Frost Brown Todd Podcast

Latest Episodes:

Episode 125 — Identify Orchestration: Are Passwords Obsolete? May 18, 2023

Show notes

Identity orchestration. Explore its meaning. Discover in Episode 125 how identity orchestration can protect data privacy and data security. Founder and CEO of Strata Identity [https://www.strata.io/], Eric Olden explores with us the change under way from passwords and multi-factor authentication to a radically different approach to safeguarding and verifying identities in a world of distributed data. Learn what a blue checkmark will mean within LinkedIn as one example. Consider how a system of passwords and identity exposure sprinkled among hundreds of applications and sources exposes individuals and organizations to hacking and theft risk at the weakest link. Can technology protect us from ourselves? Learn what OIDC (OpenID Connect) means and how it relates to the ongoing struggle between mal-actors and the rest of us. Time stamps: 01:12 — What is Identity Orchestration? 04:12 — What is Project Indigo? 07:01 — OIDC - OpenID Connect Protocol 15:25 — Challenges for privacy as technology changes, and what we can do about it

Episode 124 — Data Privacy & the Automobile: Your car is watching, recording, and sharing your data May 11, 2023

Show notes

The modern automobile – a marvel of technology and transportation. It collects enormous amounts of data about us. This information is used for continuous improvement in design and safety and for our convenience. But it also creates risks to personal privacy. Episode 124 provides a tour of what automakers, suppliers, and users can do to create fair controls over how the automobile monitors, records, and shares personal information. Standard setting includes the Alliance for Automotive Innovation, in its Consumer Privacy Protection Principles. NIST (the National Institute for Standards and Technology) issued 2023 revisions to its Cyber-Security Framework. In the absence of national law or regulation about automotive privacy, these standards are a baseline for acceptable use of automotive generated personal data. Tune in to consider what automotive businesses and private individuals can do to safeguard personal privacy while allowing continuing technological and safety progress. Matt Schantz, an attorney with Frost Brown Todd’s Automotive Industry Team, with a focus on intellectual property and technology agreements, leads an exploration of how our car is watching, listening, recording, and sharing our data – and choices business and consumers have to protect personal privacy. Time stamps: 01:10 — How do today's automobiles collect data about their drivers? 05:00 — How do automakers and suppliers address privacy concerns? 06:40 — What guidance does NIST have on balancing automaker interests with individual privacy concerns? 10:19 — Tips for automakers and suppliers about meeting privacy concerns and/or regulations? 13:57 — TIps for drivers about safeguarding their data

Episode 123 — April & Data Privacy - 3 States, AI, and Utah’s parental consent for social media law May 04, 2023

Show notes

What do Indiana, Tennessee, and Montana have in common? They adopted comprehensive data privacy laws in April 2023. Explore the similarities and differences and a unique Tennessee provision about national standards. Is a pattern emerging for how the U.S. regulates personal data? Consider the privacy implications of Artificial Intelligence. Global leaders are racing to understand and decide how to regulate AI. G7 leadership met in Japan on April 29 to consider a joint approach to the dark side of AI. And hear how a request to Google’s Bard resulted in both a text and a refusal to generate a deep fake. Utah enacts the first state law giving parents control over minors’ use of social media. Whose privacy is paramount before a person reaches age 18? How does Utah’s law address the rights of parents and children in a world of social media with its far-reaching impact on us all? Time stamps: 00:40 — What do Indiana, Tennessee, and Montana have in common? 02:50 — Tennessee adopts NIST privacy framework 05:16 — How are governments thinking about how to regulate artificial intelligence? 07:27 — What is generative A.I.? 08:03 — G7 leaders met in April to discuss A.I. 11:07 — Utah enacts law giving parents control over their children's social media

Episode 122 - Shaping A Compliant And Privacy - Centric Data Privacy Policy Apr 27, 2023

Show notes

How can an organization comply with a wide diversity of privacy laws being adopted and changed across the globe? How does an organization create a compliant and privacy-responsible policy to assure its customers that their privacy will be protected? Join Rachael Ormiston, Head of Privacy at Osano, as we explore these questions. Osano offers a “No Fines, No Penalties Pledge” to its customers. The World's Most Trusted Data Privacy Software Platform | Osano (https://www.osano.com/). Consider how and why it does this and seeks to offer real-time compliance in an evolving world of data privacy regulation. Hear the trends of data regulation and learn whether there is hope for harmonization across borders for how our personal information is regulated and protected. Time stamps: 01:28 — What does Osano do? 03:06 — What are the essential elements of a successful privacy policy for a mid-sized organization? 05:55 — How do you aim to create a privacy policy that is compliant with current and future regulations? 09:58 — How should companies think about their privacy policies in terms of international users? 12:14 — What does the future of data privacy regulations look like? Will different countries and regions develop their own different privacy regimes?

Episode 121 - The Battle For Data Privacy: What Does A Mid-Sized Organization Do? Apr 20, 2023

Show notes

Join Duane Laflotte and Patrick Hynds of Pulsar Security as the Data Privacy Detective asks these essential questions about cyber-crime and data privacy: How hard is it to break into a website or organization’s IT system? What are top tips for mid-sized organizations to defeat data attacks? What’s the future for people seeking a cybersecurity career? Pulsar Security offers institutions cyber-protection through software and services to prevent data leaks and losses at reasonable cost. Offensive Network Security | Enterprise Security Software | Pulsar Security. Tune in for insights into countering the growing tide of data and identity theft Time stamps: 02:15 — How hard is it for a bad actor to infiltrate a company's website or IT system? 03:37 — How much safer is HTTPS? 05:50 — What are the top ways a mid-sized business can protect itself from cybercriminals? 07:10 — Why is it important to know which data is flowing through your organization? 09:55 — How often should you change your passwords? 13:18 — Are we going to be able to keep up with cybercriminals?

