The Data Diva E245 - Onur Korucu and Debbie Reynolds

Send us a textIn episode 245, of “The Data Diva” Talks Privacy Podcast, Debbie Reynolds talks to  Onur Korucu, a Non-Executive Director, Managing Partner, Advisory Board Member, IAPP, who brings a rare combination of legal and engineering expertise to the fields of privacy, governance, and artificial intelligence. We discuss how Onur’s early fascination with cybersecurity shaped her dual career as both a technology expert and a data protection strategist. She shares insights from her work advising companies across Europe, the Middle East, and beyond on the safe and ethical deployment of AI systems. Onur emphasizes that privacy must be embedded into the foundation of AI models, not just layered on later, and that risk management must include human-centered perspectives from design through deployment.We explore the practical challenges of global compliance, how organizations struggle to keep up with the rapid pace of AI development, and the ethical dilemmas posed by technologies such as deepfakes and surveillance systems. Onur shares her vision for holistic governance frameworks that empower privacy professionals, policymakers, and engineers to work collaboratively. She also discusses the role of education, mentorship, and community support in building resilience within the data protection profession. This episode offers a global perspective on the convergence of AI and privacy, expressing hope for an ethical digital future where transparency, accountability, and human oversight are not optional but essential, and this is also reflected in Data Privacy in the future.Support the show

Send us a textIn episode 244, Debbie Reynolds, “The Data Diva” talks to Aleksandr Tiulkanov, a digital ethics researcher, legal expert, and technology policy advisor working at the intersection of computer science, human rights, and international law. Aleksandr brings a rare blend of technical depth and policy insight to global conversations about the governance of artificial intelligence, cybersecurity, and emerging technologies. We discuss his career path from data protection and human rights advocacy to working with global institutions such as the United Nations and the Council of Europe, where he has contributed to international standards on data governance and AI ethics.Aleksandr offers a compelling critique of current AI systems, particularly large language models, which he views as limited in their ability to capture true human intelligence and emotion. He explains why ethical design cannot be an afterthought in AI development, and how the lack of transparency in algorithmic decision-making threatens not only individual privacy but democratic structures worldwide. We talk about the deep structural issues that exist in both legal and technical approaches to AI and data protection, including the challenges of harmonizing cross-border laws, the power imbalance between tech companies and users, and the geopolitical dimensions of digital sovereignty.We also explore Aleksandr’s thoughts on the role of civil society and how community-driven oversight and decentralized governance might offer more sustainable alternatives to corporate-led AI development. He advocates for a deeper integration of ethical reasoning into computer science education, highlighting the need for stronger global frameworks that prioritize fairness, accountability, and the right to opt out of data-hungry systems.This episode is a thoughtful and wide-ranging exploration of digital ethics, global privacy regulation, and the future of responsible technology. It issues an urgent call for collaboration among lawyers, technologists, regulators, and citizens to develop systems that truly serve humanity. We share hope for a future where the rule of law, not just code, guides the evolution of AI, and where human dignity remains at the center of innovation.Thanks to our Data Diva Talks Privacy Podcast Privacy Ambassador Sponsor, Piwik PRO. Piwik PRO is a privacy-first analytics and customer data platform that helps organizations to make informed decisions across their websites, apps, and ad campaigns. They bring an unprecedented level of data transparency, so you know exactly how your data is collected, used, and protected. It is very cool. Marketers gain valuable insights, while legal teams rest assured knowing that your client data remains protected, even as the privacy landscape evolves.  Learn more at piwik.pro. Enjoy the show.Support the show

Send us a textIn episode 243 of The Data Diva Talks Privacy Podcast, host Debbie Reynolds, “The Data Diva,” welcomes Yogita Parulekar, CEO and Founder of Invigrid. Yogita brings over two decades of cybersecurity leadership to the conversation, beginning her journey in the industry long before it was a mainstream priority. With deep expertise in governance, infrastructure, and crisis response, Yogita discusses how the landscape of cyber threats has evolved dramatically, moving from relatively isolated risks to complex, interconnected threats fueled by AI, deepfakes, disinformation, and geopolitical uncertainty. She and Debbie explore the urgent need for companies to embed cybersecurity into the DNA of their business strategy, rather than treat it as an isolated IT function. Yogita emphasizes that today's cyber risk is not just technical—it is existential, affecting national security, business continuity, and societal trust. She shares insights on the growing importance of board-level engagement, cyber education, and scenario planning. Yogita also highlights how cyber and privacy are often misunderstood, offering a helpful analogy to distinguish their roles: privacy is about people, while security is about infrastructure. The discussion reinforces that to succeed in today’s environment, organizations must integrate privacy, cybersecurity, and governance from the start.Support the show

