Masters of Privacy
by Sergio Maldonado
Interviews and updates at the intersection of marketing, data, privacy, and technology. With an eye on a human-centric, demand-led future in which transparency, control, and personal agency play a crucial role. Sergio Maldonado (host) is a triple-qualified lawyer (California, England & Wales, Spain), entrepreneur, investor, guest lecturer at various universities. LL.M in IT & Internet Law, FIP, CIPP/E/US, CIPT. www.mastersofprivacy.com
Episodes
-
Dera Nevin: navigating new data categories, Retail Media, Agentic Commerce, and automated DSRs
Dera Nevin is Managing Director of Digital Insights & Risk Management at FTI Consulting. She is a data lawyer and expert with more than 20 years of experience addressing digital risk issues, including privacy, data protection, information risk management, e-discovery, advertising technology and…
more -
Adrian Doerk: digital identity and digital wallets in the EU (remastered and revisited)
As we approach an important deadline in the eIDAS 2.0 Regulation that established the EU Digital Identity Wallet, we are republishing an interview that should help us get up to speed on the subject. By December 24 (this year), every EU Member State must offer its citizens at least one European...
-
Heidi Saas: data as a valuable asset, US consumers vs. data brokers
Attorney Heidi Saas (CIPP/US) has over twenty years of experience in consumer rights, eight years in data privacy, and five years of ethical AI and governance experience. Her projects currently involve working with CEOs, CTOs, CISOs, DPOs, and CMOs of companies in various industries on regulatory...
-
Aleksandr Tiulkanov: dissecting transparency requirements in the EU AI Act
Aleksandr Tiulkanov has advised businesses on legal and compliance matters since 2003 and has focused on IT law and digital policy since 2015. He has previously been a Special Adviser on Digital Development at the Council of Europe; as well as Senior Manager for Technology, Media and Telecoms at...
-
Dazza Greenwood: from agentic contracts to AI-assisted law firms. Delegation, attribution and judgment
Daniel “Dazza” Greenwood is the founder of CIVICS.com, a boutique provider of professional consultancy services for legal technologies, automated transactions, privacy and data management, and technology strategy. Dazza is also a researcher at MIT Media Lab and Lecturer at MIT Connection Science...
-
Shannon Yavorsky: legal implications of AI-driven recruitment
Shannon Yavorsky is a Global Co-Chair of Orrick’s Cyber, Privacy & Data Innovation group and co-head of its AI practice. She advises leading companies on privacy, cybersecurity and AI regulation, governance, transactions and strategic risk management, helping clients translate fast-moving legal...
-
Julian Gage: the evolving shape and role of DPIAs
How should we approach a Data Protection Impact Assessment or Privacy Impact Assessment in this new world? Are we recycling “mitigation measures” shamelessly? Are we drowning in futile DPIAs that were never really required? Julian Gage is a fractional DPO and the founder of Engage Compliance. He...
-
Amy Lawrence: Meta settlement, advertising to minors, age assurance and addictive design.
Amy Lawrence is Chief Privacy Officer and Head of Legal at SuperAwesome, where she leads global privacy strategy for technology and media products designed for young audiences. An expert in youth privacy and digital regulation, Amy advises on building adtech services and responsible advertising…
more -
Rosalia Anna D’Agostino: Deep Fakes, algorithmic fairness and the challenges of younger generations
Rosalia Anna D’Agostino is an Italian Lawyer, Data Privacy and AI Compliance Expert, until recently working at the German law firm Spirit Legal. Fluent in five languages, she graduated in Comparative European and International law from the University of Trento (IT). Rosalia completed a joint...
-
Carissa Véliz: navigating LLM constraints in the pursuit of AI ethics
Carissa Véliz is an Associate Professor in Philosophy at the Institute for Ethics in AI, and a Fellow at Hertford College at the University of Oxford. She is the recipient of the 2021 Herbert A. Simon Award for Outstanding Research in Computing and Philosophy. Our guest is the author of Prophecy,...
-
Daniel Solove: consent vs. privacy
Professor Solove returns to discuss the fundamental flaws of “informed consent” and explore viable alternatives in the quest for true individual privacy. Daniel J. Solove is the Bernard Professor of Intellectual Property and Technology Law at the George Washington University Law School. He is the...
