EP 8 — Marsh McLennan’s Orrie Dinstein on Navigating Global Data Privacy Challenges

In this episode of The Future of Data Security Show, Jean speaks with Orrie Dinstein, Global Chief Privacy Officer at Marsh McLennan. Orrie shares his extensive experience in data privacy, highlighting the shift from compliance-focused programs to a more integrated approach that encompasses information governance.    Orrie also sheds light on the misconception of data ownership among executives, the complexities of navigating global privacy laws, and the critical need for collaboration between privacy and security teams. He also offers his strategies for how organizations can effectively manage data protection while fostering innovation.    Topics discussed:   The shift in data privacy from a compliance-focused approach to a more integrated information governance strategy that encompasses various data types and uses.   The misconception among executives that they own the data, when in reality, they are custodians responsible for managing it ethically and legally.   Navigating diverse global privacy laws, which often have different definitions and requirements, making compliance a challenging endeavor for organizations.   The importance of understanding high-level principles of data protection rather than getting lost in the specific legal nuances of various jurisdictions.   The critical need for collaboration between Chief Privacy Officers and Chief Information Security Officers to effectively manage data risks and security measures.   The role of privacy by design in ensuring compliance while allowing organizations to innovate and leverage data effectively for business growth.   The challenges posed by artificial intelligence and data minimization principles, which can conflict with the need for larger datasets to improve AI models.   The evolving responsibilities of privacy professionals, who must now focus on data governance and monetization in addition to traditional privacy concerns.   Fostering a culture of transparency and awareness within organizations to encourage reporting of data breaches and privacy concerns.   The necessity of continuous dialogue between privacy and technology teams to bridge communication gaps and enhance understanding of each other's objectives and challenges.