Episode 120 - AI And Data Privacy - Opening The Black Box Apr 13, 2023

Show notes

Artificial Intelligence and data privacy. Explore their relationship in this episode. It’s a subject little addressed by law or regulators and largely invisible to the public. AI depends on amassing a huge amount of personal information, collected and processed largely without consent or awareness of individuals whose personal information is being used. Once collected by AI businesses, personal data can leak to bad actors. And the services that are AI-driven can result in misapplications and mistaken projections, causing untoward harm to individuals. Vinay Kumar, CEO and Founder of Arya.ai, opens for us the black box of AI. We consider how ML Observability tools such as AryaXAI can make AI understandable to all stakeholders, including those whose personal data is used to train AI models and create AI-powered services in finance and other fields. Time stamps: 01:08 — What do AI and data privacy have to do with each other? 04:28 — What is ML Observability tool?

Episode 119 – News Digest: Data Privacy Developments — ChatGPT, Iowa, Spyware, and TikTok Apr 06, 2023

Show notes

What do ChatGPT, Iowa, TikTok, and Spyware have in common? They all made data privacy news in March 2023. Italy’s Data Protection Authority blocked ChatGPT internet use on privacy grounds, the first western government to do so. Iowa became the sixth U.S. state to adopt a comprehensive personal data protection code. President Biden issued an Executive Order against federal use of social media containing spyware, without expressly naming TikTok or China as the targets. Join the Data Privacy Detective’s conversation with Mike Nitardy and Yugo Nagashima, attorneys with the Data Privacy Team of Frost Brown Todd LLP. Explore the meaning of these developments for data privacy and its place in the world of technology and of us all. Time stamps: 00:43 — ChatGPT in Italy 06:54 — Iowa develops a comprehensive personal data protection code 12:00 — Executive order against federal use of social media containing spyware

Episode 118 - Africa – Cybercrime and Data Privacy: A Report from South Africa Mar 30, 2023

Show notes

Prominent South African data privacy attorney Ahmore Burger-Smidt described 2022 as a year of “bloodbath” for personal data privacy in a recent report from her firm Werksmans. The firm manages the Lex Africa Legal Alliance, with members in over twenty-five African countries. Cybercrime is extensive and growing in Africa, similar to trends evident in the rest of the world. Cybercriminals employ increasingly sophisticated phishing attacks and business email compromise schemes and have expanded with cryptocurrency attacks and direct entry into data storage and other technology to steal personal data and identities. African countries have responded through governmental and private sector efforts. South Africa’s Protection of Personal Information Act (POPIA) is about two years in force, with its implementation encouragingly steadfast. Click on Episode 118 for an African view of how the battle between cybercrime and civil society is unfolding. Time stamps: 01:33 — What cyber crime / data privacy issues are we seeing in South Africa? 03:49 — Business email compromise 09:08 — South Africa's regulatory approach to data privacy 15:35 — South Africa's regulatory regime has both carrots and sticks

Episode 117 - GDPR: The First Five Years — Its Influence and Operations Mar 23, 2023

Show notes

The European Union’s GDPR (General Data Protection Regulation) became effective in May 2018. It declared a thorough and far-reaching set of rules for data privacy and became the global leader in how personal data privacy can be regulated and enhanced. What have almost five years shown? Is it successful? Entrenched? A model others follow? And how does it work in practice in 2023? Episode 117 considers how GDPR has become an embedded fabric for how personal information flows – or fails to flow – across borders. While an adopted framework within the EU and affecting global business without regard to borders, GDPR has not been copied everywhere. It varies both from the data localization approach of some countries and from the freer market approach of the United States and other countries. Tune in for what’s happening in early 2023 with GDPR and how it has worked in practice. Time Stamps: 01:28 — GDPR Fines 03:36 — United Kingdom privacy regime 04:43 — 2023 examples of laws influenced by GDPR 07:40 — US and EU attempting to create a safe harbor for data transfers between the two 08:23 — Differences between US and Europe regarding privacy 09:30 — Europe’s draft data act

Episode 116 - Do Not Sell or Share My Personal Information: How easy is it to exercise this right? Mar 16, 2023

Show notes

Government regulation is moving towards giving consumers the right to stop companies from selling or share their personal information. How easy do companies make it for consumers to make this request—and then have it mean something? This episode contrasts two companies that take very different approaches to the question. One company makes its money through advertising, and to do that it needs to collect and share personal information of those who use its browser and other offerings. Another was fined by the California Attorney General for failing to give its visitors a choice. It now posts a clear and simple way for consumers to stop it from selling or sharing their personal information to others. Consider in Episode 116 how websites can provide consumers the right to protect their privacy and what consumers can do about it when companies make it difficult or impossible to stop them from selling or sharing their personal data. Time stamps: 00:30 — Sephora’s privacy policy 07:57 — Google’s privacy policy

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected