The Data Diva E289 - Ross Saunders and Debbie Reynolds

Send us Fan MailRoss Saunders, Head of Ross G. Saunders ConsultingIn this episode of The Data Diva Talks Privacy, Debbie Reynolds, The Data Diva speaks with Ross Saunders, Head of Ross G. Saunders Consulting, about privacy engineering and the challenges organizations face when translating legal requirements into technical implementation. Ross shares his background in infrastructure, DevOps, and software architecture, explaining how his experience working with SaaS environments and data breaches led him to focus on bridging the gap between legal, security, and development teams.The conversation explores how privacy is often treated as a legal or compliance exercise, while in practice it requires integration into system design and development workflows. Debbie and Ross discuss how developers frequently receive requirements that do not align with legal intent, leading to inconsistencies in implementation and increased risk for organizations.They examine real-world challenges in applying privacy regulations, including age verification requirements and the classification of IP addresses, where technical realities may conflict with regulatory expectations. The discussion also addresses the limitations of focusing on specific technologies, such as cookies, rather than addressing broader issues related to data sharing and potential harm.The episode highlights practical examples of risk, including loyalty applications that collect extensive financial transaction data and the potential consequences if that data is exposed or misused. Debbie and Ross emphasize the importance of shifting toward harm-based approaches to privacy and ensuring that organizations understand the real-world impact of their data practices.The conversation also explores emerging risks associated with agentic AI and autonomous systems, including scenarios where systems are granted excessive access and cause unintended damage or data loss. Organizations must implement governance, oversight, and clear controls to ensure that innovation in AI does not introduce unnecessary risk.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5pDebbie Reynolds Consulting, LLC

Send us Fan MailTerri Lewis, Founder of Planet ConnectedIn this episode of The Data Diva Talks Privacy, Debbie Reynolds, The Data Diva speaks with Terri Lewis, Founder of Planet Connected, about privacy, data governance, and risk in smart cities and connected infrastructure. Terri shares her background in digital strategy and her work supporting collaboration between cities and technology providers, emphasizing the importance of building trust and transparency into smart city initiatives.The conversation explores how everyday systems such as water utilities, parking applications, and license plate readers collect and process personal data, often without individuals fully understanding the scope of that data collection. Debbie and Terri discuss how data from smart meters, for example, can reveal occupancy patterns and behavioral insights, and how location-based services and parking systems can introduce privacy risks through the collection of personal and financial information.They examine the role of third-party vendors and the challenges organizations face in managing data across multiple providers, including concerns about overcollection, lack of transparency, and unclear data ownership. Real-world examples highlight how individuals may be required to provide more data than expected for routine activities, raising questions about proportionality and necessity.The episode also explores broader IoT risks, including long device lifecycles, evolving capabilities through updates, and the increasing use of cameras and image-based technologies. Debbie and Terri discuss how advances in image recognition and facial recognition can enable identification of individuals in public spaces, creating new risks that existing legal frameworks may not fully address.The discussion emphasizes that organizations must take a proactive approach to data governance, anticipating potential misuse, addressing unintended consequences, and aligning technology deployment with public expectations and trust. As cities continue to adopt connected technologies, leaders must ensure that innovation is balanced with strong privacy, security, and accountability practices.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5pDebbie Reynolds Consulting, LLC

Send us Fan MailVibeke Specht, Co-founder of Peak Privacy and Author of “From GDPR Confusion to Privacy First Marketing”In this episode of The Data Diva Talks Privacy, Debbie Reynolds, The Data Diva speaks with Vibeke Specht, Co-founder of Peak Privacy and author of “From GDPR Confusion to Privacy First Marketing,” about privacy, data governance, and the broader societal impact of data-driven marketing practices. Vibeke shares her background in journalism, political science, and marketing, explaining how her work evolved into a focus on privacy as she recognized the deeper implications of data collection, tracking, and profiling.The conversation explores how GDPR is grounded in European history and fundamental rights, including protections against surveillance and misuse of personal data, and how this approach differs from more commercially driven data models often seen in the United States. Debbie and Vibeke discuss how marketing teams were among the first to confront the operational impact of GDPR, particularly through cookie regulations, consent requirements, and shifting expectations around transparency and accountability.They examine the evolution of the ad tech ecosystem, including third-party cookies, large-scale tracking, and the role of dominant platforms in shaping how data is collected, shared, and monetized. The discussion highlights how complex and opaque data flows make it difficult for both organizations and individuals to fully understand how personal data is used, creating risk for companies and limiting meaningful user control.The episode also explores how data practices influence behavior at scale, including the potential impact on democratic systems, decision-making, and public trust. Vibeke emphasizes the importance of moving beyond surface-level compliance and addressing the underlying structures that drive data collection and use, while organizations must balance innovation, competition, and responsible data practices in an increasingly complex regulatory environment.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5pDebbie Reynolds Consulting, LLC

