Blog

All Audio

Webinars & Talks

Shifting Privacy Left Podcast with Host, Debra J. Farber explores privacy tech innovation and how privacy is better protected when companies implement privacy engineering and privacy by design into their products and services. 

Host & Privacy Tech Advisor

with Debra J Farber

Thanks To Our Sponsors & Partners:

debra@principledadvisor.com

Contact Debra

The Shifting Privacy Left Podcast

Shifting Privacy Left

Shifting Privacy Left features lively discussions on the need for organizations to embed privacy by design into engineering, DevOps and the product development processes BEFORE code or products are ever shipped. Each Tuesday, we'll publish a new episode that features meaty interviews with privacy engineers, technologists, researchers, ethicists, innovators, market makers, and industry thought leaders. We'll dive deeply into this subject and unpack the exciting elements of emerging technologies and tech stacks that are driving privacy innovation, strategies and tactics that win trust, privacy pitfalls to avoid, privacy tech issues ripped from the headlines, and many other juicy topics of interest. 

© 2023 © 2002-2023 Principled LLC. All rights reserved.

(<a href="https://www.buzzsprout.com/2059470/episodes/11543756" rel="noopener" target="_blank">Transcription</a>) Welcome to the first episode of Shifting Privacy Left. To kick off the show, I’m joined by <a href="https://www.linkedin.com/in/kavya-pearlman/" rel="noopener" target="_blank">Kavya Pearlman</a>, Exec Director of <a href="https://xrsi.org/" rel="noopener" target="_blank">The eXtended Reality Safety Initiative (XRSI)</a> to discuss&nbsp; current challenges associated with <a href="https://xrsi.org/definition/extended-reality-xr" rel="noopener" target="_blank">extended reality (XR)</a>, the XRSI Privacy & Safety Framework, and the importance of embedding privacy into today’s technology. --------- **Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer friendly privacy platform** ---------
In our conversation, Kavya describes her vision for bridging the gap between government & technologists. While consulting&nbsp; Facebook back in 2016, she’s witnessed 1st-hand the impacts on society when technology risks are ignored or misunderstood. As XR technology develops, there’s a dire need for human-centered safeguarding and designing for privacy & ethics.&nbsp; We also discuss what it’s been like to create standards while the XR industry is still evolving, and why it’s crucial to influence standards at the foundational code-level. Kavya also shares her advice for builders of immersive products (developers, architects, designers, engineers, etc.) and what she urges regulators to consider when making laws for web3 tech.&nbsp;
 Listen to the episode on <a href="https://podcasts.apple.com/us/podcast/the-shifting-privacy-left-podcast/id1651019312" rel="noopener" target="_blank">Apple Podcasts</a>, <a href="https://open.spotify.com/show/4bz3M4Bo0tigNrBBG3X7Im?si=fd03c98c67314d9e" rel="noopener" target="_blank">Spotify</a>, <a href="https://www.iheart.com/podcast/269-the-shifting-privacy-left-103595150/" rel="noopener" target="_blank">iHeartRadio</a>, or on your favorite podcast platform.
 Topics Covered:
<ul>
 <li>The story behind XRSI, its mission & overview of key programs.</li>
 <li>The differences between the "XR" & "metaverse."</li>
 <li>XRSI's definitions for new subsets of "<a href="https://xrsi.org/definition/personal-data" rel="noopener" target="_blank">personal data</a>" w/in immersive experiences: biometrically-inferred data & psychographically-inferred data.</li>
 <li>Safety, privacy & ethical implications of XR data collection & use.&nbsp;</li>
 <li>Kavya explains the importance of the human in the loop.</li>
</ul>
Check out XRSI:
<ul>
 <li><a href="https://xrsi.org/publication/the-xrsi-privacy-framework" rel="noopener" target="_blank">XRSI Privacy & Safety Framework - XRSI PSF1</a></li>
 <li><a href="https://metaversesafetyweek.org/" rel="noopener" target="_blank">Metaverse Safety Week</a></li>
</ul>
Guest Info (Kavya Pearlman):
<ul>
 <li>Follow on Twitter: <a href="https://twitter.com/KavyaPearlman" rel="noopener" target="_blank">@KavyaPearlman</a></li>
 <li>Connect on LinkedIn: <a href="https://www.linkedin.com/in/kavya-pearlman/" rel="noopener" target="_blank">Kavya Pearlman</a></li>
 <li>Email Kav</li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

(Transcription)Welcome to the first episode of Shifting Privacy Left. To kick off the show, I’m joined by Kavya Pearlman, Exec Director of The eXtended Reality Safety Initiative (XRSI) to

Guardians of the Metaverse with Kavya Pearlman (XRSI)

(<a href="https://www.buzzsprout.com/2059470/episodes/11591992" rel="noopener" target="_blank">Episode Transcription</a>) This week, I’m joined by <a href="https://www.linkedin.com/in/davidleeburnett" rel="noopener" target="_blank">Dave Burnett</a>, VP of Strategy at <a href="https://zerobiometrics.com/" rel="noopener" target="_blank">ZeroBiometrics</a>, to discuss his company’s cutting edge approach to using one’s face to biometrically-authenticate to systems w/o storing personal data, preventing breaches. We’ll discuss current approaches to deploying biometric authentication, unpack surrounding privacy & security challenges, and explore his company’s tech & why it may enable the biometrics industry to leapfrog over current tech hurdles as there’s now a privacy-preserving method to biometric authentication .
—------ Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer friendly privacy platform. —------ Rather than iterate on older technology, ZeroBiometrics approached its biometric authentication tech using a clean-sheet design. As a result, they created tech that captures no personal data, not even a biometric. Thus, it doesn't know what someone looks like and doesn’t save personal data to authenticate. In our conversation, Dave pulls back the curtain this magical-sounding tech and shares compelling examples of how <a href="https://zerobiometrics.com/zeroface/" rel="noopener" target="_blank">ZeroFace</a> enables privacy-preserving biometric identification, verification, authentication, and account recovery.&nbsp; 
The expansion of biometrics is unstoppable at this point. Security risks and privacy issues are too significant, and global legislation can't keep up. Dave illustrates why we can't keep working within the old biometric paradigm if we want to protect our identities and personal data and explains how his team works to bridge the gap between technologists and end-users. 
Listen to the episode on <a href="https://podcasts.apple.com/us/podcast/the-shifting-privacy-left-podcast/id1651019312" rel="noopener" target="_blank">Apple Podcasts</a>, <a href="https://open.spotify.com/show/4bz3M4Bo0tigNrBBG3X7Im?si=fd03c98c67314d9e" rel="noopener" target="_blank">Spotify</a>, <a href="https://www.iheart.com/podcast/269-the-shifting-privacy-left-103595150/" rel="noopener" target="_blank">iHeartRadio</a>, or on your favorite podcast platform. 
Topics Covered: 
<ul>
 <li>Key challenges as we evolve from mobile biometrics to other use cases.</li>
 <li>Technical & policy differences that affect privacy.</li>
 <li>How industry leaders like Apple have approached facial & fingerprint biometrics.</li>
 <li>How <a href="https://zerobiometrics.com/zeroface/" rel="noopener" target="_blank">ZeroFace</a> authenticates you w/o knowing what you look like</li>
 <li>Addressing privacy usability challenges in the crypto space.</li>
 <li>ZeroBiometrics’s impressive metrics for false acceptance (FAR) & rejection rates (FRR)</li>
 <li>How using a ZeroFace's QR code can radically change the way we travel, ship goods & </li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

(Episode Transcription)This week, I’m joined by Dave Burnett, VP of Strategy at ZeroBiometrics, to discuss his company’s cutting edge approach to using one’s face to biometrically-authenticate to

The Magic of Zero Knowledge Biometrics with Dave Burnett (ZeroBiometrics)

In this episode, I’m joined by Roy Smith, CEO and founder of PrivacyCheq, a privacy tech company that develops privacy-enhancing technologies for mobile and web. We discuss the history of online privacy and data protection laws, current challenges within the ad tech space, and GPC, a newly proposed web standard for signaling privacy preferences.
----------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer friendly privacy platform -----------
A most common myth that Roy sees end-users buying into is that cookie banners are all that a company need&nbsp; deploy for compliance with modern privacy and data protection laws. Roy breaks down how adtech companies use "the cookie myth" to distort how people perceive what's required for operational compliance. He illustrates the tsunami of global privacy regulations related to adtech and the limitations that exist due to siloed consent data.&nbsp; 
We dive deeper into the W3C's newly proposed Global Privacy Control (GPC) specification and how GPC lets users signal their desired privacy levels just by browsing the web. Roy unpacks why it was developed and what problems it solves on a legal level. He also highlights his concern that implementing GPC will create a false sense of privacy as GPC signals depart from consumer expectations.&nbsp; 
Listen to&nbsp; our conversation on the benefits and drawbacks of GPC. 
----------- Listen to the episode on <a href="https://podcasts.apple.com/us/podcast/the-shifting-privacy-left-podcast/id1651019312" rel="noopener" target="_blank">Apple Podcasts</a>, <a href="https://open.spotify.com/show/4bz3M4Bo0tigNrBBG3X7Im?si=fd03c98c67314d9e" rel="noopener" target="_blank">Spotify</a>, <a href="https://www.iheart.com/podcast/269-the-shifting-privacy-left-103595150/" rel="noopener" target="_blank">iHeartRadio</a>, or on your favorite podcast platform. ----------- 
Topics Covered:
<ul>
 <li>How the regulatory framework for privacy and tracking has changed over time&nbsp;</li>
 <li>The global response to surveillance capitalism</li>
 <li>The challenges and downfalls of the IAB's Transparency & Consent Framework (TCF)</li>
 <li>The problem of “consent fragmentation”</li>
 <li>The W3C’s newly-proposed Global Privacy Control (GPC) specification</li>
 <li>Where Roy sees opportunities for improvement</li>
 <li>The nuances between WC3’s "do-not-sell or share interaction" and "do-not-sell or share preference"</li>
 <li>Roy's point of view regarding web privacy and whether GPC is sufficient for signaling privacy preferences, the benefits to the adtech industry, and potential drawbacks.&nbsp;</li>
</ul>
Resources Mentioned:
<ul>
 <li>Check out the GPC <a href="https://globalprivacycontrol.org/" rel="noopener" target="_blank">educational website</a> and the <a href="https://globalprivacycontrol.github.io/gpc-spec/" rel="noopener" target="_blank">proposed W3C technical specification&nbsp;</a></li>
</ul>
Guest Info:
<ul>
 <li>Fol</li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

In this episode, I’m joined by Roy Smith, CEO and founder of PrivacyCheq, a privacy tech company that develops privacy-enhancing technologies for mobile and web. We discuss the history of online

Will 'Global Privacy Control' (GPC) Fix Web Privacy with Roy Smith (PrivacyCheq)

