Stay ConnectedThe FIT4Privacy Podcast dives into data privacy and the evolving EU AI Act, offering expert insights on ISO standards, GDPR, and digital trust. Join host Punit Bhatia as he explores privacy laws and EU regulations through conversations with industry leaders, delivering actionable advice and thought leadership for privacy professionals and technology enthusiasts alike.
Top Ranked by Feedspot.
Follow www.fit4privacy.com/podcast and https://growskills.store/?utm_source=podcast
"It's that GDPR moment all over again."
AI adoption is accelerating across industries, but with opportunity comes responsibility. In this clip from the FIT4Privacy Podcast, AI governance expert and author Jamal Ahmed explains why the EU AI Act is becoming one of the most important regulations for organizations worldwide.
Discover why executives must pay attention, how the EU AI Act compares to GDPR, and what businesses need to know to stay compliant, competitive, and trustworthy in the age of AI.
"No AI means no business in future."
Watch the full episode for deeper insights into AI governance, compliance, and the future of responsible AI.
Resources & Links
Guest Links
Jamal Ahmed
• LinkedIn: https://www.linkedin.com/in/kmjahmed/
• Website: https://besteuaiactbook.com/
Grow Skills (Privacy Courses & Insights)
• Courses: https://growskills.store/courses/
• Insights: https://growskills.store/insights/
• Website: https://growskills.store/
FIT4Privacy
• Website: https://www.fit4privacy.com
• Podcast: https://www.fit4privacy.com/podcast
• Blog: https://www.fit4privacy.com/blog
• YouTube: http://youtube.com/fit4privacy
Punit Bhatia
• Website: https://www.punitbhatia.com
Books
• Be Ready for GDPR
• AI & Privacy – How to Find Balance
• Intro to GDPR
• Be an Effective DPO
What if privacy wasn't just compliance but a competitive advantage?
KEY MOMENTS
00:00 – Season Eight Kickoff
03:00 – When is the right time to start considering Privacy Compliance?
05:18 - How do you see Privacy when you are helping your clients?
07:51 - Software Design or Product Design Perspective
13:20 - “Love at First Sight” How does the book guide people in converting ideas
15:50 – Privacy in the Face of Creating Trust
18:16 – About Erin Rollenhagen and how to reach her
20:33 – AI Changing Product Builds
22:23 – Book Links and Wrap Up
As AI becomes increasingly embedded in products and services, Punit and Erin discuss the challenges and opportunities AI presents for privacy, trust, and product development. They explore responsible AI use, the importance of protecting sensitive data, and how AI can help organizations improve software development, security, and customer experience.
Whether you are a product manager, software developer, privacy professional, business leader, or entrepreneur preparing to launch a new product, this episode offers practical guidance on balancing innovation, compliance, user experience, and trust.
ABOUT THE GUEST
Erin Rollenhagen is the Founder and CEO of People-Friendly Tech and the author of Love at First Launch: A visionary’s guide to bringing extraordinary tech to life. With nearly two decades of experience guiding visionary executives, Erin has led over 200 successful technology launches spanning startups, healthcare, finance, and other highly regulated industries.
Her work has been featured in TechCrunch and Axios, earned national awards, and positioned her as a trusted partner for leaders determined to build more than just functional products. Erin’s approach centers on preserving the magic of the original vision, balancing compliance with creativity, and designing experiences that spark deep emotional connection. Whether working with C-suite innovators or fast-growth entrepreneurs, Erin helps transform bold ideas into platforms that delight users, reshape businesses, and redefine industries.
ABOUT THE HOST
Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.
Resources & Links
Guest Links
Erin Rollenhagen
• LinkedIn: https://www.linkedin.com/in/erin-rollenhagen-b4b7317/ , https://www.linkedin.com/company/people-friendly-tech/
Grow Skills (Privacy Courses & Insights)
• Courses: https://growskills.store/courses/
• Insights: https://growskills.store/insights/
• Website: https://growskills.store/
FIT4Privacy
• Website: https://www.fit4privacy.com
• Podcast: https://www.fit4privacy.com/podcast
• Blog: https://www.fit4privacy.com/blog
• YouTube: http://youtube.com/fit4privacy
Punit Bhatia
• Website: https://www.punitbhatia.com
Books
• Be Ready for GDPR
• AI & Privacy – How to Find Balance
• Intro to GDPR
• Be an Effective DPO
Privacy notices, cookie banners, and consent forms are often treated as compliance checkboxes, but do users really understand them?