Send us Fan MailBradon Rogers, Chief Customer Officer, IslandIn this episode of The Data Diva Talks Privacy, Debbie Reynolds, "The  Data Diva," speaks with Bradon Rogers, Chief Customer Officer, Island, about how organizations are addressing complex enterprise challenges related to data governance, privacy, and control. Bradon explains how Island was designed to solve persistent issues that companies face, including limited visibility into user activity, fragmented tools, and the difficulty of managing sensitive data across cloud applications, remote work environments, and emerging technologies.The conversation explores how organizations can move toward a more unified, practical approach to data management, where governance and privacy controls are embedded directly into how work is performed. Rather than relying on disconnected systems, Island enables companies to monitor and control how data is accessed and used in real time, helping to reduce risk while maintaining operational efficiency.Debbie and Bradon also discuss how modern enterprises are rethinking data governance as a business-critical function rather than just a compliance requirement. They highlight how privacy considerations are becoming more integrated into enterprise workflows, and how organizations can better align their security, privacy, and data strategies to support both protection and productivity in increasingly complex digital environments.This episode is sponsored by Island. We thank them for their support and for sharing insight into how organizations can better manage data governance and privacy in today’s enterprise landscape."You can learn more at island.io, where Island is rethinking how enterprises secure data, gain visibility, and manage privacy—without getting in the way of how people work."By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5pDebbie Reynolds Consulting, LLC

Send us Fan MailIn this episode of The Data Diva Talks Privacy, Debbie Reynolds, "The Data Diva," speaks with Michael Simon, Founder, Law+Data, LLC, about the intersection of privacy, data governance, and the real-world consequences of how data and technology are used today. The conversation moves beyond theory to examine how emerging technologies are already impacting individuals, organizations, and legal frameworks.Debbie and Michael explore recent events that highlight the growing risks associated with technology and data use, including a widely discussed incident in which a driver claimed a Tesla vehicle malfunction led to a crash, and another case involving a woman arrested for using AI-driven identification. These examples illustrate how reliance on automated systems, data interpretation, and emerging technologies can raise serious legal, privacy, and due-process concerns.The discussion examines how organizations and legal professionals must think more critically about data accuracy, accountability, and the assumptions built into technological systems. Michael provides insight into how legal frameworks struggle to keep pace with technological advancements and how misapplied or misunderstood data can lead to significant consequences for individuals.Debbie Reynolds, the Data Diva, and Michael also address the broader implications for businesses, including the importance of implementing strong data governance practices, ensuring transparency in how data is used, and understanding the legal exposure that can arise when decisions are driven by automated or data-dependent systems. The episode emphasizes that data governance and privacy are not abstract concepts but essential safeguards that directly affect real people and real outcomes.This conversation offers a grounded, practical perspective on how current events are shaping the future of privacy, law, and data responsibility, and why organizations must take a more deliberate, informed approach to managing data in an increasingly complex environment.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5pDebbie Reynolds Consulting, LLC

Send us Fan MailMichelle Finneran Dennedy, Chief Data Strategy Officer, Abaxx TechnologiesIn this episode, Debbie Reynolds, the Data Diva speaks with Michelle Finneran Dennedy, Chief Data Strategy Officer at Abaxx Technologies, about the evolution of privacy as a discipline and its intersection with data strategy, technology, and business operations.Michelle shares her professional journey from patent litigation into privacy leadership, including her experience building privacy programs and helping organizations operationalize privacy across complex environments. The conversation explores how privacy has evolved from a legal compliance function into a core business discipline that requires alignment across legal, engineering, and executive teams.Debbie and Michelle discuss the importance of translating complex regulatory and technical requirements into actionable practices that organizations can implement. They examine how organizations must move beyond reactive compliance approaches and instead develop forward-looking strategies that anticipate changes in regulation and technology.The discussion also explores how data strategy intersects with infrastructure, identity, and emerging technologies, including how systems are designed, how data is structured, and how organizations manage data across environments. Michelle highlights the importance of communication in bridging disciplinary gaps and ensuring that privacy concepts are understood and applied effectively.The episode emphasizes the need for cross-functional collaboration, practical implementation strategies, and systems that reflect both technical realities and the human impact of data use.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5pDebbie Reynolds Consulting, LLC

