea that privacy is fundamentally about human impact, agency, and long-term consequences, and that understanding data use is essential for protecting people in increasingly complex digital environments.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5p Debbie Reynolds Consulting, LLC

Send a textEpisode 274 – Liz MacPherson, Deputy Privacy Commissioner, Office of the Privacy Commissioner, New ZealandIn Episode 274 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Liz MacPherson, Deputy Privacy Commissioner at the Office of the Privacy Commissioner of New Zealand, about how privacy functions as a critical guardrail for innovation rather than a barrier to progress. The discussion focuses on New Zealand’s purpose and context-based privacy framework and why strong privacy foundations enable faster, safer, and more trustworthy data use across government and industry. The conversation explores a landmark case involving the use of facial recognition technology in supermarkets, where regulators, businesses, and independent evaluators worked together to test effectiveness, necessity, and proportionality before deployment. Debbie and Liz unpack why biometric data demands heightened scrutiny, how privacy impact assessments and real-world trials can reduce risk, and why facial recognition is not a plug-and-play technology. They also discuss the importance of human oversight, data quality, access controls, transparency to the public, and the risks of bias and misidentification when systems are poorly governed. Debbie and Liz also examine New Zealand’s Biometric Processing Privacy Code and its role in setting clear thresholds for biometric use, including limits on categorization and inference. The episode highlights why data retention is one of the most overlooked sources of organizational risk, how unnecessary data creates downstream harm, and why treating personal information as a treasure rather than an asset to be exploited builds long-term trust. Liz emphasizes that organizations succeed when they place people at the center of data decisions and design privacy as part of the full information lifecycle.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5p Debbie Reynolds Consulting, LLC

Send a textIn Episode 273 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Kohei Kurihara, CEO and Founder of Privacy by Design Lab, about the relationship between privacy, trust, and innovation across Japan and the broader Asia-Pacific region. Kohei shares how his background in startups, blockchain, and digital identity led him to focus on privacy as a foundational element of sustainable technology.The discussion explores the distinction between security and privacy, including why technical safeguards alone cannot establish trust. Debbie and Kohei examine privacy by design as a proactive discipline, contrasting it with reactive compliance-driven approaches. They discuss why companies that embed privacy early can move faster, innovate responsibly, and build stronger relationships with users rather than slowing progress.The episode also examines cultural perspectives on privacy in Japan and Asia, including how collective values, family structures, and trust-based relationships influence attitudes toward data sharing. Kohei emphasizes that privacy expectations are shaped by history and culture, and that global frameworks must account for these differences. The conversation reinforces that trust, not compliance alone, is what ultimately determines whether technology is accepted and sustained.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5p Debbie Reynolds Consulting, LLC

Send a textIn Episode 272 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Sean Pauzauskie, Medical Director at the Neurorights Foundation, about the emergence of neurorights and why brain data represents one of the most sensitive frontiers in privacy and human rights. Sean explains what neurorights are, how they developed from advances in neurotechnology, and why mental privacy, identity, and free will must be protected as technology becomes capable of reading and influencing brain activity.Debbie and Sean explore the five core neurorights, including mental privacy, fair access to mental augmentation, personal identity, free will, and freedom from algorithmic bias. They discuss real-world neurotechnology use cases, from medical treatment to consumer wellness devices, and why commercialization increases the urgency of governance. The episode examines risks such as discrimination, surveillance, and misuse of neural data, even in the absence of malicious intent.The conversation also highlights Colorado’s groundbreaking neural data protections and how state-level action can address human rights gaps left by federal consumer-focused laws. Debbie and Sean discuss why states can serve as laboratories for rights-based protections, how neurorights differ from traditional data privacy, and what policymakers, companies, and individuals should be thinking about as neurotechnology becomes mainstream.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5p Debbie Reynolds Consulting, LLC

Send a textIn Episode 271 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Ridwan Oloyede, Emerging Technologies and Technology Policy Lead, about the rapid evolution of data protection across Africa and why global conversations often misunderstand or oversimplify the continent. Ridwan shares insights into how privacy and technology policy have matured across African jurisdictions and why Africa should not be treated as a monolith in global regulatory discussions.The conversation explores the growth of data protection laws, regulators, and professional communities across the continent, including how capacity building, certification, and cross-border collaboration are shaping the next generation of privacy leadership. Debbie and Ridwan discuss common misconceptions, the importance of local context, and how African countries diverge meaningfully on issues such as post-mortem privacy, registration requirements, audits, and cross-border data transfers.They also examine how legal traditions that predate the GDPR influence modern African privacy frameworks, including differing approaches to legal bases for processing and consent. Ridwan emphasizes the need for better global research, storytelling, and representation to accurately reflect what is happening on the ground. The episode highlights Africa’s growing role in shaping global privacy norms through innovation, pragmatism, and preventative approaches to data protection.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5p Debbie Reynolds Consulting, LLC

Send a textIn Episode 270 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, The Data Diva, talks with Filipe Pinto, researcher, strategist, and author of Consumer-Controlled Digital Twin Architecture, about the future of personal data control and what it means to move beyond consent-based privacy models. The conversation centers on Filipe’s concept of consumer-controlled digital twins and why true privacy requires technical and architectural change rather than reliance on legal agreements alone.Debbie and Filipe examine the limitations of today’s cloud-centric data ecosystem, including how consent has become performative rather than protective. They discuss the idea of de facto control versus de jure control of data, the risks of biased and incomplete data-driven inferences, and why personal data systems are fundamentally designed to remember rather than forget. The episode explores how engineered privacy could shift power back to individuals by keeping data at the edge and allowing AI models to move without transferring raw personal data.The discussion also addresses equity, access, and feasibility, including concerns about whether consumer-controlled systems could unintentionally create new digital divides. Debbie and Filipe explore how privacy engineering, open collaboration, and cross-disciplinary thinking are required to design systems that respect autonomy while remaining practical and scalable. The episode challenges listeners to rethink privacy not as a regulatory checkbox, but as an architectural and societal design choice.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5p Debbie Reynolds Consulting, LLC