In this episode of the FIT4Privacy Podcast, Punit and Erin explore how privacy, compliance, and user experience can work together to build trust. Learn why the timing of consent matters, how to present privacy information in simple and meaningful ways, and why the best privacy experiences are delivered now users need them most.
Discover practical examples of just-in-time notices, granular privacy controls, preference centers, and user-friendly communication that help organizations meet compliance requirements while creating a better customer experience.
🎧 Listen to the full conversation on YouTube, Spotify, or Apple Podcasts by searching FIT4Privacy Podcast.
Resources & Links
Guest Links
Erin Rollenhagen
• LinkedIn: https://www.linkedin.com/in/erin-rollenhagen-b4b7317/ , https://www.linkedin.com/company/people-friendly-tech/
Grow Skills (Privacy Courses & Insights)
• Courses: https://growskills.store/courses/
• Insights: https://growskills.store/insights/
• Website: https://growskills.store/
FIT4Privacy
• Website: https://www.fit4privacy.com
• Podcast: https://www.fit4privacy.com/podcast
• Blog: https://www.fit4privacy.com/blog
• YouTube: http://youtube.com/fit4privacy
Punit Bhatia
• Website: https://www.punitbhatia.com
Books
• Be Ready for GDPR
• AI & Privacy – How to Find Balance
• Intro to GDPR
• Be an Effective DPO
What is AI governance? Who is an AI governance professional? How is AI governance different from ISO/IEC 42001, privacy compliance, or the EU AI Act?
KEY MOMENTS
02:20 - How do you see this world of AI changing so fast?
5:20 - AI Governance Concept
12:20 - AI Governance Professional Definition
15:33 - Skills Framework and Roles
19:41 - Why AIGP Not Regional Like CIPP
27:37 - Why Get AIGP Certified
32:25 - How to Connect and Wrap Up
In this episode of the FIT4Privacy Podcast, host Punit Bhatia welcomes Ashley Casovan, Managing Director of the IAPP AI Governance Center, to explore the rapidly evolving world of AI governance. Ashley shares her journey from developing Canada's pioneering guidance on automated decision-making systems to leading global conversations on AI governance, professional skills, and responsible AI practices. Together, they discuss why AI governance has become a critical discipline, how organizations can manage AI risks and opportunities, and what professionals need to know to succeed in this emerging field.
Whether you're a privacy professional, compliance officer, AI practitioner, risk manager, auditor, or business leader, this episode provides valuable insights into building trustworthy, responsible, and effective AI governance programs.
🎧 Listen now to understand how organizations can turn responsible AI principles into practical governance frameworks.
ABOUT THE GUEST
As the managing director of the IAPP’s AI Governance Center, Casovan serves as the primary thought leader and public voice for the IAPP on AI governance, while providing strategic direction and contributions to the development of practical, relevant and timely content for the AIGC. Casovan will lead the AIGC engagement efforts with industry leaders, senior policy makers, regulators and international organizations to ensure AI governance is top of mind when discussing AI’s potential.
Through roles in the public sector at the municipal and federal levels, Casovan developed expertise in responsible AI, standards, policy, open government and data governance. As the former director of data and digital for the government of Canada, Casovan previously led the development of the world’s first national government policy for responsible AI.
Building from this work, Casovan served as the Executive Director of the Responsible AI Institute, a multi-stakeholder non-profit dedicated to mitigating harm from the use of AI systems, a member of OECD’s AI Policy Observatory Network of Experts, a member of the World Economic Forum's AI Governance Alliance, an Executive Board Member of the International Centre of Expertise in Montréal on Artificial Intelligence and as a member of the IFIP/IP3 Global Industry Council within the
ABOUT THE HOST
Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.