In this episode, I interview <a href="https://www.linkedin.com/in/mert-can-boyar-02bb49a4/" rel="noopener" target="_blank">Mert Can Boyar</a>,&nbsp; Director of <a href="https://privacyinnovationlab.com/" rel="noopener" target="_blank">Privacy Innovation Lab</a> at Bilgi University and Founder of privacy tech company, Verilogy. Mert walks us through his creative approach to educating on core privacy engineering concepts, particularly through the lens of storytelling, visual art & music. He also shares his vision & mission behind his passion project, “The Hitchhiker’s Guide to Privacy Engineering."
--------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform --------- 
Mert tells his "origin story" and dives into how he ended up in privacy and data protection. He highlights the thread of art & entrepreneurship throughout his career, which has taken him from musician to lawyer to start-up founder, and now educator.&nbsp;
 Privacy Innovation Lab is a multi-stakeholder hub for privacy innovation. Mert highlights exciting projects that his students are working on, including an assessment tool to help practitioners build fair & lawful AI models and new tech in the self-sovereign identity (SSI) space.&nbsp;
 While working at the lab, Mert came up with a “creative privacy" strategy, which he uses to inspire young minds about privacy engineering. In this episode, he takes us behind-the-scenes of his comic book project that’s meant to educate people who want to understand how modern software and data processing technologies function.&nbsp; 
--------- Listen to the episode on <a href="https://podcasts.apple.com/us/podcast/the-shifting-privacy-left-podcast/id1651019312" rel="noopener" target="_blank">Apple Podcasts</a>, <a href="https://open.spotify.com/show/4bz3M4Bo0tigNrBBG3X7Im?si=fd03c98c67314d9e" rel="noopener" target="_blank">Spotify</a>, <a href="https://www.iheart.com/podcast/269-the-shifting-privacy-left-103595150/" rel="noopener" target="_blank">iHeartRadio</a>, or on your favorite podcast platform. --------- 
Topics Covered:
<ul>
 <li>What initially sparked Mert’s interest in data and privacy protection&nbsp;</li>
 <li>How Mert uses his multifaceted & creative skillsets to bridge knowledge gaps between privacy law & engineering</li>
 <li>Verilogy’s open source database tool that automates and streamlines the work that Mert was doing as a privacy lawyer&nbsp;</li>
 <li>Fascinating projects underway at Privacy Innovation Lab&nbsp;</li>
 <li>What Mert hopes to achieve with The Hitchhiker’s Guide to Privacy Engineering</li>
</ul>
Resources Mentioned:
<ul>
 <li>Learn more about <a href="https://www.privacyinnovationlab.org/" rel="noopener" target="_blank">Privacy Innovation Lab</a></li>
 <li>Subscribe on LinkedIn to <a href="https://www.linkedin.com/newsletters/hitchhiker-s-guide-to-privacy-6984858083546009601/" rel="noopener" target="_blank">The Hitchhiker's Guide to Privacy Engineering</a></li>
 <li>Read about <a href="https://verilogy.com/" rel="noopener" target="_blank">Verilogy</a>&nbsp;</li>
</ul>
Guest Info:
<ul>
 <li>Follow Mert on <a href="https://www.linkedin.com/in/mert-can-boyar-02bb49a4/" rel="noopener" target="_blank"></a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

In this episode, I interview Mert Can Boyar,&nbsp; Director of Privacy Innovation Lab at Bilgi University and Founder of privacy tech company, Verilogy. Mert walks us through his creative approach to

S1E4: The Hitchhiker's Guide to Privacy Engineering & Creative Privacy with Mert Can Boyar (Privacy Innovation Lab)

I’m joined by <a href="https://www.linkedin.com/in/lockstep/" rel="noopener" target="_blank">Stephen Wilson</a>, accomplished data protection innovator, researcher, analyst and advisor who leads Digital Safety and Privacy efforts at <a href="https://www.constellationr.com/business-theme/digital-safety-privacy" rel="noopener" target="_blank">Constellation Research</a> and is Managing Director of <a href="https://lockstep.com.au/technologies/" rel="noopener" target="_blank">Lockstep Technologies</a>. In our conversation, we discuss the importance of information value chains, the emergence of data sharing platforms, discuss why data should be like clean drinking water, and explore the problems with "data ownership." -------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform -------- Stephen explains the push for more data sharing and to establish user-centric business models that deliver value for businesses and benefits for individuals. We discuss emerging tools that assure the orderliness, fairness, and transparency of information value chains and why Stephen aims to take data processing "out of the shadows" with his research.
Lastly, we discuss key Facebook & Google EU court cases that addresses collection & use of facial biometrics&nbsp; from people without sufficient consent and the challenges that Google and search engines have with addressing "the right to be forgotten." Plus, we discuss the privacy expectations within the ‘digital town square,’ particularly through the lens of Twitter and Facebook.&nbsp;
--------- Listen to the episode on <a href="https://podcasts.apple.com/us/podcast/the-shifting-privacy-left-podcast/id1651019312" rel="noopener" target="_blank">Apple Podcasts</a>, <a href="https://open.spotify.com/show/4bz3M4Bo0tigNrBBG3X7Im?si=fd03c98c67314d9e" rel="noopener" target="_blank">Spotify</a>, <a href="https://www.iheart.com/podcast/269-the-shifting-privacy-left-103595150/" rel="noopener" target="_blank">iHeartRadio</a>, or on your favorite podcast platform. ---------
Topics Covered:
<ul>
 <li>Stephen’s assertion that privacy is about restraint: what you choose to not know.</li>
 <li>The rise of data sharing platforms to facilitate and scale global information value chains.</li>
 <li>How if data is like “crude oil,” then it requires safe handling, and why we should treat data like "clean drinking water" instead.</li>
 <li>The importance of data quality, data originality, and data lineage.</li>
 <li>Stephen’s analysis of the growing market for “Data Protection as a Service," which includes: data clean rooms, privacy APIs, and more.</li>
 <li>Why you don’t need to own your own data to get good privacy outcomes.</li>
</ul>
Resources Mentioned:
<ul>
 <li><a href="https://www.worldbank.org/en/publication/wdr2021" rel="noopener" target="_blank">Read the 2021 Data for Better Lives report (World Bank)&nbsp;</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

I’m joined by Stephen Wilson, accomplished data protection innovator, researcher, analyst and advisor who leads Digital Safety and Privacy efforts at Constellation Research and is Managing Director

S1E5: The Rise of Global Data Sharing Platforms with Stephen Wilson (Constellation Research)

This week, I’m joined by <a href="https://www.linkedin.com/in/lourdesmturrecha/" rel="noopener" target="_blank">Lourdes Turrecha</a>, Founder & Chief Privacy Tech Strategist at <a href="https://www.riseofprivacytech.com/" rel="noopener" target="_blank">The Rise of Privacy Tech (TROPT)</a>. TROPT's mission is to fuel privacy innovation by bringing together privacy tech founders, investors, buyers, & expert-advisors to bridge the existing tech-capital-expertise gaps in the field. As a member of TROPT's Advisory Board, I’ve seen 1st-hand TROPT's innovative resources and events that they offer the industry.
---------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform ---------- 
In our conversation, Lourdes and I explore the different facets of TROPT, particularly focusing on what’s included in the recently-published "<a href="https://www.riseofprivacytech.com/wp-content/uploads/2022/11/TROPT-Privacy-Tech-Stack-Whitepaper-2022.pdf" rel="noopener" target="_blank">TROPT Privacy Tech Stack 2.0 Whitepaper 2022</a>." We discuss how buyers currently navigate the space, how TROPT supports privacy tech founders & the 5 biggest challenges that we see across privacy tech. The whitepaper is a first-of-its-kind landscape that categorizes the different categories of privacy tech so the market can better understand the breadth and depth of the space. It highlights current trends and visions for the future of privacy tech, and addresses solutions to those 5 major pain points. Lourdes also dives into what we can expect from the <a href="https://hopin.com/events/tropt-data-privacy-week-2023-339870e7-61e4-4a7f-9b50-39a1506c270c/registration" rel="noopener" target="_blank">TROPT Data Privacy Week 2023</a> in January and how to get involved.&nbsp;
 ---------- Listen to the episode on <a href="https://podcasts.apple.com/us/podcast/the-shifting-privacy-left-podcast/id1651019312" rel="noopener" target="_blank">Apple Podcasts</a>, <a href="https://open.spotify.com/show/4bz3M4Bo0tigNrBBG3X7Im?si=fd03c98c67314d9e" rel="noopener" target="_blank">Spotify</a>, <a href="https://www.iheart.com/podcast/269-the-shifting-privacy-left-103595150/" rel="noopener" target="_blank">iHeartRadio</a>, or on your favorite podcast platform. ----------
 Topics Covered:
<ul>
 <li>TROPT’s free resources and paid offerings for privacy tech key players</li>
 <li>The thought process behind the TROPT Privacy Tech Stack Review program&nbsp;</li>
 <li>The current frustrations of many privacy tech buyers and users' experience, especially on the B2B side</li>
 <li>An overview of the 3 main topics covered in the whitepaper&nbsp;</li>
 <li>Proposed solutions for the challenges we’re facing in privacy tech&nbsp;</li>
</ul>
Resources Mentioned:
<ul>
 <li><a href="https://www.riseofprivacytech.com/wp-content/uploads/2022/11/TROPT-Privacy-Tech-Stack-Whitepaper-2022.pdf" rel="noopener" target="_blank">Read the TROPT Defining the Privacy Tech Landscape Whitepaper 2021</a></li>
 <li><a href="https://www.riseofprivacytech.com/wp-content/uploads/2022/11/TROPT-Privacy-Tech-Stack-Scape-11.17.2022.pdf" rel="noopener" target="_blank"></a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

This week, I’m joined by Lourdes Turrecha, Founder & Chief Privacy Tech Strategist at The Rise of Privacy Tech (TROPT). TROPT's mission is to fuel privacy innovation by bringing together privacy tech

S1E6: The Explosion of Privacy Tech with Lourdes Turrecha (TROPT)

In this episode, I’m joined by <a href="https://www.linkedin.com/in/lorriecranor/" rel="noopener" target="_blank">Lorrie Cranor</a>, FORE Systems Professor, Computer Science and Engineering & Public Policy at Carnegie Mellon University (CMU); Director, CyLab Usable Privacy and Security Laboratory; and Co-Director, of CMU's <a href="http://privacy.cs.cmu.edu/" rel="noopener" target="_blank">MSIT-Privacy Engineering Masters Program</a>. We discuss the different tracks within the Privacy Engineering Program at CMU, privacy engineering hiring trends, the need for industry education, and Lorrie’s research outside of the classroom. ---------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform ---------- Lorrie explains how this next generation of privacy experts and engineers can work together to bring new architectures, innovations, and software to market. She describes the kind of hands-on work in which her students participate, including a capstone project sponsored by Meta that’s exploring ways the platform can integrate more privacy education into its UI/UX. In addition, Lorrie shares her perspective on the job market for privacy engineers for recent grads and explains how CMU’s Certificate Program in Privacy Engineering aims to meet the high demand for experienced privacy experts with knowledge of privacy engineering concepts. We also get into her research on cookie banners and privacy “nutrition labels” for IoT devices. Topics Covered:
<ul>
 <li>Lorrie’s professional background and what drew her into privacy engineering</li>
 <li>What candidates can expect from the Privacy Engineering Program at CMU&nbsp;</li>
 <li>Insights into how people interact with cookie banners and potential solutions to improve the user experience</li>
 <li>Ways that we can bridge the hiring gap in our industry</li>
 <li>Different sectors outside of tech that are looking for privacy experts, including finance and retail</li>
</ul>
Resources Mentioned:
<ul>
 <li>Apply to CMU's <a href="https://privacy.cs.cmu.edu/" rel="noopener" target="_blank">Privacy Engineering Program</a> (Applications due Dec 12th, 2022 for the next enrollment period)</li>
 <li>Learn about CMU's <a href="https://www.cylab.cmu.edu/education/index.html" rel="noopener" target="_blank">CyLab Security & Privacy Institute</a></li>
 <li>Learn about the <a href="http://cups.cs.cmu.edu/" rel="noopener" target="_blank">CyLab Usable Privacy and Security (CUPS) Laboratory</a></li>
 <li>Review CMU's research on <a href="https://www.iotsecurityprivacy.org/" rel="noopener" target="_blank">IoT Privacy & Security Labels</a>.</li>
</ul>
Guest Info:
<ul>
 <li>Connect with Lorrie on <a href="https://www.linkedin.com/in/lorriecranor/" rel="noopener" target="_blank">LinkedIn</a></li>
 <li>Follow Lorrie on <a href="https://twitter.com/lorrietweet?lang=en" rel="noopener" target="_blank">Twitter</a></li>
 <li>Learn more <a href="https://lorrie.cranor.org/" rel="noopener" target="_blank">about</a> <a href="https://lorrie.cranor.org/" rel="noopener" target="_blank">Lorrie</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

In this episode, I’m joined by Lorrie Cranor, FORE Systems Professor, Computer Science and Engineering & Public Policy at Carnegie Mellon University (CMU); Director, CyLab Usable Privacy and Security

S1E7: Privacy Engineers: The Next Generation with Lorrie Cranor (CMU)

Today, I am joined by <a href="https://www.linkedin.com/in/jnasr/" rel="noopener" target="_blank">Jim Nasr</a>, CEO of Acoer. I had the pleasure of collaborating with Jim on several projects during my 6-month stint as Privacy Strategist for <a href="https://hedera.com/" rel="noopener" target="_blank">Hedera</a>. Jim joins me today to discuss the use of <a href="https://en.wikipedia.org/wiki/Distributed_ledger" rel="noopener" target="_blank">distributed ledger tech (DLT)</a> to provide <a href="https://en.wikipedia.org/wiki/Computational_trust" rel="noopener" target="_blank">computational trust</a> for real-time applications. Jim and I speak about the development of secure, privacy-preserving, and traceable technologies, which can gain adoption via open protocols and usable interfaces.
--------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform --------- 
In part one of this two-episode conversation, Jim explains Acoer's approach to building DLT-enabled software and its initial application to healthcare and clinical trials. Jim shares his background and experience in tech both academically and professionally; as an entrepreneur in software development; his roles in large-scale tech companies and with the government at the CDC; and how he enjoyed “getting his hands dirty” in public health to bring automated trust and accountability to the space. At Acoer, Jim continues his previous work - to build open technologies - by leveraging DLT and also building interfaces with usable privacy and security.&nbsp;
 In this conversation, Jim also covers the security and privacy approaches that Acoer takes to ensure that its products work as advertised and so that the machinery of its clients is never compromised. 
---------- Listen to the episode on <a href="https://podcasts.apple.com/us/podcast/the-shifting-privacy-left-podcast/id1651019312" rel="noopener" target="_blank">Apple Podcasts</a>, <a href="https://open.spotify.com/show/4bz3M4Bo0tigNrBBG3X7Im?si=fd03c98c67314d9e" rel="noopener" target="_blank">Spotify</a>, <a href="https://www.iheart.com/podcast/269-the-shifting-privacy-left-103595150/" rel="noopener" target="_blank">iHeartRadio</a>, or on your favorite podcast platform. ----------
 Topics Covered:
<ul>
 <li>How Acoer designs and builds its tech as components to be absorbed & consumed by other machines</li>
 <li>How using DLT reduces the need for intermediaries</li>
 <li>Acoer's approach to building decentralized apps & why it chose to build on <a href="https://en.wikipedia.org/wiki/Hashgraph" rel="noopener" target="_blank">hashgraph</a> tech instead of blockchain</li>
 <li>Benefits gained from DLT's "data stamping" to computationally prove transactions & to assist during data leakages, compliance issues, or to demonstrate privacy assurance</li>
 <li>How you can use NFTs to represent individuals' consents via RightsHash</li>
</ul>
Resources Mentioned:
<ul>
 <li>Learn about <a href="https://www.acoer.com/" rel="noopener" target="_blank">Acoer</a></li>
 <li>Learn about <a href="https://www.rightshash.com/" rel="noopener" target="_blank"></a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

Today, I am joined by Jim Nasr, CEO of Acoer. I had the pleasure of collaborating with Jim on several projects during my 6-month stint as Privacy Strategist for Hedera. Jim joins me today to discuss

S1E8: Leveraging Distributed Ledgers for Privacy Assurance with Jim Nasr

This week, I continue my conversation with <a href="https://www.linkedin.com/in/jnasr/" rel="noopener" target="_blank">Jim Nasr</a>, CEO of <a href="https://www.acoer.com/" rel="noopener" target="_blank">Acoer</a> about privacy and using distributed ledger technology (DLT). We discuss his work leading The HBAR Foundation's <a href="https://www.hbarfoundation.org/blog-post/introducing-the-hbar-foundation-privacy-market-development-fund" rel="noopener" target="_blank">Privacy Market Development Fund </a>and the trends he sees across grant applicants. We also chat about the collapse of FTX and the ripple effect it’s had on the crypto space.&nbsp;
--------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform ---------
 
Jim tells us about the types of innovations <a href="https://www.hbarfoundation.org/" rel="noopener" target="_blank">The HBAR Foundation</a> seeks to fund; why privacy & security usability is an imperative; uses cases for decentralized identifiers (DIDs) and new "DID methods" like PKH. We also discuss FTX's collapse and how to provide real transparency and data regulation in DLT technology.&nbsp;
 
--------- Listen to the episode on <a href="https://podcasts.apple.com/us/podcast/the-shifting-privacy-left-podcast/id1651019312" rel="noopener" target="_blank">Apple Podcasts</a>, <a href="https://open.spotify.com/show/4bz3M4Bo0tigNrBBG3X7Im?si=fd03c98c67314d9e" rel="noopener" target="_blank">Spotify</a>, <a href="https://www.iheart.com/podcast/269-the-shifting-privacy-left-103595150/" rel="noopener" target="_blank">iHeartRadio</a>, or on your favorite podcast platform. ---------
 
Topics Covered:
<ul>
 <li>The HBAR Foundation’s search for projects to fund that enhance privacy usability</li>
 <li>Exciting privacy use cases Jim has seen using Hedera's DLT, including those that enable high-value, privacy-preserving transactions&nbsp;</li>
 <li>What went wrong with FTX and what we can learn from it's collapse&nbsp;</li>
 <li>How decentralized identity can enable the next iteration of web privacy</li>
 <li>The tech behind <a href="https://metamask.io/snaps/" rel="noopener" target="_blank">MetaMask's Snap software</a> that allows anyone to safely extend capabilities of their wallet&nbsp;</li>
</ul>
Resources Mentioned:
<ul>
 <li>Learn about <a href="https://www.acoer.com/" rel="noopener" target="_blank">Acoer</a></li>
 <li>Learn about <a href="https://www.hbarfoundation.org/" rel="noopener" target="_blank">The HBAR Foundation</a></li>
 <li>Read about <a href="https://www.hbarfoundation.org/blog-post/introducing-the-hbar-foundation-privacy-market-development-fund" rel="noopener" target="_blank">The HBAR Foundation's Privacy Market Development Fund&nbsp;</a></li>
</ul>
Jim Nasr’s Info:
<ul>
 <li>Follow Jim on <a href="https://www.linkedin.com/in/jnasr/" rel="noopener" target="_blank">LinkedIn</a></li>
 <li>Follow Jim on <a href="https://twitter.com/jnasr" rel="noopener" target="_blank">Twitter</a></li>
</ul>
Follow the SPL Show:
<ul>
 <li>Follow us on <a href="https://twitter.com/ShiftPrivacyPod" rel="noopener" target="_blank">Twitter</a>&nbsp;</li>
 <li>Follow us on <a href="https://www.linkedin.com/showcase/shifting-privacy-left-podcast/?" rel="noopener" target="_blank">Lin</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

This week, I continue my conversation with Jim Nasr, CEO of Acoer about privacy and using distributed ledger technology (DLT). We discuss his work leading The HBAR Foundation's Privacy Market

S1E9: Funding Web3 Privacy & Recent Web3 Trust Fails with Jim Nasr

Of the almost 300 million cars that are in circulation in the U.S., the vast majority collect consumer’s personal information. Every time you connect your phone via USB or Bluetooth, your car is designed to download data and store it locally. The automotive industry is grossly behind when it comes to data privacy and safety, but that’s where Privacy4Cars comes in.&nbsp;
Privacy4Cars is the first (and only) privacy tech company focused on identifying the challenges posed by vehicle data. They create solutions to better protect consumers and businesses by offering improved privacy, safety, security, and compliance.&nbsp;
--------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform ---------
In our conversation, Andrea reveals how personal data flows through vehicular systems and networks. He highlights the type of data that can be easily found in cars, such as your frequently visited addresses, garage codes, text messages, emails, and so on. Andrea explains the different privacy concerns that have so far remained unaddressed across the industry and his theory on why these gaps exist.&nbsp;
 It might be unsettling to hear about the state of privacy in the automotive industry, but fortunately, the folks at Privacy4Cars are dedicated to creating new standards. Andrea shares what the industry reaction has been to Privacy4Cars’ initiatives and highlights some other organizations that are leading innovation on this issue.&nbsp;
--------- Listen to the episode on <a href="https://podcasts.apple.com/us/podcast/the-shifting-privacy-left-podcast/id1651019312" rel="noopener" target="_blank">Apple Podcasts</a>, <a href="https://open.spotify.com/show/4bz3M4Bo0tigNrBBG3X7Im?si=fd03c98c67314d9e" rel="noopener" target="_blank">Spotify</a>, <a href="https://www.iheart.com/podcast/269-the-shifting-privacy-left-103595150/" rel="noopener" target="_blank">iHeartRadio</a>, or on your favorite podcast platform. ---------
Topics Covered:
<ul>
 <li>Andrea’s professional background and what inspired him to launch Privacy4Cars</li>
 <li>Debunking common myths about data storage and security in cars&nbsp;</li>
 <li>Where car data privacy falls under EU GDPR</li>
 <li>How Privacy4Cars helps companies solve compliance issues</li>
 <li>Feedback from third-party wholesalers, dealerships, and service providers&nbsp;</li>
 <li>Advice for automotive software developers when architecting systems and networks in this space&nbsp;</li>
</ul>
Resources Mentioned:
<ul>
 <li>Read STOP's paper, <a href="https://www.stopspying.org/wiretaps-on-wheels" rel="noopener" target="_blank">Wiretaps on Wheels&nbsp;</a></li>
 <li>Read the <a href="https://www.wardsauto.com/vehicles/european-data-protection-guidelines-connected-vehicles" rel="noopener" target="_blank">European Data Protection Guidelines for Connected Vehicles</a></li>
 <li>Learn about <a href="https://privacy4cars.com/" rel="noopener" target="_blank">Privacy4Cars</a></li>
</ul>
Guest Info:
<ul>
 <li>Connect with Andr</li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