-
Newsroom: Summer 2026
We’re back for a new season (#12 across both channels, heading into our 7th year!), and we do it with a Newsroom update. We will cover our usual five blocks: ePrivacy & regulatory updates; MarTech & AdTech; AI, competition and digital markets; Zero-Party Data; and the future of media. This…
more -
Eduardo Ustaran: the status of privacy in 2026, UK-EU divergence on automated decisions
Where is the privacy-AI convergence taking us in 2026? How different is the UK’s new approach to automated decision making (ADMT)? Is AI pushing young lawyers out of the profession? Eduardo Ustaran is global co-head of the Hogan Lovells Privacy and Cybersecurity practice, widely recognized as one...
-
Theodore Christakis: chatbot privacy dreams and the health AI agent rush
“You trust your chatbot with everything. Should you?” is the title of Theodore Christakis’ comprehensive research project on the privacy of our conversations with AI. Part two of this project (“Governments, Courts and the Battle Over Your Chatbot Conversations”) was published on June 8th, and we...
-
Malcolm Bain: copyright protection of AI-generated works and protection of copyrighted works from AI training
We are revisiting the AI-copyright interplay for the first time in nearly three years. Copyright remains very relevant to our sphere of interest, not least because the EU AI Act specifically points at EU copyright law with regards to training data and transparency requirements for AI models....
-
John Pavolotsky: California legal updates, Colorado AI reset, data breach clauses revisited
Our repeat guest is a partner at Stoel Rives in San Francisco. John is co-lead of the firm’s Technology Industry Group. He counsels clients on data privacy, information security, artificial intelligence, and other technology dispute, compliance, and transactional matters. John has taught…
more -
Tim Turner: The DPO Daily Challenge, recent updates to the UK legal framework
How about an extremely practical book with detailed examples and quizzes based on a fictional town? Also, let’s revisit the UK legal framework: impact of the DUAA 2025 and proposed PECR changes. Tim Turner (here for a third time) is the author of “The DPO Daily Challenge” (April 2026). He has...
-
Newsroom: Spring 2026
We’re back with a Newsroom update. We will cover four of our usual five blocks: ePrivacy & regulatory updates; MarTech & AdTech; AI, competition and digital markets; and the future of media. This season’s update includes: * Age-verification fines (insufficient controls, too much data collection)…
more -
Tom Kemp (CalPrivacy): on the SECURE Data Act, CCPA whistleblowers, DROP, and AB 566
As Executive Director of CalPrivacy (California Privacy Protection Agency), Tom Kemp oversees the CPPA’s mission to enforce and implement California’s comprehensive privacy laws and ensure the public has a strong understanding of their rights. Tom has a deep understanding of privacy and...
-
Mark Webber: a law firm’s perspective on AI governance
Mark Webber is the US Managing Partner responsible for overseeing the operations of Fieldfisher in the country - an English lawyer located full time in Silicon Valley. Mark is a recognised leading privacy and AI expert, with a wealth of experience working alongside the world’s leading tech...
-
Iain Henderson: MyTerms as the missing universal opt-in signal (After The Magic repost)
Universal opt-out signals (like Global Privacy Control) have gained momentum on both sides of the Atlantic, with the EU recently endorsing them (Digital Omnibus) and CalPrivacy, Colorado, or Connecticut legally enforcing them, but they do not solve for consent opt-in requirements still applicable...
-
Shoshana Rosenberg: logic and strategy in AI governance
Shoshana Rosenberg advises boards and executive teams on AI governance, privacy, security compliance, and data strategy. She is the author of Practical AI Governance (Kogan Page, May 2026) and the creator of the PRISM™ framework, a practitioner’s model for responsible AI. She is Managing Director...
-
Mirena Taskova: the human-AI interaction as a growing dimension of consumer profiling, and its impact on human behavior
Our interactions with generative AI tools start to affect our personal relationships, communication style, and mental health, as well as our own perception of each other’s capabilities. They also leave a new trace of signals that privacy professionals never had to contend with in the past. As we...
-
Chiara Wirz: a practical AI governance framework for in-house counsel and privacy professionals
Chiara Wirz is a dual-admitted lawyer (California-Switzerland) who advises on privacy, AI governance, and cross-border corporate matters. She has served as Corporate Counsel and AI Ambassador at eBay Inc., where she built AI governance frameworks, operationalized AI deployment at the use case...
-
Amy Worley: an overarching framework for AI governance, privacy, and cybersecurity
Can you imagine an all-encompassing dashboard that shows your progress across all three pillars of “digital confidence”: AI governance, privacy, and cybersecurity? Amy Worley is Managing Director at BRG, a global leader in data protection, information security, and AI governance. A licensed...
