Send us Fan Mail

Michelle Finneran Dennedy, Chief Data Strategy Officer, Abaxx Technologies

In this episode, Debbie Reynolds, the Data Diva speaks with Michelle Finneran Dennedy, Chief Data Strategy Officer at Abaxx Technologies, about the evolution of privacy as a discipline and its intersection with data strategy, technology, and business operations.

Michelle shares her professional journey from patent litigation into privacy leadership, including her experience building privacy programs and helping organizations operationalize privacy across complex environments. The conversation explores how privacy has evolved from a legal compliance function into a core business discipline that requires alignment across legal, engineering, and executive teams.

Debbie and Michelle discuss the importance of translating complex regulatory and technical requirements into actionable practices that organizations can implement. They examine how organizations must move beyond reactive compliance approaches and instead develop forward-looking strategies that anticipate changes in regulation and technology.

The discussion also explores how data strategy intersects with infrastructure, identity, and emerging technologies, including how systems are designed, how data is structured, and how organizations manage data across environments. Michelle highlights the importance of communication in bridging disciplinary gaps and ensuring that privacy concepts are understood and applied effectively.

The episode emphasizes the need for cross-functional collaboration, practical implementation strategies, and systems that reflect both technical realities and the human impact of data use.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send us Fan Mail

Merry Marwig, Vice President, Global Communications & Advocacy, Privacy4Cars
In this episode, Debbie Reynolds, the Data Diva, speaks with Merry Marwig, Vice President, Global Communications & Advocacy at Privacy4Cars, about privacy risks in connected vehicles and the expanding automotive data ecosystem.
Merry explains that modern vehicles function as sophisticated data platforms that continuously collect and transmit data on drivers, passengers, and vehicle activity. The conversation explores the types of data collected, including location data, behavioral data, infotainment usage, diagnostic data, and other signals generated through connected systems, as well as how that data is shared across manufacturers, dealerships, service providers, insurers, and third-party technology providers.

Debbie and Merry discuss the complexity of data flows within the automotive ecosystem, including the roles of controllers, processors, and third parties, and how these relationships create challenges for transparency, accountability, and consent. The discussion highlights how individuals often lack visibility into how their data is used and shared across multiple entities.
The conversation also includes a discussion of Debbie Reynolds, the Data Diva’s work on the Internet of Things Advisory Board report with the U.S. Department of Commerce, and how that work highlighted many of the same issues now seen in connected vehicles, including data sharing across ecosystems, lack of transparency, and challenges with governance and accountability in multi-party environments.

Debbie and Merry examine consumer awareness gaps, including the fact that most individuals do not fully understand the extent of data collection in vehicles or how their information is used. They also discuss what happens to personal data when a vehicle is sold, transferred, or serviced, and the importance of tools and processes that allow individuals to manage, delete, or control their data across the vehicle lifecycle.

The episode also covers regulatory developments impacting automotive privacy, the role of advocacy organizations in improving industry practices, and the importance of clear communication between companies and consumers. The discussion emphasizes the need for organizations to integrate privacy into product design and governance processes while balancing innovation and responsible data use.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send us Fan Mail

In this episode, Debbie Reynolds “The Data Diva” speaks with Evan Benjamin, President of Tier 3 Inc., about the growing challenges of privacy in AI systems, particularly in relation to inference, agent-based systems, and data lifecycle management.

Evan shares his transition from IT, e-discovery, and information security into privacy, highlighting how the rapid adoption of large language models has exposed gaps in how organizations approach privacy and data protection. The conversation explores the distinction between security and privacy, emphasizing that security focuses on protecting systems while privacy focuses on purpose, data use, and fundamental rights.

Debbie and Evan discuss the risks associated with AI-driven inference, including how systems generate insights about individuals based on context and historical data, often without user awareness or control. They also examine how AI memory and agent-based systems can extend data usage beyond original intent, raising concerns about purpose limitation and data minimization.

The discussion further addresses challenges with data retention, logging, and traceability, as well as the difficulty of deleting data from AI systems once it has been incorporated into model training. Evan highlights the technical limitations of data erasure in machine learning models and the implications for privacy rights such as the right to be forgotten.