Of the almost 300 million cars that are in circulation in the U.S., the vast majority collect consumer’s personal information. Every time you connect your phone via USB or Bluetooth, your car is

S2E1: Driving Privacy Left: Vehicular Privacy with Andrea Amico (Privacy4Cars)

Michelle Dennedy is Co-Founder & CEO of <a href="https://privacycode.ai/" rel="noopener" target="_blank">PrivacyCode, Inc</a>., Partner at <a href="https://privatus.online/" rel="noopener" target="_blank">Privatus Consulting</a>, and the Co-Author of <a href="https://www.amazon.com/Privacy-Engineers-Manifesto-Getting-Policy/dp/1430263555" rel="noopener" target="_blank">The Privacy Engineer's Manifesto</a>. In our lively conversation, we discuss the digital cost of information, the privacy problems that her company solves for, and how the Privatus Wicked Privacy™ framework differs from other approaches.
--------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform ---------
 As Michelle puts it, we’re living in an ‘innovation palooza’ right now. But, there’s still progress to be made. Michelle highlights how we can change the investment proposition to get more VCs and investors to see privacy is a strategic business enabler. At PrivacyCode, they’re focused on creating a simple way to communicate the language of ‘people data’ across specialities. 
Part of the solution includes having a software bill of materials (SBOM), which is essentially a list of ingredients that make up software components. Michelle shares a tangible example of how an SBOM creates flow, compliance, and transparency in new areas of tech. She also touches on her consulting work, including her simple strategy for determining privacy benefit metrics.
 Topics Covered:
<ul>
 <li>Privacy as a strategic enabler</li>
 <li>Why Michelle thinks "today's VCs are more of a mood than an algorithm"</li>
 <li>How PrivacyCode allows users to orchestrate requirements across various departments and lets specialists operate in their "zone of genius"</li>
 <li>What a Software Bill of Materials (SBOM) is & why we need one to ensure privacy</li>
 <li>Michelle's advice to privacy engineers on how to leverage an SBOM for quality code</li>
 <li>Michelle's work at Privatus Consulting and their Wicked Privacy Framework</li>
 <li>Examples of creative, straightforward privacy metrics</li>
</ul>
Resources Mentioned:
<ul>
 <li>Learn more about <a href="https://privacycode.ai/" rel="noopener" target="_blank">PrivacyCode & schedule a demo</a></li>
 <li>Learn more about <a href="https://privatus.online/" rel="noopener" target="_blank">Privatus Consulting</a></li>
 <li><a href="https://www.amazon.com/Trillions-Thriving-Emerging-Information-Ecology/dp/1118176073" rel="noopener" target="_blank">Trillions: Thriving in the Emerging Information Ecology</a></li>
</ul>
Guest Info:
<ul>
 <li>Follow Michelle on <a href="https://www.linkedin.com/in/michelledennedy/" rel="noopener" target="_blank">LinkedIn</a></li>
 <li>Follow Michelle on <a href="https://twitter.com/mdennedy" rel="noopener" target="_blank">Twitter</a></li>
 <li>Read <a href="https://www.amazon.com/Privacy-Engineers-Manifesto-Getting-Policy/dp/1430263555" rel="noopener" target="_blank">The Privacy Engineer's Manifesto: Getting from Policy to Code to QA to Value</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

Michelle Dennedy is Co-Founder & CEO of PrivacyCode, Inc., Partner at Privatus Consulting, and the Co-Author of The Privacy Engineer's Manifesto. In our lively conversation, we discuss the digital

S2E2: "Software Libraries, SBOMs & Wicked Privacy, Oh My!" with Michelle Dennedy (PrivacyCode)

To kick off Data Privacy Week 2023, I’m joined by Mark Lizar, CEO of the <a href="https://transparencylab.ca/" rel="noopener" target="_blank">Digital Transparency Lab</a> and Founder of <a href="https://www.0pn.org/" rel="noopener" target="_blank">0PN: Open Privacy Network</a>.&nbsp;
Mark is also the Vice Chair of the IEEE Cybersecurity for Next-Generation Connectivity Systems' Human Control & Flow Sub-Committee and Editor & Lead Author of the ANCR Notice Record Specification and Framework at the Kantara Initiative.&nbsp; 
In our conversation, we unpack the current standards and specifications for transparency and data control in the digital space. Mark shares some of the innovative solutions he and his colleagues are working on to bridge the gap in web consent.&nbsp;
 
--------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform ---------
 
Mark unpacks his interpretation of the open transparency standards, laws, and tech required for privacy to scale digitally. One of the major use cases he’s working on at 0PN is called ‘Do Track,’ which is a response to the shortcomings of the current ‘Do Not Track’ mechanism that we have in place today. The Controller Credential Standard allows users to specify or direct consent, and he shares some exciting examples of how users can use ‘Do Track’ to take back control over their own data.&nbsp; 
Mark breaks down the four levels of privacy assurance achieved Controller Credential Framework and explains what’s needed to gain market traction for this privacy-enabling tech standard. He also gives us a peek into what else they’re working on over at the Digital Transparency Lab and how to get involved with the organization and their efforts.. 
--------- Listen to the episode on <a href="https://podcasts.apple.com/us/podcast/the-shifting-privacy-left-podcast/id1651019312" rel="noopener" target="_blank">Apple Podcasts</a>, <a href="https://open.spotify.com/show/4bz3M4Bo0tigNrBBG3X7Im?si=fd03c98c67314d9e" rel="noopener" target="_blank">Spotify</a>, <a href="https://www.iheart.com/podcast/269-the-shifting-privacy-left-103595150/" rel="noopener" target="_blank">iHeartRadio</a>, or on your favorite podcast platform. --------- 
Topics Covered:
<ul>
 <li>A simple way to understand online consents vs. system permissions&nbsp;</li>
 <li>Why it’s important to see who's controlling our data&nbsp;</li>
 <li>How the new Controller Credential gives people autonomy over their own data</li>
 <li>International privacy instruments that can be scaled for local use&nbsp;</li>
 <li>A new digital model for representing physical privacy&nbsp;</li>
</ul>
Resources Mentioned:
<ul>
 <li>Learn more about <a href="https://transparencylab.ca/" rel="noopener" target="_blank">Digital Transparency Lab</a>&nbsp;</li>
 <li>RSVP to the 1/27/23 <a href="https://transparencylab.ca/store/p/jan-27-digital-privacy-transparency-launch-event" rel="noopener" target="_blank">Digital Privacy Transparency Launch</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

To kick off Data Privacy Week 2023, I’m joined by Mark Lizar, CEO of the Digital Transparency Lab and Founder of 0PN: Open Privacy Network.&nbsp;Mark is also the Vice Chair of the IEEE Cybersecurity

S2E3: Fixing Consent & Transparency on the Web with Mark Lizar (Digital Transparency Lab)

Nishant Bhajaria is the Director of Privacy Engineering, Architecture, & Analytics at <a href="http://www.uber.com" rel="noopener" target="_blank">Uber</a> and Author of "<a href="https://www.manning.com/books/data-privacy" rel="noopener" target="_blank">Data Privacy: A Runbook for Engineers</a>.” He’s also an Advisor to <a href="https://dataprotocol.com/advisory-board/" rel="noopener" target="_blank">Data Protocol</a>, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a> & <a href="https://piiano.com/" rel="noopener" target="_blank">Piiano</a>. In our conversation, we discuss privacy engineering trends, educational materials that Nishant has developed, and his advice to privacy technologists, engineers, and hiring managers.&nbsp;
--------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform ---------
 Nishant is a great example of a cross-functional, influential agent who has adapted to the ever-growing privacy discipline. He describes himself as an engineer for the attorneys and an attorney for the engineers, which has helped him secure positions at <a href="https://www.webmd.com/" rel="noopener" target="_blank">WebMD</a>, <a href="https://www.nike.com/" rel="noopener" target="_blank">Nike</a>, <a href="https://www.netflix.com/" rel="noopener" target="_blank">Netflix</a>, and now <a href="http://www.uber.com" rel="noopener" target="_blank">Uber</a>.&nbsp; 
Nishant shares his advice for career development, both through the lens of how to break into the privacy space and also how to grow within your role. He explains how he’s been able to get board-level understanding about the importance of privacy as a product, not an afterthought. He also highlights takeaways from his book and online courses.
 Topics Covered:
<ul>
 <li>How privacy engineers can secure their jobs during this widespread tech industry layoff&nbsp;</li>
 <li>Privacy tech as the glue between different teams and in-house services</li>
 <li>How to make privacy more visible to the business as something that benefits the bottom line&nbsp;</li>
 <li>Common mistakes that Nishant sees engineers make when it comes to privacy&nbsp;</li>
 <li>What’s covered in Nishant’s ‘Privacy by Design’ courses&nbsp;</li>
</ul>
Resources Mentioned:
<ul>
 <li>Buy <a href="https://www.manning.com/books/data-privacy" rel="noopener" target="_blank">Data Privacy: A Runbook for Engineers&nbsp;</a></li>
 <li>Check out the <a href="https://dataprotocol.com/certifications/privacy-engineering-certification" rel="noopener" target="_blank">Privacy Engineering Certification Course</a>&nbsp;</li>
</ul>
Guest Info:
<ul>
 <li>Follow Nishant on <a href="https://www.linkedin.com/in/nishantjb/" rel="noopener" target="_blank">LinkedIn</a>&nbsp;</li>
</ul>
Follow the SPL Show:
<ul>
 <li>Follow us on <a href="https://twitter.com/ShiftPrivacyPod" rel="noopener" target="_blank">Twitter</a>&nbsp;</li>
 <li>Follow us on <a href="https://www.linkedin.com/showcase/shifting-privacy-left-podcast/?" rel="noopener" target="_blank">LinkedIn</a></li>
 <li>Check out our <a href="https://shiftingprivacyleft.com/" rel="noopener" target="_blank">website</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

Nishant Bhajaria is the Director of Privacy Engineering, Architecture, & Analytics at Uber and Author of "Data Privacy: A Runbook for Engineers.” He’s also an Advisor to Data Protocol, Privado &

S2E4: Training the Next Wave of Privacy Engineers with Nishant Bhajaria (Uber)