Send us a textIn episode 242 of The Data Diva Talks Privacy Podcast, host Debbie Reynolds, “The Data Diva,” welcomes Karina Klever, CEO and CISO at Klever Compliance. Karina shares her extensive career journey through IT operations, project management, and compliance leadership to demystify what effective governance really means. She challenges the outdated practice of blindly following frameworks and checklists that do not reflect a company’s actual business model or operational maturity. Karina introduces her pragmatic “Now, Next, Near, Never” methodology—a practical framework for prioritizing GRC (governance, risk, compliance) efforts based on relevance, applicability, and timing. She and Debbie unpack why so many organizations suffer from “compliance theater,” implementing policies they do not actually follow or understand. Karina explains the risks of orphaned controls, vague role descriptions, and overreliance on vendor templates that are misaligned with internal realities. She also stresses the importance of documentation, clarity in control language, and having a feedback loop for maturing compliance over time. This episode is a must-listen for organizations looking to move beyond checkbox audits and build scalable, operationally aligned governance structures that support real risk mitigation and long-term accountability.Support the show

Send us a textIn episode 241 of The Data Diva Talks Privacy Podcast, host Debbie Reynolds, “The Data Diva,” welcomes Phillip Mason, Global Privacy Program Manager at Corning, Inc. Phillip joins Debbie to discuss the complicated interplay between AI advancement, regulatory frameworks, and the ethical imperative of human judgment. Drawing from his diverse background in accounting, law, and privacy, Phillip offers an informed and multidimensional perspective on how businesses navigate emerging risks. He critiques overbroad AI legislation like the EU AI Act, which he believes may have unintended consequences for innovation, particularly among smaller firms lacking legal and compliance resources. Debbie and Phillip dive into examples of poorly executed AI rollouts that sparked public backlash, such as LinkedIn’s data harvesting practices and Microsoft’s Recall feature, emphasizing the importance of transparency and foresight. Phillip also unpacks the difference between having a “human in the loop” and placing real ethical judgment into practice. They discuss how organizations can build a culture of trust and accountability where data science and compliance work harmoniously. The conversation ultimately underscores that as algorithms get smarter, human oversight must also evolve, with thoughtful governance, interdisciplinary collaboration, and values-driven leadership.Support the show

Send us a textIn episode 240 of The Data Diva Talks Privacy Podcast, host Debbie Reynolds, “The Data Diva,” welcomes Ian Glazer, Vice President of Product Strategy at SGNL (SGNL.ai) and co-founder of IDPro. With decades of leadership in digital identity, Ian shares insights on how identity, privacy, and security have become essential foundations of digital interaction.They explore how identity has shifted from managing usernames and passwords to helping individuals assert who they are in digital spaces. Ian and Debbie examine the rise of “proofing creep,” where services now require government IDs and biometric selfies, raising questions about over-collection and user dignity. Ian explains that identity is how privacy controls are enforced, and that organizations need to ask what data they are collecting, what it represents, and how it should be protected.The conversation covers mobile driver's licenses, biometric authentication, and government-backed digital ID programs. Ian raises concerns about fragmented identity systems that could create barriers to global access and digital inclusion. They also discuss challenges with age verification laws that translate physical-world practices poorly into online environments, often leading to excessive data demands.Ian outlines how emerging AI systems acting on behalf of users present new identity challenges around authority, authentication, and accountability. He ties this to similar concerns around digital estate management, emphasizing the need for consistent identity frameworks across different contexts.Closing the episode, Ian calls for an empathetic approach to designing identity systems, one that recognizes real-world conditions such as aging, accessibility needs, and unequal access to technology. Debbie and Ian agree that identity systems should be easy to use, respectful of users, and built to support everyone, not just tech-savvy individuals.Support the show