Resources & Links
Guest Links
Ashley Casovan
• LinkedIn: https://www.linkedin.com/in/ashley-casovan-b3247211/
• Website: https://iapp.org/
Grow Skills (Privacy Courses & Insights)
• Courses: https://growskills.store/courses/
• Insights: https://growskills.store/insights/
• Website: https://growskills.store/
FIT4Privacy
• Website: https://www.fit4privacy.com
• Podcast: https://www.fit4privacy.com/podcast
• Blog: https://www.fit4privacy.com/blog
• YouTube: http://youtube.com/fit4privacy
Punit Bhatia
• Website: https://www.punitbhatia.com
Books
• Be Ready for GDPR
• AI & Privacy – How to Find Balance
• Intro to GDPR
• Be an Effective DPO
AI has changed the risk landscape faster than many organizations could have anticipated. But what does that mean for privacy, cybersecurity, ethics, and compliance professionals?
In this episode of the FIT4Privacy Podcast, we explore how governance has evolved from data governance and privacy governance to the broader world of AI governance.
The conversation looks at what AI governance really means, why privacy alone is no longer enough, and how organizations can balance innovation with risks around transparency, accuracy, ethics, cybersecurity, and societal impact.
We also explore the evolution of AI governance before ChatGPT, lessons from Canada's approach to automated decision-making systems, and why organizations don't necessarily need another committee but do need a coordinated approach to managing AI risks.
Tune in for a deeper conversation on AI, privacy, ethics, and the future of responsible governance.
🎧 Catch the full episode on YouTube, Spotify, and Apple Podcasts.
Resources & Links
Guest Links
Ashley Casovan
• LinkedIn: https://www.linkedin.com/in/ashley-casovan-b3247211/
• Website: https://iapp.org/
Grow Skills (Privacy Courses & Insights)
• Courses: https://growskills.store/courses/
• Insights: https://growskills.store/insights/
• Website: https://growskills.store/
FIT4Privacy
• Website: https://www.fit4privacy.com
• Podcast: https://www.fit4privacy.com/podcast
• Blog: https://www.fit4privacy.com/blog
• YouTube: http://youtube.com/fit4privacy
Punit Bhatia
• Website: https://www.punitbhatia.com
Books
• Be Ready for GDPR
• AI & Privacy – How to Find Balance
• Intro to GDPR
• Be an Effective DPO
What happens when the CTO and CISO roles come together in one person?
KEY MOMENTS
2:14 New risks come up or amplify?
3:12Copilot Rollout Risks
6:50 How to prevent this scenario?
9:20 AI Opportunity Mindset
13:23 As a CISO CTO, how do they use AI on a regular basis?
14:50 Starting use cases of AI
18:55 What ProArch does?
21:30 Conclusion
In this episode, Punit Bhatia speaks with Ben Wilcox about balancing innovation and security in the age of AI. They explore whether AI introduces new risks or amplifies existing ones, and what organizations must consider when scaling tools like Microsoft Copilot.
The discussion highlights the importance of data governance, access controls, and proper configuration to avoid unintended privacy risks. Ben also shares practical AI use cases from productivity gains to building agents and explains how organizations can start their AI journey responsibly.
Overall, this episode offers a balanced view of AI as both an opportunity and a risk, with actionable insights for adopting it securely and effectively.
ABOUT THE GUEST
Ben Wilcox is the CISO and CTO at ProArch, where he leads cybersecurity strategy and cloud innovation for enterprise clients. With deep expertise in risk management, compliance, and AI-driven security, Ben helps organizations navigate evolving threats while building resilient, future-ready systems.
ABOUT THE HOST
Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.