R. Jason Cronk is the Founder of the <a href="https://instituteofprivacydesign.org/" rel="noopener" target="_blank">Institute of Operational Privacy Design</a> (IOPD) and CEO of <a href="https://enterprivacy.com/" rel="noopener" target="_blank">Enterprivacy Consulting Group</a>, as well as the author of <a href="https://iapp.org/resources/article/strategic-privacy-by-design/" rel="noopener" target="_blank">Strategic Privacy by Design</a>. I recently caught up with Jason at the annual <a href="https://www.privacylawsalon.com/" rel="noopener" target="_blank">Privacy Law Salon </a>event and had a conversation about the socio-technical challenges of privacy, different privacy-by-design frameworks that he’s worked on, and his thoughts on some hot topics in the web privacy space. --------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform ---------
We start off discussing updates to&nbsp; <a href="https://iapp.org/resources/article/strategic-privacy-by-design/" rel="noopener" target="_blank">Strategic Privacy by Design</a>, now in it's 2nd edition. We chat about the brand new ISO 31700 Privacy by Design for Consumer Goods and Services standard and consensus process and&nbsp; compare it to the NIST Privacy Framework, IEEE 7002 Standard for Data Privacy, and Jason's work with the Institute of Operational Privacy Design (IOPD) and it's newly-published Design Process Standard v1.&nbsp;
 Jason and I also explore risk tolerance through the lens of privacy using <a href="https://www.fairinstitute.org/fair-risk-management" rel="noopener" target="_blank">FAIR</a>. There’s a lot of room for subjective interpretation, particularly of non-monetary harm, and Jason provides many thought-provoking examples of how this plays out in our society. We round out our conversation by talking about the challenges of Global Privacy Control (GPC) and what deceptive design strategies to look out for.
 Topics Covered:
<ul>
 <li>Why we should think of privacy beyond "digital privacy"</li>
 <li>What readers can expect from Jason’s book,&nbsp; <a href="https://iapp.org/resources/article/strategic-privacy-by-design/" rel="noopener" target="_blank">Strategic Privacy by Design</a>, and what’s included in the 2nd edition</li>
 <li>IOPD’s B2B third-party privacy audit</li>
 <li>Why you should leverage the FAIR quantitative risk analysis model to define address effective privacy risk management programs</li>
 <li>The NIST Privacy Framework and developments of its Privacy Workforce Working Group</li>
 <li>Dark patterns & why just asking the wrong question can be a privacy harm (interrogation)</li>
 <li>How there are 15 privacy harms & only 1 of them is about security</li>
</ul>
Resources Mentioned:
<ul>
 <li><a href="https://www.iso.org/obp/ui/#iso:std:iso:31700:-1:ed-1:v1:en" rel="noopener" target="_blank">Learn about the ISO 31700 Privacy by Design Standard</a></li>
 <li><a href="https://instituteofprivacydesign.org/2023/01/12/introducing-the-design-process-standard-v-1-0/" rel="noopener" target="_blank">Review the IOPD Design Process Standard v1</a></li>
</ul>
Guest Info:
<ul>
 <li>Follow Jason on </li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

R. Jason Cronk is the Founder of the Institute of Operational Privacy Design (IOPD) and CEO of Enterprivacy Consulting Group, as well as the author of Strategic Privacy by Design. I recently caught

S2E5 - What's New in Privacy-by-Design with R. Jason Cronk (IOPD)

Today, I welcome Gary LaFever, co-CEO & GC at Anonos; WEF Global Innovator; and a solutions-oriented futurist with a computer science and legal background. Gary has over 35 years of technical, legal and policy experience that enables him to approach issues from multiple perspectives. I last saw Gary when we shared the stage at a RegTech conference in London six years ago, and it was a pleasure to speak with him again to discuss how the Schrems II decision coupled with the increasing prevalence of data breaches and ransomware attacks have shifted privacy left from optional to mandatory, necessitating a "privacy left trust" approach. --------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform --------- 
Gary describes the 7 Universal Data Use Cases with relatable examples and how they are applicable across orgs and industries, regardless of jurisdiction. We then dive into what Gary is seeing in the market in regard to the use cases. He then reveals the 3 Main Data Use Obstacles to accomplishing these use cases and how to overcome them with "statutory pseudonymization" and "synthetic data."
 
In this conversation that evaluates how we can do business in a de-risked environment, we discuss why you can't approach privacy with just words - contracts, policies, and treaties; why it's essential to protect data in use;&nbsp; and how you can embed technical controls that move with data for protection that meets regulatory thresholds while "in use" to unlock additional data use cases. I.e., these effective controls equate to competitive advantage. 
Topics Covered:
<ul>
 <li>Why trust must be updated to be technologically enforced - "privacy left trust"</li>
 <li>The increasing prevalence of data breaches and ransomware attacks and how they have shifted privacy left from optional to mandatory</li>
 <li>7 Data Use Cases, 3 Data Use Obstacles, and deployable technologies to unlock new data use cases</li>
 <li>How the market is adopting technology for the 7 use cases and trends that Gary is seeing</li>
 <li>What it means to "de-risk" data</li>
 <li>Beneficial uses of "variant twins" technology</li>
 <li>Building privacy in by design, so it increases revenue generation</li>
 <li>"Statutory pseudonymization" and how it will help you reduce data privacy risks while increasing utility and value</li>
</ul>
Resources Mentioned:
<ul>
 <li>Learn about <a href="http://www.anonos.com" rel="noopener" target="_blank">Anonos</a></li>
 <li>Read:<a href="https://www.anonos.com/hubfs/Documents/Whitepapers/Jan_2023_Journal_of_Data_Protection_and_Privacy_Article.pdf?hsLang=en" rel="noopener" target="_blank"> "Technical Controls that Protect Data When in Use and Prevent Misuse"</a></li>
</ul>
Guest Info:
<ul>
 <li>Follow Gary on <a href="https://www.linkedin.com/in/garylafever/" rel="noopener" target="_blank">LinkedIn</a></li>
 <li>Follow Gary on <a href="https://twitter.com/GaryLaFever" rel="noopener" target="_blank"></a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

Today, I welcome Gary LaFever, co-CEO & GC at Anonos; WEF Global Innovator; and a solutions-oriented futurist with a computer science and legal background. Gary has over 35 years of technical, legal

S2E6: 'Privacy Left Trust' with Gary LaFever (Anonos)

In this conversation with <a href="https://www.linkedin.com/in/markuslampinen/" rel="noopener" target="_blank">Markus Lampinen</a>, Co-founder and CEO at <a href="https://www.prifina.com/" rel="noopener" target="_blank">Prifina</a>, a personal data platform, we discuss meaty topics like: Prifina’s approach to building privacy-respected apps for consumer wearable sensors; LLMs (Large Language Models) like Chat GPT; and why we should consider training our own personal AIs. Markus shares his entrepreneurial journey in the privacy world and how he is “the biggest data nerd you’ll find.” It started with tracking his own data, like his eating habits, activity, sleep, and stress, an then he built his company around that interest. His curiosity about what you can glean from one's own data made him wonder how you could also improve your life or the lives of your customers with that data.
--------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform --------- 
We discuss how to approach building a privacy-first platform to unlock the value and use of IOT / sensor data. It began with the concept of individual ownership: who should actually benefit from the data that we generate? Markus says it should be individuals themselves. Prifina boasts a strong community of 30,000 developers who align around common interests - <a href="https://www.prifina.com/slack.html" rel="noopener" target="_blank">liberty, equality & data</a> - and build and test prototypes that are gathering and utilizing the data working for individuals, as opposed to corporate entities. The aim is to empower individuals, companies & developers to build apps that re-purpose individuals' own sensor data to gain privacy-enabled insights. 
--------- Listen to the episode on <a href="https://podcasts.apple.com/us/podcast/the-shifting-privacy-left-podcast/id1651019312" rel="noopener" target="_blank">Apple Podcasts</a>, <a href="https://open.spotify.com/show/4bz3M4Bo0tigNrBBG3X7Im?si=fd03c98c67314d9e" rel="noopener" target="_blank">Spotify</a>, <a href="https://www.iheart.com/podcast/269-the-shifting-privacy-left-103595150/" rel="noopener" target="_blank">iHeartRadio</a>, or on your favorite podcast platform. --------- Topics Covered:
<ul>
 <li>Enabling true, consumer-grade 'data portability' with personal data clouds (a 'bring your own data' approach)</li>
 <li>Use cases to illustrate the problems Prifina is solving with sensors</li>
 <li>What are large language models (LLM) and chatbots trained on them, and why they are so hot right now</li>
 <li>The dangers of using LLMs, with emphasis on privacy harms</li>
 <li>How to benefit from our own data with personal AIs</li>
 <li>Advice to data scientists, researchers and developers regarding how to architect for ethical uses of LLMs</li>
 <li>Who's responsible for educating the public about LLMs, chatbots, and their potential harms & limitations</li>
</ul>
 Resources Mentioned:
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

In this conversation with Markus Lampinen, Co-founder and CEO at Prifina, a personal data platform, we discuss meaty topics like: Prifina’s approach to building privacy-respected apps for consumer

S2E7: Bring Your Own Data, ChatGPT & Personal AIs with Markus Lampinen (Prifina)

Victor Platt is a Senior AI Security and Privacy Strategist who previously served as Head of Security and Privacy for privacy tech company, Integrate.ai. Victor was formerly a founding member of the Risk AI Team with Omnia AI, Deloitt’s artificial intelligence practice in Canada. He joins today to discuss privacy enhancing technologies (PETs) that are shaping industries around the world, with a focus on federated learning.
--------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform ---------
 Victor views PETs as functional requirements and says they shouldn’t be buried in your design document as nonfunctional obligations. In his work, he has found key gaps where organizations were only doing “security for security’s sake.” Rather, he believes organizations should be thinking about it at the forefront. Not only that, we should all be getting excited about it because we all have a stake in privacy.
 
With federated learning, you have the tools available to train ML models on large data sets with precision at scale without risking user privacy. In this conversation, Victor demystifies what federated learning is, describes the 2 different types: at the edge and across data silos, and explains how it works and how it compares to traditional machine learning.We deep dive into how an organization knows when to use federated learning, with specific advice for developers and data scientists as they implement it into their organizations.
 