-
Newsroom: Winter 2026
It is time for a seasonal update at the intersection of Marketing, Data, Privacy and Technology. We will stick to our usual five blocks: ePrivacy & regulatory updates; MarTech & AdTech; AI, Competition and Digital Markets; PETs, Zero-Party Data and Customer Centricity; Future of Media. This...
-
John Harman: Ring cameras, Meta glasses, biometrics and AI governance
John Harman (CIPP-US, CIPP-E, CIPM, FIP) is senior privacy counsel at a major global entertainment company (NBCUniversal), where he advises on emerging privacy challenges at the intersection of AI, biometric data, film marketing and consumer-facing technologies. With a background spanning both...
-
Phil Pearce: Google Consent Mode vs. ePrivacy, gaps in CIPA evidence and advanced audits
How does Google Consent Mode affect ePrivacy compliance, opt-in signals, traffic sampling, marketing performance, and CIPA claims? What are the most common technical mistakes in the configuration of Tag Managers, tracking rules, and consent banners? Where is “do not train” (LLMs) going? Does...
-
Taylor Bloom: Shielding your AdTech and MarTech stack from public and privacy enforcement in California
Taylor Bloom is a partner at Baker & Hostetler LLP with significant experience operating at the intersection of law, technology and business, with a keen focus on international data protection, data privacy and governance. A certified privacy professional (CIPP/E, CIPP/US and CIPM) and the former...
-
Adam Greco: the future of Analytics, DXM, composability, and the internet
The business purposes of digital data collection are not so obvious to all, and things will get even more complicated in an internet dominated by AI agents. We will today revisit the history of Digital Analytics and its evolution from Marketing-centric Analytics to Product Analytics and,...
-
Anu Bradford: Should the EU do with Meta what the US has done with TikTok?
Anu H. Bradford is a Finnish-American author, law professor, and expert in international trade law. In 2014, she was named the Henry L. Moses Distinguished Professor of Law and International Organization at the Columbia Law School. She is the author of “Digital Empires: The Global Battle to...
-
Gabriela Zanfir-Fortuna: GDPR changes, AI Act hangover, Russmedia
Dr. Gabriela Zanfir-Fortuna is a globally recognized data protection law expert, with 15 years of experience in the field split between Europe and the U.S., spanning academia, public service, consulting and policy. She currently is Vice President for Global Privacy at the Future of Privacy Forum…
more -
Jacob Feder: Data Clean Rooms, revisited
It is time to revisit Data Clean Rooms, having dedicated seven previous episodes to the topic across both the English and Spanish-language channels. The convergence of advanced data management techniques, more mature Privacy Enhancing Technologies, and sophisticated 1st-party data-based...
-
Sam Kaplan: Cybersecurity in the age of agentic AI, deep fakes, and social engineering
Can AI agents be deployed for enhanced protection? What is a “triple extortion”? How is ransomware evolving? Is there hope for SMEs? Sam Kaplan is a policy, legal, and national security professional with over eighteen years of experience across the public and private sectors. He is currently the...
-
Masters of Privacy LIVE NYC January 2026 (with Alan Chapell)
In this live recording (January 14th 2026), we have conducted a comparative law exercise (US/EU) regarding ePrivacy compliance through Universal Opt-Out signals. Alan Chapell is the President of Chapell & Associates, a law firm serving media and AdTech. He is outside counsel and CPO to several of...
-
Newsroom: Fall 2025
It is time for a seasonal update at the intersection of Marketing, Data, Privacy and Technology. We will stick to our usual five blocks: ePrivacy & regulatory updates; MarTech & AdTech; AI, Competition and Digital Markets; PETs, Zero-Party Data and Customer Centricity; Future of Media. This...
-
Oliver Patel: How the Digital Omnibus affects the EU AI Act
On Wednesday November 19 2025, the European Commission unveiled its Digital Omnibus Package, which was basically split in two proposals: a proposed Regulation on simplification for AI rules; and a proposed Regulation on simplification of the digital legislation. We will tackle the first one…
more -
Zino Rost van Tonningen: first-party data and LLMs in mobile advertising
Can the growing use of first-party data in mobile app advertising result in more effective, privacy-preserving ads? Are app store policies (around fingerprinting and the use of deterministic IDs) more relevant than specific data protection laws and enforcement actions? Can AI take contextual...