Resources & Links
Guest Links
Ben Wilcox
• LinkedIn: https://www.linkedin.com/in/ben-wilcox/
• Website: https://www.proarch.com
Grow Skills (Privacy Courses & Insights)
• Courses: https://growskills.store/courses/
• Insights: https://growskills.store/insights/
• Website: https://growskills.store/
FIT4Privacy
• Website: https://www.fit4privacy.com
• Podcast: https://www.fit4privacy.com/podcast
• Blog: https://www.fit4privacy.com/blog
• YouTube: http://youtube.com/fit4privacy
Punit Bhatia
• Website: https://www.punitbhatia.com
Books
• Be Ready for GDPR
• AI & Privacy How to Find Balance
• Intro to GDPR
• Be an Effective DPO
Scaling Copilot: Hidden Risks & Data Exposure
Most organizations are adopting Microsoft Copilot as a natural extension of their existing Microsoft environment, but scaling it is not as simple as assigning licenses.
In this discussion, Punit Bhatia and Ben Wilcox explore what really happens when Copilot is introduced into environments with scattered data, unstructured information, and complex access permissions.
They highlight how AI doesn’t create new risks but makes existing ones visible and usable. Copilot can surface data based on access rights even when those permissions were never properly reviewed.
A real-world example shows how an employee unintentionally accessed a coworker’s personal improvement plan due to misconfigured permissions, turning it into a potential privacy breach.
The conversation emphasizes that successful Copilot adoption requires proper data governance, clear access controls, and mechanisms such as data classification, sensitivity labeling, and encryption.
This is not a plug-and-play exercise organization that must prepare their data before scaling AI.
🎧 To catch the full discussion, search FIT4Privacy on YouTube, Spotify, or Apple Podcasts.
Resources & Links
Guest Links
Ben Wilcox
• LinkedIn: https://www.linkedin.com/in/ben-wilcox/
• Website: https://www.proarch.com
Grow Skills (Privacy Courses & Insights)
• Courses: https://growskills.store/courses/
• Insights: https://growskills.store/insights/
• Website: https://growskills.store/
FIT4Privacy
• Website: https://www.fit4privacy.com
• Podcast: https://www.fit4privacy.com/podcast
• Blog: https://www.fit4privacy.com/blog
• YouTube: http://youtube.com/fit4privacy
Punit Bhatia
• Website: https://www.punitbhatia.com
Books
• Be Ready for GDPR
• AI & Privacy – How to Find Balance
• Intro to GDPR
• Be an Effective DPO
What if AI could monitor your compliance controls 24/7 more consistently than any team ever could?
KEY MOMENTS
1:50 What are AI agents and why should business leaders care?
5:24 Is that agent or limited capability agent?
8:13 Is that the dimension this agent can go to?
13:50 How can AI agents help?
22:30 How to handle risks when it comes to AI agents?
26:24 Dislike in the journey of entrepreneur
In this episode of the FIT4Privacy Podcast, Punit Bhatia speaks with Richa Kaul, CEO of ComplYant, to unpack what AI agents really are and what they are not. They clarify the difference between true agentic AI and simple “call-and-response” tools, and explore how AI agents are transforming governance, risk, and compliance (GRC).
This conversation goes beyond hype to offer practical, enterprise-ready insights on using AI responsibly in compliance.
👉 Listen now and rethink how AI can support smarter, continuous compliance.
ABOUT THE GUEST
Richa Kaul is the Founder and CEO of Complyance, a privacy and compliance platform that helps companies simplify data protection and regulatory requirements. A seasoned leader in data privacy and governance, Richa is known for translating complex compliance challenges into practical, scalable solutions for modern businesses.
ABOUT THE HOST
Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.
Resources & Links
Guest Links
Richa Kaul
• LinkedIn:
https://www.linkedin.com/in/richa-kaul/
https://www.linkedin.com/company/complyancehq
• Website: https://www.complyance.com/
Grow Skills (Privacy Courses & Insights)
• Courses: https://growskills.store/courses/
• Insights: https://growskills.store/insights/
• Website: https://growskills.store/
FIT4Privacy
• Website: https://www.fit4privacy.com
• Podcast: https://www.fit4privacy.com/podcast
• Blog: https://www.fit4privacy.com/blog
• YouTube: http://youtube.com/fit4privacy
Punit Bhatia
• Website: https://www.punitbhatia.com
Books
• Be Ready for GDPR
• AI & Privacy – How to Find Balance
• Intro to GDPR
• Be an Effective DPO
Real Use Cases of AI Agents
AI in compliance beyond theory.