Topics Covered:
<ul>
 <li>What 'federated learning' is and how it compares to traditional machine learning</li>
 <li>When an organization should use vertical federated learning vs horizontal federated learning, or instead a hybrid version</li>
 <li>A key challenge in 'transfer learning': knowing whether two data sets are related to each other and techniques to overcome this, like 'private set intersection'</li>
 <li>How the future of technology will be underpinned by a 'constellation of PETs'&nbsp;</li>
 <li>The distinction between 'input privacy' vs. 'output privacy'</li>
 <li>Different kinds of federated learning with use case examples</li>
 <li>Where the responsibility for adding PETs lies within an organization</li>
 <li>The key barriers to adopting federated learning and other PETs within different industries and use cases</li>
 <li>How to move the needle on data privacy when it comes to legislation and regulation</li>
</ul>
Resources Mentioned:
<ul>
 <li>Take this outstanding, free class from OpenMined:&nbsp; <a href="https://courses.openmined.org/" rel="noopener" target="_blank">Our Privacy Opportunity</a></li>
</ul>
Guest Info:
<ul>
 <li>Follow Victor on <a href="https://www.linkedin.com/in/victor-platt/" rel="noopener" target="_blank">LinkedIn</a></li>
</ul>
Follow the SPL Show:
<ul>
 <li>Follow us on <a href="https://twitter.com/ShiftPrivacyPod" rel="noopener" target="_blank">Twitter</a></li>
 <li>Follow us on <a href="https://www.linkedin.com/showcase/shifting-privacy-left-podcast/?" rel="noopener" target="_blank"></a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

Victor Platt is a Senior AI Security and Privacy Strategist who previously served as Head of Security and Privacy for privacy tech company, Integrate.ai. Victor was formerly a founding member of the

S2E8: Leveraging Federated Learning for Input Privacy with Victor Platt

In this episode, I'm delighted to welcome <a href="https://www.linkedin.com/in/akapadia/" rel="noopener" target="_blank">Apu Kapadia</a>, Professor of Computer Science and Informatics at the School of Informatics and Computing, Indiana University. His research is focused on the privacy implications of ubiquitous cameras and online photo sharing. More recently, he has examined the cybersecurity and privacy challenges posed by AI-based smart voice assistants that can listen and converse with us.
 Prof. Kapadia has been excited by anonymized networks since childhood. He has memories of watching movies where a telephone call was being routed around the world so that it became impossible to trace. What really fascinates him now is how much there is to understand mathematically and technically in order to measure that amount of privacy. In more recent years, he has been interested in privacy in the context of digital photography and audio shared online and on social media. His current research is focused on understanding privacy issues around photo sharing in a world with cameras everywhere. 
In this conversation, we delve into how users are affected once privacy violations have already occurred, the implications of privacy of children when it comes to parents sharing photos of them online, the fascinating future of trusted hardware that will help ensure "digital forgetting," and how all of this is a people problem as much as it is a technical problem.
 
Topics Covered:
<ul>
 <li>Can we trick 'automated speech recognition' (ASR)?</li>
 <li>Apu's co-authored paper: 'Defending Against Microphone-based Attacks with Personalized Noise'</li>
 <li>What Apu means by 'tangible privacy' & what design approaches he recommends</li>
 <li>Apu's view on 'bystander privacy' & the approach that he took in his research</li>
 <li>How to leverage 'temporal redactions' via 'trusted hardware' for 'digital forgetting'</li>
 <li>Apu’s surprising finding in his research on "interpersonal privacy" in the context of social media and photos</li>
 <li>Guidance for developers building privacy-respective social media apps</li>
 <li>Apu's research focused on cybersecurity & privacy for marginalized & vulnerable populations</li>
 <li>How we can make privacy & security more 'useable'</li>
</ul>
Resources Mentioned:
<ul>
 <li>Read <a href="https://homes.luddy.indiana.edu/kapadia/papers/popets21-noise.pdf" rel="noopener" target="_blank">Defending Against Microphone-Based Attacks with Personalized Noise</a></li>
 <li>Read <a href="https://homes.luddy.indiana.edu/kapadia/papers/pias-cscw22.pdf" rel="noopener" target="_blank">Decaying Photos for Enhanced Privacy: User Perceptions Towards Temporal Redactions and 'Trusted' Platforms</a></li>
</ul>
Guest Info:
<ul>
 <li>Follow Prof. Kapadia on <a href="https://www.linkedin.com/in/akapadia/" rel="noopener" target="_blank">LinkedIn</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

In this episode, I'm delighted to welcome Apu Kapadia, Professor of Computer Science and Informatics at the School of Informatics and Computing, Indiana University. His research is focused on the

S2E9: Personalized Noise, Decaying Photos, & Digital Forgetting with Apu Kapadia (Indiana University Bloomington)

This week, we welcome <a href="https://www.linkedin.com/in/lipikaramaswamy/" rel="noopener" target="_blank">Lipika Ramaswamy</a>, Senior Applied Scientist at <a href="https://gretel.ai/" rel="noopener" target="_blank">Gretel AI</a>, a privacy tech company that makes it simple to generate anonymized and safe synthetic data via APIs. Previously, Lipika worked as a Data Scientist at LeapYear Technologies, and was the Machine Learning Researcher at <a href="https://privacytools.seas.harvard.edu/" rel="noopener" target="_blank">Harvard University's Privacy Tools Project</a>.
 
Lipika’s interest in both machine learning and privacy comes from her love of math and things that can be defined with equations. Her interest was piqued in grad school and accidentally walked into a classroom holding a lecture on Applying Differential Privacy for Data Science. The intersection of data combined with the privacy guarantees that we have available today has kept her hooked ever since. 
--------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer-friendly privacy platform --------- 
There's a lot to unpack when it comes to synthetic data & privacy guarantees, as she takes listeners on a deep dive of these compelling topics. Lipika finds elegant how privacy assurances like differential privacy revolve around math and statistics at their core. Essentially, she loves building things with 'usable privacy' & security that people can easily use. We also delve into the metrics tracked in the Gretel Synthetic Data Report, which assesses both 'statistical integrity' & 'privacy levels' of a customer's training data. 
Topics Covered:
<ul>
 <li>The definition of 'synthetic data,' & good use cases</li>
 <li>The process of creating synthetic data</li>
 <li>How to ensure that synthetic data is 'privacy-preserving'</li>
 <li>Privacy problems that may arise from overtraining ML models</li>
 <li>When to use synthetic data rather than other techniques like tokenization, anonymization, aggregation & others</li>
 <li>Examples of good use cases vs poor use cases for using synthetic data</li>
 <li>Common misperceptions around synthetic data</li>
 <li>Gretel.ai's approach to 'privacy assurance,' including a focus on 'privacy filters,' which prevent some privacy harms outputted by LLMs</li>
 <li>How to plug into the 'synthetic data' community</li>
 <li>Who bears the responsibility for educating the public about new technology like LLMs and potential harms</li>
 <li>Highlights from Gretel.ai's Synthesize 2023 conference</li>
</ul>
Resources Mentioned:
<ul>
 <li>Join Gretel's <a href="https://discord.com/invite/U6dAWX4CFP" rel="noopener" target="_blank">Synthetic Data Community on Discord</a></li>
 <li>Watch <a href="https://www.youtube.com/@gretel_ai/featured" rel="noopener" target="_blank">Talks on Synthetic Data on YouTube</a></li>
</ul>
Guest Info:
<ul>
 <li>Connect with Lipika on <a href="https://www.linkedin.com/in/lipikaramaswamy/" rel="noopener" target="_blank">LinkedIn</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

This week, we welcome Lipika Ramaswamy, Senior Applied Scientist at Gretel AI, a privacy tech company that makes it simple to generate anonymized and safe synthetic data via APIs. Previously, Lipika

S2E10: Leveraging Synthetic Data and Privacy Guarantees with Lipika Ramaswamy (Gretel.ai)

This week, we gain insights into the profession of privacy engineering with guest <a href="https://www.linkedin.com/in/menotti/" rel="noopener" target="_blank">Menotti Minutillo</a>, a Sr. Privacy Engineering Manager with 15+ years of experience leading critical programs and product delivery at companies like Uber, Thrive Global & Twitter. He started his career in 2007 on Wall Street as a DevOps & Infrastructure Engineer; and now, Menotti is a sought-after technical privacy expert and Privacy Tech Advisor. In this conversation, we discuss privacy engineering approaches that have work, the skillsets required for privacy engineering, and the current climate for landing privacy engineering roles.
Menotti sees privacy engineering as the practice of building or improving info systems to advance a set of privacy goals. It's like a 'layer cake' in that you have different protections and risk reductions based on threat modeling, as well as different specialization capabilities for larger orgs. It makes a lot of sense that he's held weaving roles from company to company. His journey into privacy engineering was originally 'adjacent work' and today, he shares lessons learned from taking a PET like differential privacy from the lab to systematizing it into an organization to deploying it in the real-world. In this episode, we delve into tools, technical processes, technical standards, the maturing landscape for privacy engineers, and how the success of privacy is coupled with the success of each product shipped. 
Topics Covered:
<ul>
 <li>How Menotti found his way to managing privacy engineering teams</li>
 <li>Menotti's definition of 'privacy engineer' & the skillsets required</li>
 <li>What it was like to work at Uber & Twitter, which have multiple privacy engineering teams</li>
 <li>Best practices for setting up teams & deploying solutions</li>
 <li>Privacy outcomes that privacy engineers should keep top of mind</li>
 <li>Best practices for privacy architecture</li>
 <li>Menotti positive experience while at Uber working with Privacy Researchers from UC Berkeley to take differential privacy from the lab to a real-world deployment</li>
 <li>Lessons learned from times of transition, including while at Twitter during Musk's takeover&nbsp;</li>
 <li>Whether privacy was a 'zero interest rate bet,' and what that means for privacy engineering roles given current economic realities</li>
</ul>
Resources Mentioned:
<ul>
 <li>Check out the <a href="https://www.usenix.org/conference/pepr23" rel="noopener" target="_blank">PEPR conference</a></li>
 <li>Read '<a href="https://www.linkedin.com/pulse/privacy-zero-interest-rate-bet-menotti-minutillo/?trackingId=DdUDD8IqTqGhZxoZnXE7Kg%3D%3D" rel="noopener" target="_blank">Was Privacy a Zero Interest Rate Bet?</a>'</li>
</ul>
Guest Info:
<ul>
 <li>Follow Menotti on <a href="https://www.linkedin.com/in/menotti/" rel="noopener" target="_blank">LinkedIn</a></li>
 <li>Connect with Menotti on <a href="https://macaw.social/@44" rel="noopener" target="_blank">Mastadon</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

This week, we gain insights into the profession of privacy engineering with guest Menotti Minutillo, a Sr. Privacy Engineering Manager with 15+ years of experience leading critical programs and

S2E11: Lessons Learned as a Privacy Engineering Manager with Menotti Minutillo (ex-Twitter & Uber)