-
Stefano Bennati: dealing with privacy threats in generative AI
Dr. Stefano Bennati has over a decade of experience developing tools and processes to ensure data-centric organizations comply with privacy, licensing, and responsible AI standards. Our guest has led privacy engineering and responsible AI teams with a global mandate. His work includes building…
more -
US ePrivacy compliance, CIPA and VPPA claims for EU lawyers - and dummies
As promised last week, today’s episode provides greater context on US ePrivacy audits, CIPA/VPPA claims, and EU-US comparative law as it affects the rollout or maintenance of MarTech solutions on websites and mobile applications. References: * “The slippery slope of consent banners in preventing...
-
Masters of Privacy LIVE NYC November 2025 (with Daniel Rosenzweig)
In this live recording (November 6th 2025) we have tackled website protections from pixel-related litigation or public enforcement, paying closer attention to technical measures and the bridge between legal compliance and code-based strategies. Our repeat guest is Daniel B. Rosenzweig, Founder &...
-
Mélissa M'Raidi-Kechichian: Canada’s AI sovereignty, privacy laws, and the timing of ethical frameworks
Mélissa M’Raidi-Kechichian is a Research and Advocacy Fellow at the Center for AI and Digital Policy. As an expert in AI policy, frameworks, and regulation, Mélissa has previously worked in the field of AI and digital policy, civic technology, and digital identity, having also held several...
-
Adv Dirontsho Mohale: understanding South Africa’s POPIA, the protection of juristic persons, and pan-African data flows
South Africa’s POPIA uniquely protects both individuals and legal entities, a departure from typical data protection laws. We have focused on understanding this unique figure (Will it one day offer key insights into the complexities arising from the increasing use of AI?) before discussing...
-
John Pavolotsky: California's privacy and AI legislative spree (October 2025)
California has enacted a sweeping wave of new privacy and AI laws in the past few days. From browsers finally reading opt-out signals to age verification, chatbot companions, data brokers and AI transparency, some of these laws will have a serious impact on the areas we mostly focus on…
more -
Pádraig O’Leary (TrustWorks): the role of context, built-in know-how, and AI in Privacy Tech
Can we ever escape never-ending assessments as a core activity of a privacy management program? How does Privacy Tech extend to AI governance? Does built-in know-how become the most crucial moat? We are joined by Pádraig O’Leary, co-founder and CEO of TrustWorks, in a new installment of our…
more -
Alexandria Lutz: protecting the elder from a new generation of privacy threats
Alexandria (Lexi) Andresen Lutz is founder of the nonprofit Opt-Inspire, Inc., which is focused on empowering seniors, children, other vulnerable populations, and their caregivers to reduce scams and close the digital divide between generations. In her day job, Lexi serves as Senior Corporate...
-
Robert Bateman: AI watermarking, recognized legitimate interests and age verification in the UK
Robert Bateman is a Senior Partner at Privacy Partnership, which provides consultancy and training on data protection and AI regulation, as well as legal advice via its associated law firm, Privacy Partnership Law. He also hosts The Privacy Partnership Podcast. This is Robert’s third appearance…
more -
Newsroom: Summer 2025
It is time for a seasonal update at the intersection of Marketing, Data, Privacy and Technology. We will stick to our usual five blocks: ePrivacy & regulatory updates; MarTech & AdTech; AI, Competition and Digital Markets; PETs and Zero-Party Data; Future of Media. This includes: * CJEU decisions...
-
Daniel Simmons-Marengo: Differential Privacy in practice
How can we apply differential privacy to real-world scenarios? How do you go about algorithmic design? Is there a conflict between data minimization and differential privacy? Can you solve for personal data finding its way into machine learning models? Where can a young professional find…
more -
Peter Craddock: EDPS v SRB, the relative nature of personal data, processors, transparency, impact on MarTech and AdTech
Peter Craddock joins us once again to discuss the recent EDPS v Single Resolution Board decision by the Court of Justice of the EU. Although it builds on the previous Scania and Breyer cases to settle on the “relative” nature of personal data, its practical implications on everything we do in the...
About this show
Interviews and updates at the intersection of marketing, data, privacy, and technology. With an eye on a human-centric, demand-led future in which transparency, control, and personal agency play a crucial role. Sergio Maldonado (host) is a triple-qualified lawyer (California, England & Wales, Spain), entrepreneur, investor, guest lecturer at various universities. LL.M in IT & Internet Law, FIP, CIPP/E/US, CIPT.
www.mastersofprivacy.com
Hosted by
Sergio Maldonado
Categories