Finally, the conversation explores issues related to data processing across multiple systems, including the complexity of managing controllers, processors, and sub-processors, as well as emerging risks related to liability when organizations deploy AI systems and autonomous agents.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send us Fan Mail

In this episode, Debbie Reynolds “The Data Diva” speaks with Mojisola Abi Sowemimo about the intersection of privacy, governance, and emerging technologies, with a focus on how organizations can better align data practices with regulatory expectations and ethical responsibilities.

The conversation explores how organizations approach privacy in practice, including gaps between policy and implementation, and the challenges of operationalizing privacy requirements across complex systems. Mojisola discusses the importance of embedding privacy considerations early in system design, as well as the need for organizations to move beyond surface-level compliance toward more accountable and transparent data practices.

Debbie and Mojisola also examine how global regulatory differences influence organizational behavior, the role of governance frameworks in managing data risk, and the importance of building internal awareness and accountability. The discussion highlights how organizations can strengthen their approach to privacy by aligning legal, technical, and operational perspectives while ensuring that data practices remain consistent with user expectations and regulatory requirements.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send us Fan Mail

Federica Fornaciari, Full Professor and Academic Program Director for the Master's in Strategic Communications, National University

In this episode, Debbie Reynolds "The Data Diva" speaks with Federica Fornaciari, Full Professor and Academic Program Director for the Master's in Strategic Communications at National University, about how communication, media narratives, and cultural values shape societies' understanding of privacy, technology, and artificial intelligence.

Federica shares her background studying communication, journalism, and privacy research, including her work examining how media narratives in the United States and Europe have shaped public perceptions of privacy over time. The conversation explores how privacy is often framed as a fundamental human right in Europe, whereas in the United States, it is frequently treated as a consumer or transactional issue, shaping both regulatory approaches and public expectations.

Debbie and Federica discuss the role of AI literacy in privacy protection, emphasizing that people increasingly share highly personal information with generative AI systems without fully understanding how their data may be collected, stored, or used. They also explore the ethical responsibilities of organizations developing AI technologies, as well as the importance of transparency, accountability, and the embedding of ethical values in algorithm design.

The conversation also addresses emerging risks, including deepfakes, the erosion of public trust in digital information, and the challenges of identifying manipulated content. Debbie and Federica discuss the importance of media literacy and education in helping individuals recognize these risks while also acknowledging that technological detection tools often lag behind the creation of synthetic media.

Finally, the discussion explores the risks of algorithmic inference in areas such as healthcare and decision making, the importance of keeping humans in leadership roles when using AI systems, and the need for ethical frameworks that protect human rights, avoid bias, and prioritize transparency and accountability. Federica concludes by emphasizing the importance of combining technology design, human literacy, and regulatory frameworks to create a more responsible global approach to privacy and AI governance.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send a text

Bob Carver, CEO, Cybersecurity Boardroom

In this episode, Debbie Reynolds speaks with Bob Carver, CEO of Cybersecurity BoaDebbie Reynolds “The Data Diva” talks to Bob Carver, CEO of Cybersecurity Boardroom, about the evolving cybersecurity and privacy risks created by emerging technologies, connected devices, and increasingly sophisticated threat actors.

Bob shares his path into cybersecurity, beginning with a career managing commercial real estate before transitioning into information systems and eventually helping build one of the early internal security programs at Verizon Wireless. He reflects on how cybersecurity has evolved from basic perimeter defenses such as firewalls and intrusion detection systems into a far more complex environment where organizations must secure interconnected systems, APIs, cloud services, and AI technologies.

The conversation explores several emerging risks associated with artificial intelligence systems, including model inversion attacks that allow attackers to extract sensitive or proprietary information from AI models, as well as the potential theft of entire AI models through repeated API queries. Debbie and Bob also discuss the security risks associated with agentic AI systems that have administrative permissions to interact with files, databases, or enterprise systems, highlighting the importance of strong guardrails and controlled access.

Privacy risks related to connected devices are also discussed, including smart televisions and other IoT technologies that continuously collect and transmit user data to manufacturers and data brokers. Debbie and Bob examine the broader implications of large-scale data collection and the challenges individuals face in maintaining visibility and control over their personal information.

The episode also covers common phishing attacks that mimic legitimate security alerts and the importance of verifying requests through official platforms. Finally, Bob discusses the potential future of cybersecurity, highlighting the role that zero-trust architectures and post-quantum encryption may play in strengthening long-term digital security.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send a text

Chuck Brooks, President, Brooks Consulting International and Adjunct Faculty, Georgetown University

In this episode, Debbie Reynolds speaks with Chuck Brooks about why data privacy and cybersecurity are now strategic imperatives for organizations. The discussion includes Chuck’s Forbes article, “Why Data Privacy Is a Strategic Imperative for Organizations,” and expands on its core themes in the context of today’s rapidly evolving threat landscape.

The conversation begins with the rapid evolution of artificial intelligence, including generative AI and agentic AI. Chuck explains how AI is being used not only for productivity and automation but also for sophisticated phishing campaigns, automated vulnerability discovery, ransomware operations, bot-driven attacks, and large-scale fraud. They discuss the risks of agentic AI operating autonomously without clear regulatory guardrails, as well as the dangers of poor data quality when AI systems rely on flawed or excessive data.

Debbie and Chuck examine cybersecurity hygiene, including password management, multi-factor authentication, identity protection, social engineering threats, phishing resilience, segmentation of critical data, and the importance of assuming breach as part of an overall resilience strategy. They highlight why small and medium businesses are especially vulnerable in today’s threat environment.

The discussion explores the relationship between privacy and cybersecurity, clarifying how privacy is contextual and often elective, while cybersecurity focuses on protecting systems and data integrity. They examine oversharing on social media, identity exploitation, insider threats, trade secret protection, and why organizations must treat data as a strategic asset. The importance of building a culture of privacy within organizations is emphasized as a leadership responsibility rather than a compliance afterthought.

IoT risks are addressed, including default passwords, connected devices as attack vectors, endpoint vulnerabilities, and real-world breaches involving unexpected networked devices. The episode also covers data retention risks, overcollection, data minimization, and the need for structured governance frameworks that prioritize high-value data.

Finally, the conversation turns to quantum computing. Chuck explains different forms of quantum technologies, including quantum algorithms, sensing, and photonics, and discusses the potential impact of “Q Day” on encryption standards. They explore quantum-resistant algorithms, NIST guidance, and the convergence of quantum and AI as both transformative and disruptive forces.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC

Send a text

Episode e277- Tom Kemp The Data Diva Talks Privacy Podcast

Tom Kemp, Executive Director of the California Privacy Protection Agency

In Episode 277 of The Data Diva Talks Privacy Podcast, Debbie Reynolds, the Data Diva, speaks with Tom Kemp, Executive Director of the California Privacy Protection Agency, about California’s role as the de facto privacy bellwether in the United States and how regulatory expectations are shifting from policy development to operational enforcement and accountability.

Debbie and Tom discuss key regulatory focus areas, including the Delete Request and Opt-Out Platform (DROP), Automated Decision-Making Technologies (ADMT), Opt-Out Preference Signals (OOPS), Global Privacy Control (GPC), cybersecurity audits, and privacy risk assessments. The conversation explores how these initiatives reflect a broader shift toward measurable governance, technical compliance, and demonstrable accountability.

They also discuss how regulators assess data risk, emerging enforcement trends, and what companies should be thinking about now as privacy programs start and mature. Tom explains how organizations can prepare for evolving expectations around governance, risk management, and documentation, and what strong privacy governance looks like going forward.

The episode concludes with Tom Kemp’s message to organizations about accountability, risk awareness, and responsible innovation as privacy regulation continues to evolve alongside artificial intelligence and emerging technologies.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Become an insider, join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox.

💡 Receive expert briefings, practical guidance, and exclusive resources designed for leaders shaping the future of data and AI.

👉 Join here: http://bit.ly/3Jb8S5p

Debbie Reynolds Consulting, LLC