This week, I'm joined by <a href="https://kjamistan.com/" rel="noopener" target="_blank">Katharine Jarmul</a>, Principal Data Scientist at Thoughtworks & author of the the forthcoming book, "Practical Data Privacy: Enhancing Privacy and Security in Data." Katharine began asking questions similar to those of today's ethical machine learning community as a university student working on her undergrad thesis during the war in Iraq. She focused that research on natural language processing and investigated the statistical differences between embedded & non-embedded reporters. In our conversation, we discuss ethical & secure machine learning approaches, threat modeling against adversarial attacks, the importance of distributed data setups, and what Katharine wants data scientists to know about privacy and ethical ML. 
Katharine believes that we should never fall victim to a 'techno-solutionist' mindset where we believe that we can solve a deep societal problem simply with tech alone. However, by solving issues around privacy & consent with data collection, we can more easily address the challenges with ethical ML.&nbsp; In fact, ML research is finally beginning to broaden and include the intersections of law, privacy, and ethics. Katharine anticipates that data scientists will embrace PETs that facilitate data sharing in a privacy-preserving way; and, she evangelizes the un-normalization of sending ML data from one company to another.&nbsp;
 Topics Covered:
<ul>
 <li>Katharine's motivation for writing a book on privacy for a data scientist audience and what she hopes readers will learn from it</li>
 <li>What areas must be addressed for ML to be considered ethical</li>
 <li>Overlapping AI/ML & Privacy goals</li>
 <li>Challenges with sharing data for analytics</li>
 <li>The need for data scientists to embrace PETs</li>
 <li>How PETs will likely mature across orgs over the next 2 years</li>
 <li>Katharine's & Debra's favorite PETs</li>
 <li>The importance of threat modeling ML models: discussing 'adversarial attacks' like 'model inversion' & 'membership inference' attacks</li>
 <li>Why companies that train LLMs must be accountable for the safety of their models</li>
 <li>New ethical approaches to data sharing</li>
 <li>Why scraping data off the Internet to train models is the harder, lazier, unethical way to train ML models</li>
</ul>
 Resources Mentioned:
<ul>
 <li>Pre-order the forthcoming book: "<a href="https://www.oreilly.com/library/view/practical-data-privacy/9781098129453/" rel="noopener" target="_blank">Practical Data Privacy</a>"</li>
 <li>Subscribe to Katharine’s newsletter: <a href="https://probablyprivate.com/" rel="noopener" target="_blank">Probably Private</a></li>
</ul>
 Guest Info:
<ul>
 <li>Follow Katharine on <a href="https://www.linkedin.com/in/katharinejarmul/" rel="noopener" target="_blank">LinkedIn</a></li>
 <li>Follow Katharine on <a href="https://twitter.com/kjam" rel="noopener" target="_blank">Twitter</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

This week, I'm joined by Katharine Jarmul, Principal Data Scientist at Thoughtworks & author of the the forthcoming book, "Practical Data Privacy: Enhancing Privacy and Security in Data." Katharine

S2E12: 'Building Powerful ML Models with Privacy & Ethics' with Katharine Jarmul (ThoughtWorks)

I am delighted to welcome this week’s guest, Kurt Rohloff. Kurt is the CTO and Co-Founder of <a href="https://dualitytech.com/" rel="noopener" target="_blank">Duality Technologies</a>, a privacy tech company that enables organizations to leverage data across their ecosystem and generate joint insights for better business while preserving privacy. Kurt was also Co-Founder of the <a href="https://www.openfhe.org/" rel="noopener" target="_blank">OpenFHE Homomorphic Encryption Software Library</a> that enables practical and usable privacy and collaborative data analytics. 
He's successfully led teams that are developing, transitioning, and applying first-in-the-world technology capabilities for both the <a href="https://www.defense.gov/" rel="noopener" target="_blank">Department of Defense</a> as well as for commercial use. Kurt specializes in generating, developing, and commercializing innovative secure computing technologies with a focus on privacy and AI/ML at scale. In this episode, we discuss use cases for leveraging Fully Homomorphic Encryption (FHE) and other PETs. 
In a previous episode, we spoke about federated learning; and in this episode, we learn how to achieve secure federated learning using fully homomorphic encryption (FHE) techniques.
 Kurt has been focused on and supported homomorphic encryption since it was first discovered, including his involvement in one of the seminal projects, funded by <a href="https://www.darpa.mil/" rel="noopener" target="_blank">DARPA</a>, where he ran an implementation team, called <a href="https://www.darpa.mil/program/programming-computation-on-encrypted-data" rel="noopener" target="_blank">PROCEED</a>.
 FHE, as opposed to other kinds of privacy technologies, is more general and malleable. As each organization has different needs when it comes to data collaboration, Duality Technologies offers three separate models for collaboration, which enable organizations to secure sensitive data while still allowing different types of sharing.
 Topics Covered:
<ul>
 <li>How companies can gain utility from a dataset while protecting the privacy of individuals or entities</li>
 <li>How FHEs help with fraud prevention, How FHEs help with fraud prevention, secure investigations, real-world evidence & genome-wide association studies</li>
 <li>Use cases for the three collaboration models Duality offers: Single Data Set, Horizontal Data Analysis, and Vertical Data Analysis</li>
 <li>Comparison & trade-offs involved between federated learning and homomorphic encryption</li>
 <li>Proliferation of FHE Standards</li>
 <li>OpenFHE.org, the leading open source library for implementations of fully homomorphic encryption protocols</li>
</ul>
Resources Mentioned:
<ul>
 <li>Review the <a href="https://www.openfhe.org/" rel="noopener" target="_blank">OpenFHE encryption software library</a></li>
 <li>Learn about <a href="https://dualitytech.com/" rel="noopener" target="_blank">Duality</a></li>
</ul>
Guest Info:
<ul>
 <li>Connect with Kurt on <a href="https://www.linkedin.com/in/kurt-rohloff/" rel="noopener" target="_blank">LinkedIn</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

I am delighted to welcome this week’s guest, Kurt Rohloff. Kurt is the CTO and Co-Founder of Duality Technologies, a privacy tech company that enables organizations to leverage data across their

S2E13: Diving Deep into Fully Homomorphic Encryption (FHE) with Kurt R. Rohloff (Duality Technologies)

This week, we welcome <a href="https://www.linkedin.com/in/suchakrasharma/" rel="noopener" target="_blank">Suchakra Sharma</a>, Chief Scientist at <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado.ai</a>, where he builds code analysis tools for data privacy & security. Previously, he earned his PhD in Computer Engineering from Polytechnique Montreal, where he worked on eBPF Technology and hardware-assisted tracing techniques for OS Analysis. In this conversation, we delve into Suchakra’s background in shifting left for security and how he applies traditional, tested static analysis techniques — such as 'taint tracking' and 'data flow analysis' — for use on large code bases at scale to help fix privacy leaks right at the source. --------- Thank you to our sponsor, <a href="https://www.privado.ai/" rel="noopener" target="_blank">Privado</a>, the developer friendly privacy platform. ---------
Suchakra aligns himself with the philosophical aspects of privacy and wishes to work on anything that helps in limiting the erosion of privacy in modern society, since privacy is fundamental to all of us. These kinds of needs have always been here, and as societies have advanced, this is a time when we require more guarantees of privacy. After all, it is humans that are behind systems and it is humans that are going to be affected by the machines that we build. Check out this fascinating discussion on how to shift privacy left in your organization. 
Topics Covered:
<ul>
 <li>Why Suchakra was interested in privacy after focusing on static code analysis for security</li>
 <li>What 'shift left' means and lessons learned from the 'shift security left' movement that can be applied to 'shift privacy left' efforts</li>
 <li>Sociological perspectives on how humans developed a need for keeping things 'private' from others</li>
 <li>How to provide engineering-focused guarantees around privacy today & what the role should be of engineers within this 'shift privacy left' paradigm</li>
 <li>Suchakra's USENIX Enigma talk & discussion of 'taint tracking' & 'data flow analysis' techniques</li>
 <li>Which companies should build in-house tooling for static analysis, and which should be outsourcing to experienced vendors like Privado</li>
 <li>How to address 'privacy bugs' in code; why it's important to have an 'auditor's mindset;' &, why we'll see 'Privacy Bug Bounty Programs' soon</li>
 <li>Suchakra's advice to engineering managers to move the needle on privacy in their orgs</li>
</ul>
Resources Mentioned:
<ul>
 <li>Join Privado's <a href="https://privado-community.slack.com/join/shared_invite/zt-yk5zcxh3-gj8sS9w6SvL5lNYZLMbIpw#/shared-invite/email" rel="noopener" target="_blank">Slack Community</a></li>
 <li>Review Privado's <a href="https://www.privado.ai/open-source" rel="noopener" target="_blank">Open Source Code Scanning Tools</a></li>
</ul>
Guest Info:
<ul>
 <li>Connect with Suchakra on <a href="https://www.linkedin.com/in/suchakrasharma/" rel="noopener" target="_blank">LinkedIn</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

This week, we welcome Suchakra Sharma, Chief Scientist at Privado.ai, where he builds code analysis tools for data privacy & security. Previously, he earned his PhD in Computer Engineering from

S2E14: Addressing Privacy with Static Analysis Techniques Like ‘Taint-Tracking’ & ‘Data Flow Analysis’ with Suchakra Sharma (Privado.ai)

This week's guest is <a href="https://www.linkedin.com/in/umar-iqbal-380a6752/" rel="noopener" target="_blank">Umar Iqbal, PhD</a>, a Postdoctoral Scholar at the <a href="https://cs.washington.edu/" rel="noopener" target="_blank">Paul G. Allen School of Computer Science & Engineering</a> at the University of Washington, working in the <a href="https://seclab.cs.washington.edu/" rel="noopener" target="_blank">Security and Privacy Research Lab</a>. Umar focuses his research on two themes: 1) bringing transparency into data collection and usage practices, and 2) enabling individuals to have control over their own data by identifying & restricting privacy-invasive data collection & usage practices of online services
 His long-term research vision is to create an environment where users can reap the benefits of technology without losing their privacy by enabling preemptive privacy protections and establishing 'checks & balances' on the Internet. In this discussion, we discuss his previous and current research with a goal of empowering people to protect their privacy on the Internet.&nbsp;
 Topics Covered:
<ul>
 <li>Why Umar focused his research on transparency</li>
 <li>Umar's research relating to transparency, data collection & use, with a focus on Amazon's smart speaker & metadata privacy and potential EU regulatory enforcement</li>
 <li>His transparency-related work related to browsers & API's, and the growing problem of using fingerprinting techniques to track people without consent</li>
 <li>How Umar plans to bring control to individuals by restricting online privacy-invasive data collections</li>
 <li>How he used a ML technique to detect browser fingerprinting scripts based on their functionality</li>
 <li>Umar's research to determine the prevalence of online tracking & measure how effective currently-available tracker detection tools are&nbsp;</li>
 <li>His research on early detection of emerging privacy threats (e.g., 'browser fingerprinting' & 'navigational tracking', etc.) and his investigation of privacy issues related to IoT (e.g., smart speakers & health & fitness bands that analyze people's voices)</li>
 <li>How we can ensure strong privacy guarantees and make a more accountable Internet</li>
 <li>Why regulations need technological support to be effective for enforcement</li>
 <li>Umar's advice to developers / hackers looking for 'privacy bugs' via dynamic code analysis and a discussion of the future of 'privacy bug bounties'</li>
</ul>
Resources Mentioned:
<ul>
 <li>Read Umar's papers: <a href="https://scholar.google.com/citations?user=K1GBN0MAAAAJ" rel="noopener" target="_blank">Google Scholar Citations</a></li>
</ul>
Guest Info:
<ul>
 <li>Learn about Umar on <a href="https://umariqbal.com/" rel="noopener" target="_blank">his website</a></li>
 <li>Connect with Umar on <a href="https://www.linkedin.com/in/umar-iqbal-380a6752/" rel="noopener" target="_blank">LinkedIn</a></li>
 <li>Follow Umar on <a href="https://twitter.com/umaarr6" rel="noopener" target="_blank">Twitter</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 <a target="_blank" href="https://www.buzzsprout.com/?referrer_id=2041385" rel="noopener">Buzzsprout - Let's get your podcast launched!</a> 
 Start for FREE
 
 Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
 
 
Copyright © 2023 Principled LLC. All rights reserved.