Send us a textIn episode 239 of The Data Diva Talks Privacy Podcast, host Debbie Reynolds, “The Data Diva,” welcomes Saumya Gupta, Assistant Vice President for APAC and Japan at Platform 3 Solutions. Saumya brings a unique blend of deep technical expertise and strategic thinking to the conversation about data privacy in the modern enterprise. She and Debbie discuss how legacy systems represent one of the largest and most overlooked privacy risks—storing sensitive data long past its useful life and outside of governance controls. Saumya explains how data lake and lakehouse architectures can help businesses centralize, tag, and govern large volumes of structured and unstructured data more efficiently. She presents her open metadata model, a five-layer system that empowers organizations to classify data by technical properties, business relevance, operational quality, sensitivity, and compliance requirements. The conversation explores the collision between AI’s data hunger and privacy’s minimization mandate, and Saumya warns that enterprises cannot afford to ignore data lifecycle hygiene. They also discuss defensible deletion, audit readiness, and the importance of building data infrastructure with privacy as a foundational element. Saumya’s insights help organizations reframe legacy data not just as a cost center or liability, but as an opportunity to reset and future-proof their compliance strategies.Support the show

Send us a textDebbie Reynolds “The Data Diva” talks to Temi Odesanya, Director, Responsible AI and Automation. We discuss her extensive background in artificial intelligence automation, detailing her journey that began with her family's business in the Netherlands. This early exposure to technology ignited her interest in data science, leading her to pursue postgraduate degrees and a scholarship in Italy. Throughout her career, she has become increasingly aware of the critical importance of data governance and compliance, particularly regarding customer data. The conversation highlights Temi's curiosity and the significance of ethical considerations in technology, especially in the context of automated decision-making and data privacy.Support the show

Send us a textDebbie Reynolds “The Data Diva” talks to Mathew Waddell, Founder, Tactically Secure. We discuss insights from his career in the tech industry, particularly in cybersecurity, and his experience working with government agencies and large corporations. He discusses his commitment to simplifying security for individuals and protecting them from threats like ransomware.The discussion then shifts to the evolving landscape of cybersecurity threats, particularly the sophistication of ransomware attacks. Waddell stresses the need for businesses to integrate data privacy and cybersecurity strategies to combat these threats effectively. He points out the increasing trend of attackers stealing data and posting it online to coerce companies into paying ransoms, highlighting the interconnectedness of privacy violations and cybersecurity breaches. Both speakers agreed on the necessity for businesses to adopt proactive measures and recognize the importance of regulations like GDPR and CCPA in prioritizing data protection.Waddell and Reynolds address the dual potential of AI tools in cybersecurity, noting that they can enhance security measures but can also be exploited by malicious actors. They discuss the importance of training employees to recognize cyber threats and the need for effective identity verification strategies in light of emerging technologies like deepfakes and his data privacy wish for the future.Support the show

Send us a textDebbie Reynolds, "The Data Diva", talks to Michael McCracken,  a Data Privacy Strategist and Operational Expert. We discuss his career trajectory, transitioning from accounting to IT audit, which led him to specialize in data privacy, particularly concerning children's information and neurodivergence. He emphasizes the significance of inclusivity in the privacy sector, arguing that diverse teams enhance the effectiveness of privacy strategies.The conversation highlights the complexities surrounding data collection, especially regarding minors. Michael argues that businesses should prioritize individual privacy and not rely on exploiting data. Debbie pointed out the risks associated with unnecessary data collection, which can lead to breaches and erode trust.We advocate for treating data as a valuable asset requiring careful stewardship rather than a commodity to be exploited. They discussed the importance of passion and advocacy within organizations to bridge communication gaps and enhance collaboration on privacy initiatives.Michael raises concerns about the inadequacies of current legal frameworks in protecting children's privacy, warning that companies often prioritize legal defenses over accountability. He and Debbie agreed that a multifaceted approach is necessary for effective privacy regulation. They emphasize the need for transparency and organizational responsibility in privacy practices, particularly as large companies struggle to adapt to regulatory changes. The discussion also touches on the impact of GDPR on U.S. business practices and the challenges posed by the lack of a cohesive national privacy framework.In concluding,   Michael articulates his vision for a unified privacy ethic that prioritizes individual rights and ethical considerations. Debbie echoes this sentiment, advocating that organizations adopt clear ethical frameworks as guiding principles. Support the show