Frost Brown Todd Podcast

Latest Episodes:

Episode 115 - The Digital Advertising Ecosystem: Privacy and Compliance Challenges Mar 09, 2023

Show notes

Many of us wonder how the internet knows so much about us. We are barraged with tailored ads as we use the internet. How does this happen? How does this affect the compliance risks of businesses and the data privacy of us all? Dan Frechtling, CEO of Boltive, explores the digital advertising ecosystem in Episode 115. Explore the sub-terrain of the internet, how it creates advertising revenue that is the business model of many tech firms, how unwanted ads and mal-advertising encroach, how it affects our personal privacy, and how regulation increasingly requires businesses to offer consumers the choice of refusing the sale or sharing of their information. Learn how businesses can minimize risk and avoid compliance violations and how consumers can make privacy choices within their control. For information about inadvertent data leakage, Visit Boltive at https://www.boltive.com/ to learn more about inadvertent data leakage. Visit https://www.linkedin.com/in/frechtling/ to connect with Dan. Time Stamps: 01:40 — What brought Dan into the data privacy space? 07:50 — Consumer privacy concerns about digital advertising 09:06 — Data privacy minimization 09:42 — What Boltive does to address these issues 11:13 — What is the future of the digital advertising business model?

Episode 114 - News Digest: CA Privacy Rights Act, FTC settlement w/ GoodRX, and proposed EU Data Act Mar 02, 2023

Show notes

The Data Privacy Detective welcomes Frost Brown Todd attorneys Mike Nitardy and Yugo Nagashima to cover three important developments in the world of data privacy: -Updates to the California Privacy Rights Act (“CPRA”) – highlights of final regulations just issued -FTC settlement with GoodRX - the first enforcement of the Health Breach Notification Rule – its meaning for the healthcare industry and us -European Commission’s proposed “Data Act,” which could radically change the rules of data sharing and stimulate competition in tech sector Time stamps: 01:15 - California Privacy Rights Act amendments 07:58 - FTC settlement with GoodRX 11:55 - EU Data Act proposal

Episode 113 - Business Email Compromise Attacks: What Can Be Done? Feb 16, 2023

Show notes

Business Email Compromise – it’s a major way that global thieves steal trillions of dollars. Bill Repasky, an attorney at Frost Brown Todd LLP, with years of experience in electronic payments and cyber-fraud defense, explains how attacks of this type occur, why they are growing, what can be done to prevent them, and what a business can do if attacked this way. Common types of Business Email Compromise attacks are what appear to be incoming customer payments, outgoing payments to suppliers of goods and services, and internal attacks (where a mal-actor takes over an employee’s email account at the business). While anti-phishing training is important, it is not enough. Businesses can minimize risk of loss by upgrading institutional defenses this podcast discusses. Tune in for a tune up on how businesses can deal with the rising global crime wave of Business Email Compromise. Time stamps: 00:46 - What is Business Email Compromise? 03:28 - What businesses are being targeted? 05:35 - What are the common threads we see in business email attacks? 08:24 - How do internal business email attacks occur? 11:00 - How is public information on social media used as part of email attacks? 11:38 - Key things businesses can do to prevent attacks? 14:20 - What is “out-of-band” verification and how can it help prevent attacks? 17:15 - What should a business do once it knows it has been attacked?

Bonus Episode - Data Privacy Detective on Privacy Please Podcast Panel Discussion Feb 14, 2023

Show notes

In this bonus episode, we bring you the Data Privacy Detective's guest appearance on the Privacy Week podcast's "The Privacy Panel Discussion" special.

Episode 112 - Data Privacy and Canada Feb 09, 2023

Show notes

Canada and the United States are each other’s major commercial partner. Many U.S. companies have Canadian customers and collect and process personal information about Canadians. They must therefore understand Canada’s and its provinces’ regulation of personal data privacy. The Canadian regulation of data privacy is very complex, with a maze of the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial laws and regulations. In this conversation with Lyndsay Wasser, a Toronto-based attorney at the Canadian law firm McMillan LLP, the Data Privacy Detective asks what cross-border businesses should know about privacy and data security in Canada, as well as looming changes on the U.S.’s northern horizon. Time stamps: 01:05 - What is the general state of data privacy and security law and regulation within Canada? 02:33 - What does Quebec do differently? 03:18 - Do foreign companies need to consider individual provincial laws in addition to the federal laws? 05:27 - How is the Canadian privacy regime similar to the EU's GDPR? How is it different? 07:14 - What should a US company know if it collects data from Canadian users? 08:16 - How does Canada address data localization? 09:43 - What does the future look like for data privacy law in Canada? 13:06 - What advice would Lyndsay give on the type of guidance companies should seek regarding Canadian data privacy?