This week's guest is Umar Iqbal, PhD, a Postdoctoral Scholar at the Paul G. Allen School of Computer Science & Engineering at the University of Washington, working in the Security and Privacy

S2E15: 'Watching the Watchers: Transparency & Control Research' with Umar Iqbal, PhD (University of Washington)

I'm delighted to welcome guest, <a href="https://www.linkedin.com/in/melanieensign" rel="noopener" target="_blank">Melanie Ensign</a>, Founder and CEO of <a href="https://discernibleinc.com/" rel="noopener" target="_blank">Discernible</a>, where she helps organizations adopt effective communication strategies to improve risk-related outcomes. She's managed security & privacy communications for some of the world's most notable brands, including Facebook, Uber & AT&T. Melanie counsels executives and technical teams to cut through internal politics, dysfunctional inertia & meaningless metrics. For the past 10 years, she's also led the press department & communication strategy for DEF CON. Also, Melanie is an accomplished scuba diver and brings lessons learned preventing, preparing for & navigating unexpected high-risk underwater incidents to her work in security & privacy. Today's discussion focuses on the importance of communication strategies and tactics for privacy engineering teams.&nbsp;
Topics Covered:
<ul>
 <li>Melanie's career journey and how she leveraged her experience in shark science to help executives get over their initial fears of the unknown in security & privacy</li>
 <li>How Melanie guides and supports technical teams at Discernible on effective communications</li>
 <li>How to prevent 'Privacy Outrage'</li>
 <li>The value of preventing privacy snafus rather than focusing only on crisis comms</li>
 <li>How companies can use technical communication strategies & tactics to earn trust with the public</li>
 <li>The problem with incentives - why most social media metrics have been bullshit for far too long</li>
 <li>Why Melanie decided to leave big tech to start Discernible</li>
 <li>Insight into the 7 Arthur W. Page Society Principles, a 'code of ethics' for communications professionals</li>
 <li>What makes for a good PR story that the media would want to cover</li>
 <li>Why press releases are mostly ineffective except for announcing funding raises</li>
 <li>The importance of educating the community for which you're building</li>
 <li>Melanie's advice to Elon Musk, who does not invest in a comms team</li>
 <li>What OpenAI could have done differently, and whether their go-to-market strategy was effective</li>
 <li>The importance of elevating Compliance teams to Business Advisors in the eyes of stakeholders</li>
</ul>
Resources Mentioned:
<ul>
 <li>Subscribe to the <a href="https://discernibleinc.com/newsletter-signup" rel="noopener" target="_blank">Discernible newsletter</a></li>
 <li>Discover <a href="https://github.com/readme" rel="noopener" target="_blank">Github's ReadMe Newsletter</a></li>
 <li>Learn about the <a href="https://www.bellisario.psu.edu/page-center/about/arthur-w-page/the-page-principles" rel="noopener" target="_blank">Arthur W. Page Principles</a></li>
</ul>
Guest Info:
<ul>
 <li>Follow Melanie on <a href="https://www.linkedin.com/in/melanieensign" rel="noopener" target="_blank">LinkedIn</a></li>
 <li>Follow Melanie on <a href="https://Mastodon: Wednesday@defcon.social/about" rel="noopener" target="_blank">Mastodon</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 
Copyright © 2023 Principled LLC. All rights reserved.

I'm delighted to welcome guest, Melanie Ensign, Founder and CEO of Discernible, where she helps organizations adopt effective communication strategies to improve risk-related outcomes. She's managed

S2E16: Words with Impact; Communication Tips for Privacy Technologists with Melanie Ensign (Discernible)

In this week’s episode, I speak with <a href="https://www.linkedin.com/in/desfontaines/" rel="noopener" target="_blank">Damien Desfontaines</a>, also known by the pseudonym “Ted”, who is the Staff Scientist at <a href="https://www.tmlt.io/" rel="noopener" target="_blank">Tumult Labs</a>, a startup leading the way on differential privacy. In Damien’s career, he has led an Anonymization Consulting Team at Google and specializes in making it easy to safely anonymize data. Damien earned his PhD and wrote his thesis at <a href="https://ethz.ch/en.html" rel="noopener" target="_blank">ETH Zurich</a>, as well as his Master's Degree in Mathematical Logic and Theoretical Computer Science.
<a href="https://www.tmlt.io/" rel="noopener" target="_blank">Tumult Labs</a>’ platform makes differential privacy useful by making it easy to create innovative privacy and enabling data products that can be safely shared and used widely. In this conversation, we focus our discussion on Differential Privacy techniques, including what’s next in its evolution, common vulnerabilities, and how to implement differential privacy into your platform.
When it comes to protecting personal data, <a href="https://www.tmlt.io/" rel="noopener" target="_blank">Tumult Labs</a> has three stages in their approach. These are Assess, Design, and Deploy. Damien takes us on a deep dive into each with use cases provided. 
Topics Covered:
<ul>
 <li>Why there's such a gap between the academia and the corporate world</li>
 <li>How differential privacy's strong privacy guarantees are a result of strong assumptions; and why the biggest blockers to DP deployments have been eduction & usability</li>
 <li>When to use "local" vs "central" differential privacy techniques</li>
 <li>Advancements in technology that enable the private collection of data</li>
 <li>Tumult Labs' Assessment approach to deploying differential privacy, where a customer defines its 'data publication' problem or question</li>
 <li>How the Tumult Analytics platform can help you build different privacy algorithms that satisfies 'fitness for use' requirements</li>
 <li>Why using gold standard techniques like differential privacy to safely release, publish, or share data has value far beyond compliance</li>
 <li>How data scientists can make the analysis & design more robust to better preserve privacy; and the tradeoff between utility on very specific tasks & number of tasks that you can possibly answer</li>
 <li>Damien's work assisting the IRS & DOE deploy differential privacy to safely publish and share data publicly via the College Scorecards project</li>
 <li>How to address security vulnerabilities (i.e. potential attacks) to differentially private datasets</li>
 <li>Where you can learn more about differential privacy</li>
 <li>How Damien sees this space evolving over the next several years</li>
</ul>
Resources Mentioned:
<ul>
 <li>Join the <a href="https://www.tmlt.dev/slack" rel="noopener" target="_blank">Tumult Labs Slack</a></li>
 <li>Learn about <a href="https://www.tmlt.io/" rel="noopener" target="_blank">Tumult Labs</a></li>
</ul>
Guest Info:
<ul>
 <li>Connect with Damien on <a href="https://www.linkedin.com/in/desfontaines/" rel="noopener" target="_blank">LinkedIn</a></li>
 <li>Learn more on Damien’s <a href="https://desfontain.es/serious.html" rel="noopener" target="_blank">website</a></li>
 <li>Follow 'Ted' on <a href="https://twitter.com/TedOnPrivacy" rel="noopener" target="_blank">Twitter</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 
Copyright © 2023 Principled LLC. All rights reserved.

In this week’s episode, I speak with Damien Desfontaines, also known by the pseudonym “Ted”, who is the Staff Scientist at Tumult Labs, a startup leading the way on differential privacy. In Damien’s

S2E17 - Noise in the Machine: How to Assess, Design & Deploy 'Differential Privacy' with Damien Desfontaines (Tumult Labs)

I am delighted to welcome my next guest, <a href="https://www.linkedin.com/in/braddominy/" rel="noopener" target="_blank">Brad Dominy</a>. Brad is a MacOS and iOS developer and Founder & Inventor of <a href="https://www.neucards.com/" rel="noopener" target="_blank">Neucards</a>, a privacy-preserving app that enables secure shareable and updatable digital contacts. In this conversation, we delve into why personally managing our digital contacts has been so difficult and Brad's novel approach to securely manage our contacts, architected with privacy by design and default.
Contacts have always been the “junk drawer” of digital data, where people have information that they want to keep up-to-date, but are rarely able to based on current technology. The vCard standard is outdated, but is the only standard that works across iOS, Android, and Microsoft. It is still the most commonly used contact format, but lacks any capacity for updating contacts. Once someone exchanges their contact information with you, it then falls on you to keep that up-to-date. This is why Brad created <a href="https://www.neucards.com/" rel="noopener" target="_blank">Neucards</a>: to gain the benefits of sharing information easily, privately (with E2EE) and receiving updates across all platforms.
 Topics Covered:
<ul>
 <li>Why it is difficult to keep our digital contacts up-to-date across devices and platforms.</li>
 <li>Brad describes his career journey that inspired him to invent Neucards; the problems Neucards solves for; and why this became his passion project for over a decade</li>
 <li>Why companies haven’t innovated more in the digital contacts space</li>
 <li>The 3 main features that make Neucards different from other contact apps</li>
 <li>How Neucards enables you to share digital contacts data easily & securely</li>
 <li>Neucards' privacy by design and default approach to sharing and updating digital contacts</li>
 <li>How you can use NFC tap tags with Neucards to make the process of sharing digital contacts much easier</li>
 <li>Whether Neucards can solve the "New phone, who dis?" problem</li>
 <li>Whether we will see an update to the vCard standard or new standards for digital contacts</li>
 <li>Neucards' roadmap, including a 'mask communications' feature</li>
 <li>The importance of language; the difference between 'privacy-preserving' vs. 'privacy-enabling' architectural approaches</li>
</ul>
Resources Mentioned:
<ul>
 <li>Learn about <a href="https://www.neucards.com/" rel="noopener" target="_blank">Neucards</a></li>
 <li>Download the <a href="https://apps.apple.com/us/app/neucards-secure-contact-card/id1599851881" rel="noopener" target="_blank">Neucards iOS app</a></li>
</ul>
Guest Info:
<ul>
 <li>Follow Brad on <a href="https://www.linkedin.com/in/braddominy/" rel="noopener" target="_blank">LinkedIn</a></li>
</ul>
 Sponsor The Shifting Privacy Left Podcast!
<ul>
 <li>Reach privacy engineers, architects, developers, researchers & buyers</li>
 <li>Insert a 60 sec 'dynamic ad' into each episode</li>
 <li>Feature a product, conference, training, or deal code</li>
</ul>
<a href="mailto:sponsorship@shiftingprivacyleft.com" rel="noopener" target="_blank">sponsorship@shiftingprivacyleft.com</a>
 <a target="_blank" href="https://privado.ai" rel="noopener">Privado.ai</a> 
 Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
 
 <a target="_blank" href="https://shiftingprivacyleft.com" rel="noopener">Shifting Privacy Left Media</a> 
 Where privacy engineers gather, share, & learn
 
 
Copyright © 2023 Principled LLC. All rights reserved.

I am delighted to welcome my next guest, Brad Dominy. Brad is a MacOS and iOS developer and Founder & Inventor of Neucards, a privacy-preserving app that enables secure shareable and updatable

Audio Player