What can AI agents really do?
In this episode from the FIT4Privacy Podcast, we move from concepts to concrete use cases highlighting how AI agents are already transforming compliance into practice. From continuous 24/7 control monitoring to automating third-party risk assessments, the shift is clear.
No more periodic checks. No more chasing vendors. Instead, organizations gain continuous oversight, deeper insights, and real risk visibility.
The conversation also highlights an important transition: compliance teams moving from operational tasks to strategic decision-making.
👉 Listen to see how AI agents are turning compliance into a proactive, continuous function.
Resources & Links
Guest Links
Richa Kaul
• LinkedIn:
https://www.linkedin.com/in/richa-kaul/
https://www.linkedin.com/company/complyancehq
• Website: https://www.complyance.com/
Grow Skills (Privacy Courses & Insights)
• Courses: https://growskills.store/courses/
• Insights: https://growskills.store/insights/
• Website: https://growskills.store/
FIT4Privacy
• Website: https://www.fit4privacy.com
• Podcast: https://www.fit4privacy.com/podcast
• Blog: https://www.fit4privacy.com/blog
• YouTube: http://youtube.com/fit4privacy
Punit Bhatia
• Website: https://www.punitbhatia.com
Books
• Be Ready for GDPR
• AI & Privacy – How to Find Balance
• Intro to GDPR
• Be an Effective DPO
What does responsible AI look like in practice? In this episode, we explore AI governance, AI risks, ethical AI, and how businesses can use artificial intelligence responsibly to create value without losing trust.
KEY MOMENTS
02:33 What is the current state of AI?
06:32 What are the biggest AI risks and threats?
11:00 How can AI become a force multiplier?
15:17 What is the Global AI Association?
18:00 How to connect with the guest
In this episode of the FIT4Privacy Podcast, host Punit Bhatia speaks with Pasquale Falconio from the Global AI Association about responsible AI, AI governance, generative AI, and the real business impact of artificial intelligence. They discuss where AI stands today, what makes AI risky, and how organizations can adopt AI in a way that is ethical, practical, and trustworthy.
You will learn why AI itself is not the problem, why governance and human oversight matter, and how AI can support people as a super-assistant instead of replacing them. If you are interested in responsible AI, AI ethics, AI regulation, digital trust, or business transformation with AI, this conversation offers practical insights you can apply immediately.
🎧 Listen now to discover how to use AI responsibly, manage AI risks, and unlock the value of artificial intelligence for business and society. If this episode helps you, subscribe to FIT4Privacy for more conversations on privacy, AI governance, and responsible innovation.
ABOUT THE GUEST
Pasquale Falconio was born in Italy and holds dual Italian and French citizenship. He currently resides in Nice, France. He holds a Master’s degree in Electronic Engineering, obtained in Rome, along with a Master’s in Innovation and a Master’s in Innovation and Entrepreneurship earned at HEC in Paris.
Over the past years, Pasquale has specialized in machine learning and generative AI. He currently works for a leading company in data management and machine learning.
His professional experience spans multiple countries, including Italy, Spain, Germany, and France, and covers a wide range of sectors such as satellite technology, media and broadcast industries and IT solutions for Life Science, in service and commercial-oriented roles.
ABOUT THE HOST
Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.
Resources & Links
Guest Links
Pasquale Falconio
• LinkedIn: https://www.linkedin.com/in/pfalconio/
Grow Skills (Privacy Courses & Insights)
• Courses: https://growskills.store/courses/
• Insights: https://growskills.store/insights/
• Website: https://growskills.store/
FIT4Privacy
• Website: https://www.fit4privacy.com
• Podcast: https://www.fit4privacy.com/podcast
• Blog: https://www.fit4privacy.com/blog
• YouTube: http://youtube.com/fit4privacy
Punit Bhatia
• Website: https://www.punitbhatia.com
Books
• Be Ready for GDPR
• AI & Privacy – How to Find Balance
• Intro to GDPR
• Be an Effective DPO
Our TOPPODCAST Picks 