Send us Fan MailMerry Marwig, Vice President, Global Communications & Advocacy, Privacy4CarsIn this episode, Debbie Reynolds, the Data Diva, speaks with Merry Marwig, Vice President, Global Communications & Advocacy at Privacy4Cars, about privacy risks in connected vehicles and the expanding automotive data ecosystem.Merry explains that modern vehicles function as sophisticated data platforms that continuously collect and transmit data on drivers, passengers, and vehicle activity. The conversation explores the types of data collected, including location data, behavioral data, infotainment usage, diagnostic data, and other signals generated through connected systems, as well as how that data is shared across manufacturers, dealerships, service providers, insurers, and third-party technology providers.Debbie and Merry discuss the complexity of data flows within the automotive ecosystem, including the roles of controllers, processors, and third parties, and how these relationships create challenges for transparency, accountability, and consent. The discussion highlights how individuals often lack visibility into how their data is used and shared across multiple entities.The conversation also includes a discussion of Debbie Reynolds, the Data Diva’s work on the Internet of Things Advisory Board report with the U.S. Department of Commerce, and how that work highlighted many of the same issues now seen in connected vehicles, including data sharing across ecosystems, lack of transparency, and challenges with governance and accountability in multi-party environments.Debbie and Merry examine consumer awareness gaps, including the fact that most individuals do not fully understand the extent of data collection in vehicles or how their information is used. They also discuss what happens to personal data when a vehicle is sold, transferred, or serviced, and the importance of tools and processes that allow individuals to manage, delete, or control their data across the vehicle lifecycle.The episode also covers regulatory developments impacting automotive privacy, the role of advocacy organizations in improving industry practices, and the importance of clear communication between companies and consumers. The discussion emphasizes the need for organizations to integrate privacy into product design and governance processes while balancing innovation and responsible data use.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5pDebbie Reynolds Consulting, LLC

Send us Fan MailIn this episode, Debbie Reynolds “The Data Diva” speaks with Evan Benjamin, President of Tier 3 Inc., about the growing challenges of privacy in AI systems, particularly in relation to inference, agent-based systems, and data lifecycle management.Evan shares his transition from IT, e-discovery, and information security into privacy, highlighting how the rapid adoption of large language models has exposed gaps in how organizations approach privacy and data protection. The conversation explores the distinction between security and privacy, emphasizing that security focuses on protecting systems while privacy focuses on purpose, data use, and fundamental rights.Debbie and Evan discuss the risks associated with AI-driven inference, including how systems generate insights about individuals based on context and historical data, often without user awareness or control. They also examine how AI memory and agent-based systems can extend data usage beyond original intent, raising concerns about purpose limitation and data minimization.The discussion further addresses challenges with data retention, logging, and traceability, as well as the difficulty of deleting data from AI systems once it has been incorporated into model training. Evan highlights the technical limitations of data erasure in machine learning models and the implications for privacy rights such as the right to be forgotten.Finally, the conversation explores issues related to data processing across multiple systems, including the complexity of managing controllers, processors, and sub-processors, as well as emerging risks related to liability when organizations deploy AI systems and autonomous agents.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5pDebbie Reynolds Consulting, LLC

Send us Fan MailIn this episode, Debbie Reynolds “The Data Diva” speaks with Mojisola Abi Sowemimo about the intersection of privacy, governance, and emerging technologies, with a focus on how organizations can better align data practices with regulatory expectations and ethical responsibilities.The conversation explores how organizations approach privacy in practice, including gaps between policy and implementation, and the challenges of operationalizing privacy requirements across complex systems. Mojisola discusses the importance of embedding privacy considerations early in system design, as well as the need for organizations to move beyond surface-level compliance toward more accountable and transparent data practices.Debbie and Mojisola also examine how global regulatory differences influence organizational behavior, the role of governance frameworks in managing data risk, and the importance of building internal awareness and accountability. The discussion highlights how organizations can strengthen their approach to privacy by aligning legal, technical, and operational perspectives while ensuring that data practices remain consistent with user expectations and regulatory requirements.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5pDebbie Reynolds Consulting, LLC

Send us Fan MailFederica Fornaciari, Full Professor and Academic Program Director for the Master's in Strategic Communications, National University https://www.nu.eduIn this episode, Debbie Reynolds "The Data Diva" speaks with Federica Fornaciari, Full Professor and Academic Program Director for the Master's in Strategic Communications at National University, about how communication, media narratives, and cultural values shape societies' understanding of privacy, technology, and artificial intelligence.Federica shares her background studying communication, journalism, and privacy research, including her work examining how media narratives in the United States and Europe have shaped public perceptions of privacy over time. The conversation explores how privacy is often framed as a fundamental human right in Europe, whereas in the United States, it is frequently treated as a consumer or transactional issue, shaping both regulatory approaches and public expectations.Debbie and Federica discuss the role of AI literacy in privacy protection, emphasizing that people increasingly share highly personal information with generative AI systems without fully understanding how their data may be collected, stored, or used. They also explore the ethical responsibilities of organizations developing AI technologies, as well as the importance of transparency, accountability, and the embedding of ethical values in algorithm design.The conversation also addresses emerging risks, including deepfakes, the erosion of public trust in digital information, and the challenges of identifying manipulated content. Debbie and Federica discuss the importance of media literacy and education in helping individuals recognize these risks while also acknowledging that technological detection tools often lag behind the creation of synthetic media.Finally, the discussion explores the risks of algorithmic inference in areas such as healthcare and decision making, the importance of keeping humans in leadership roles when using AI systems, and the need for ethical frameworks that protect human rights, avoid bias, and prioritize transparency and accountability. Federica concludes by emphasizing the importance of combining technology design, human literacy, and regulatory frameworks to create a more responsible global approach to privacy and AI governance.By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.Support the showBecome an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI. 👉 Join here: http://bit.ly/3Jb8S5pDebbie Reynolds Consulting, LLC