Episode 111 - What Is Your Privacy Worth? Feb 02, 2023

Show notes

“If it’s free, then you are the product.” We carry in our pockets devices that have powerful mechanisms for collecting our information–where we go, what we buy, and even how fast we move. Every time we scroll through social media on our phones, we are submitting extremely precise data about what we might be interested in… even down to how many seconds we slow down to look at an individual post. By using these products and services, we are in effect consenting to this data collection, which comes back to us in the form of targeted advertising. But is there an alternative? What can we do if we want to use these services but don’t want to give over so much of our personal information? Ryan Patersen’s company Unplugged is betting that there are many people willing to pay more for more privacy. The products and services Unplugged offers present a fascinating test case in how much people value their privacy, and Ryan joins the Data Privacy Detective podcast to tell us all about it. Learn more about Unplugged at their website – https://www.unplugged.com/ Time stamps: 01:23 – How do our devices collect data on us? 03:57 – How do companies use our data? 07:22 – What are the privacy risks? 08:44 – What is Unplugged doing differently? 14:10 – How much money is each user worth to the big tech companies as an ad delivery conduit?

Episode 110 - Dutch Treatment: The Netherlands & Tech Giants Jan 26, 2023

Show notes

Tech giants like Google, Apple, and Facebook incur huge Euro fines from European Union data privacy authorities. This is a “stick” approach, perhaps more like a “club,” of forcing EU rules upon global companies, aiming to force tech giants to change data privacy policies and practices to GDPR’s strict demands. Enter the Netherlands - with a different way of achieving changes in privacy practices through a joint approach. A January 23, 2023 New York Times article by Natasha Singer highlighted the Dutch carrot and teamwork way of getting companies to embrace EU rules without first resort to financial penalties. This podcast considers how the Dutch treatment – an audit and negotiation approach – offers a successful means of boosting personal privacy through collaborative solutions. Tune in for a refreshing example of how data privacy authorities and technology giants can work together to achieve common personal data privacy goals. New York Times article - How the Netherlands Is Taming Big Tech (Jan 18, 2023) by Natasha Singer - Link: https://www.nytimes.com/2023/01/18/technology/dutch-school-privacy-google-microsoft-zoom.html Time stamps: 00:21 - How the Netherlands has approached GDPR compliance 01:41 - GDPR fines have gotten the attention of Big Tech companies 03:03 - NYT article by Natasha Singer on Dutch approach to Big Tech 07:40 - The Dutch’s different approach of collaboration rather than lawsuits has been effective

Quick Announcement: Data Privacy Detective on Privacy Week Podcast Palooza (Thursday, Jan 26) Jan 24, 2023

Show notes

The Data Privacy Detective Joe Dehner will be appearing as part of the LinkedIn Live event, "Privacy Week Podcast Palooza." Tune in on Thursday, January 26 from 3:00 to 4:00 p.m. EST: https://www.linkedin.com/video/event/urn:li:ugcPost:7021476486180212738/

Episode 109 - India and Digital Data Protection Jan 13, 2023

Show notes

A Third Way Emerges - Light Touch India -soon to be the world’s most populous country, a fast growing economy with a highly sophisticated tech sector. It’s a country with a digital rupee in circulation and digital identity cards. Since independent India has forged an independent path between “east and west.” About a year ago, the Modi Government withdrew a bill based on Europe’s comprehensive privacy-centric approach to personal data privacy, GDPR. In November 2022, a very different bill was proposed by the Ministry of Electronics and Information Technology – the Digital Data Protection Act. What caused the change and where is India headed? In Episode 109, Stephen Mathias of the premier Indian law firm Kochhar & Co explains the new approach. Expected to be adopted by mid-2023 in a final form, it is very different from either the GDPR strict and privacy-centric approach or the U.S. model of sectoral and partial rules without an overarching federal code. India’s will use a “light touch” approach. It will leave many details open to evolving technology and future administrative rule-setting. Explore this very different model for national regulation of data privacy and security.

Episode 108 - Identity Management Jan 10, 2023

Show notes

Identity management. Learn how an automated approach can defend against the rising tide of data hacks, thefts, ransomware attacks, and other assaults on private information. Kevin Dominik Korte, IT Innovation and Growth Strategist of Univention, explains how an automated approach to login and other steps we take to connect to the internet and intranets can reduce the ability of bad actors to succeed in their attacks on IT systems, large and small. Traditional identity management is more costly and risk prone than what can be designed into an automated IT system that includes privacy and security by design. Consider how digital identities can be managed to increase security and minimize data breach risk in Episode 108.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected