Future of Data Security

In this episode of The Future of Data Security Show, Jean speaks with Orrie Dinstein, Global Chief Privacy Officer at Marsh McLennan. Orrie shares his extensive experience in data privacy, highlighting the shift from compliance-focused programs to a more integrated approach that encompasses information governance.    Orrie also sheds light on the misconception of data ownership among executives, the complexities of navigating global privacy laws, and the critical need for collaboration between privacy and security teams. He also offers his strategies for how organizations can effectively manage data protection while fostering innovation.    Topics discussed:   The shift in data privacy from a compliance-focused approach to a more integrated information governance strategy that encompasses various data types and uses.   The misconception among executives that they own the data, when in reality, they are custodians responsible for managing it ethically and legally.   Navigating diverse global privacy laws, which often have different definitions and requirements, making compliance a challenging endeavor for organizations.   The importance of understanding high-level principles of data protection rather than getting lost in the specific legal nuances of various jurisdictions.   The critical need for collaboration between Chief Privacy Officers and Chief Information Security Officers to effectively manage data risks and security measures.   The role of privacy by design in ensuring compliance while allowing organizations to innovate and leverage data effectively for business growth.   The challenges posed by artificial intelligence and data minimization principles, which can conflict with the need for larger datasets to improve AI models.   The evolving responsibilities of privacy professionals, who must now focus on data governance and monetization in addition to traditional privacy concerns.   Fostering a culture of transparency and awareness within organizations to encourage reporting of data breaches and privacy concerns.   The necessity of continuous dialogue between privacy and technology teams to bridge communication gaps and enhance understanding of each other's objectives and challenges.

In this episode of The Future of Data Security Show, Jean speaks with Hugo Teufel, VP; Deputy General Counsel for Cyber, Privacy, Records; & Chief Privacy Officer at Lumen Technologies. Hugo shares his expertise on the evolving landscape of data privacy and security, such as the significant impact of AI on data security, emphasizing the need for organizations to understand various AI use cases and implement robust governance frameworks.    Hugo also highlights the importance of employee training in mitigating risks, noting that human error remains a critical vulnerability. Additionally, he explores the complexities of navigating global data privacy regulations and the necessity of aligning privacy strategies with organizational risk appetites. Tune in for valuable insights!    Topics discussed: The evolution of data privacy and security in the context of an increasingly digital and interconnected global marketplace.   The significance of understanding AI use cases within organizations to effectively manage data security risks and compliance.   The role of employee training in preventing data breaches and enhancing overall cybersecurity awareness among staff members.   The challenges of navigating international data privacy regulations and the importance of a principles-based framework for compliance.   The impact of cultural differences on data privacy perceptions and practices across various regions and jurisdictions.   The necessity of aligning privacy strategies with the risk appetite of leadership to maintain credibility and effectiveness.   The importance of incorporating privacy by design in product development to address privacy implications early in the process.   The potential risks associated with shadow AI and the need for organizations to maintain visibility over AI usage.   The implications of the NIST AI Risk Management Framework for organizations looking to adopt AI technologies responsibly.   The future of data security in an AI-driven era and the ongoing challenges posed by cybercriminals and threat actors.   

In this episode of The Future of Data Security Show, Jean speaks with Sylvia Klasovec Kingsmill, Senior Fellow, Future of Privacy Forum and Founder of Trusteva. They explore the critical distinctions between data privacy and data security, emphasizing their complementary roles in protecting individual rights and safeguarding data.  Sylvia also addresses the complexities AI introduces to privacy regulations, particularly around consent and data scraping. Additionally, she highlights the importance of adopting a "privacy by design" philosophy, urging organizations to proactively integrate privacy measures into their systems.    Topics discussed: The distinction between data privacy and data security, highlighting how they are complementary yet fundamentally different disciplines in protecting individual rights and data integrity. The importance of consent in data privacy, particularly in the context of AI and machine learning, and the challenges posed by data scraping practices. The evolving regulatory landscape for data privacy, including the complexities faced by organizations trying to comply with various laws across different jurisdictions. The role of privacy by design as a proactive approach to integrating privacy measures into systems and processes from the outset. The significance of a risk-based approach to compliance, allowing organizations to prioritize their privacy efforts based on the most significant risks. The need for harmonization among global privacy regulations, especially as organizations expand their operations across different jurisdictions with varying laws. The impact of AI on traditional privacy principles, and the necessity for regulators to adopt flexible interpretations to support innovation while ensuring compliance. The importance of multidisciplinary collaboration among privacy professionals, cybersecurity experts, and legal teams to effectively address complex data challenges. The growing demand for privacy-enhancing technologies and how organizations can leverage them to ensure ethical and responsible data use. The future of data privacy as a dynamic field, emphasizing the need for professionals to continuously upskill and adapt to emerging technologies and regulations. 

In this episode of The Future of Data Security Show, Jean speaks with Martin Dinel, Assistant Deputy Minister & CISO, Cybersecurity Division of the Government of Alberta. Martin uses his extensive experience in cybersecurity and the evolving landscape of data protection to explore the significant impact of AI on enhancing data security measures, emphasizing a risk-based approach to adopting new technologies.    Martin also delves into the challenges and strategies of cloud adoption in the public sector, highlighting how centralized data management can improve security. Additionally, he addresses the importance of collaboration among government entities to strengthen cybersecurity efforts across Alberta.  Topics discussed:   The evolution of the data security landscape in the public sector and how it has changed since the early days of cloud adoption.   The role of AI in enhancing cybersecurity measures, including user behavior analysis and incident management for quicker response times.   The importance of a risk-based approach to cybersecurity, balancing security needs with business objectives and organizational goals.   Strategies for cloud adoption in the public sector, focusing on centralized data management and leveraging vendor expertise to improve security.   The challenges of increasing attack surfaces when moving data to the cloud and how to mitigate associated risks effectively.   The significance of collaboration among government entities to strengthen cybersecurity efforts and share valuable insights and lessons learned.   The potential risks associated with generative AI tools and the importance of implementing guidelines for safe usage within organizations.   The impact of legacy systems on current cybersecurity strategies and the need to address vulnerabilities in older applications.   The necessity for cybersecurity professionals to maintain close communication with senior management to ensure informed decision-making regarding security measures.   The ongoing talent challenges in the public sector and how engaging projects can attract and retain skilled cybersecurity professionals.