Send us Fan Mail

In this episode of The Data Diva Talks Privacy, Debbie Reynolds, “The Data Diva,” speaks with Cat Casey, Founder of The Techno Cat and Chief Legal AI Futurist at Masters AI, about the transformation of the legal profession, AI literacy, and the governance challenges created by increasingly autonomous AI systems. Cat shares her unconventional journey from philosophy into legal technology and explains how her work has focused on helping legal professionals understand complex technologies in practical, accessible ways.

The conversation explores why AI literacy is becoming an essential professional responsibility for lawyers. Cat explains that legal professionals must understand how AI tools work, where they may fail, and how they affect confidentiality, competence, supervision, and accountability. Debbie and Cat discuss how lawyers remain responsible for verifying anything they sign, submit, or rely upon, regardless of whether AI helped produce it.

The episode examines the rise of AI agents and why organizations need stronger controls as systems gain the ability to access data, make decisions, and take actions on behalf of users. Debbie and Cat discuss examples involving an AI agent deleting emails and a chatbot making a promise that created consequences for the company. These examples highlight the need for clear permissions, access controls, human intervention, and accountability.

Debbie and Cat also discuss hallucinated legal cases, inaccurate quotations, automation bias, and the risks of outsourcing professional judgment to technology. Cat emphasizes that lawyers must continue reading cases, checking citations, and verifying legal authority, even as AI tools become more sophisticated.

The conversation concludes with a discussion of why privacy professionals should be involved much earlier when organizations evaluate and implement new technologies. Cat explains that privacy, security, ethics, and governance must be considered together if organizations want to adopt AI responsibly.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC

Send us Fan Mail

Keith Weisman, Head of Forward Deployed Engineering, Jetstream Security

In this episode of The Data Diva Talks Privacy, Debbie Reynolds, The Data Diva speaks with Keith Weisman, Head of Forward Deployed Engineering at Jetstream Security, about AI governance, security, visibility, and the growing challenges organizations face as artificial intelligence becomes deeply integrated into business operations. Keith shares his engineering and security background and explains how organizations are increasingly struggling to understand where AI is being used, how it accesses data, and what governance controls are necessary to support safe and responsible adoption.

The conversation explores how AI is rapidly becoming embedded across organizations, often faster than governance programs can keep pace with. Debbie and Keith discuss the growing problem of shadow AI, where employees adopt AI tools outside approved processes and oversight structures. They examine why organizations need greater visibility into AI usage, including what tools are being used, who is using them, what data is being shared, and how AI systems interact with business processes and sensitive information.

Keith introduces Jetstream Security's framework for addressing what he describes as five critical AI trust gaps: visibility, design control, continuous monitoring and drift management, agentic identity, and trust enforcement. He explains that organizations must first understand where AI is being used and how it operates before they can effectively govern it. The framework emphasizes the importance of understanding AI system design, monitoring for changes and unexpected behavior over time, establishing accountability for AI actions, and creating safeguards that maintain trust as AI capabilities continue to evolve.

The episode also explores the rise of AI agents and non-human identities. Keith explains that organizations have traditionally managed identities for people, applications, and devices, but AI introduces a new category of actors that can make decisions, interact with systems, and perform tasks autonomously. Debbie and Keith discuss why AI agents require the same level of oversight, permissions management, monitoring, and accountability that organizations already apply to human users and other privileged identities.

Throughout the conversation, Keith shares real-world examples illustrating the risks associated with AI systems that are granted excessive access or insufficient oversight. These examples include AI systems making unauthorized changes, interacting with systems in unexpected ways, and performing actions that organizations did not anticipate. The discussion highlights the importance of applying established governance principles such as least-privilege access, monitoring, accountability, and risk management to AI-enabled environments.

Debbie and Keith also discuss the relationship between innovation and governance, emphasizing that governance should not be viewed as a barrier to innovation. Instead, effective governance provides the foundation organizations need to deploy AI responsibly and at scale. As AI systems become increasingly integrated into business operations, organizations must develop new approaches to visibility, accountability, identity management, and trust that address both human and non-human actors operating within complex digital ecosystems.

The conversation concludes with a discussion of the future of AI governance and the importance of creating frameworks that allow organizations to benefit from AI while maintaining security, privacy, compliance, and trust. Keith emphasizes that organizations that invest in visibility, accountability, and governance today will be better positioned to manage risk and realize the long-term benefits of AI adoption.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC

Send us Fan Mail

Laura Pleskatcheva, Data Privacy and AI Governance Operations

In this episode of The Data Diva Talks Privacy, Debbie Reynolds, The Data Diva speaks with Laura Pleskatcheva, a Data Privacy and AI Governance Operations professional, about the critical role privacy operations plays in helping organizations translate regulatory requirements into practical business processes. Laura shares her career journey from corporate finance into privacy, explaining how her interests in business operations, technology, compliance, and cross-functional collaboration led her to a career in privacy and AI governance.

The conversation explores the common misconception that privacy is solely a legal or compliance function. Laura explains that while legal teams focus on understanding requirements and obligations, privacy operations is responsible for implementing those requirements in a way that works across the organization. Debbie and Laura discuss the distinction between the "what" and the "how," highlighting how privacy operations serves as the bridge between policy and execution.

The episode examines the practical work involved in operationalizing privacy programs, including project management, relationship building, stakeholder engagement, and cross-functional collaboration. Laura explains that privacy professionals frequently work across legal, marketing, HR, technology, security, and business teams to ensure that privacy requirements are effectively implemented. The discussion highlights why communication, influence, and collaboration are often just as important as technical or legal knowledge.

Debbie and Laura also explore the importance of organizational culture and leadership support in building successful privacy programs. Laura emphasizes that privacy is a team sport and that executive engagement is often the key factor that determines whether privacy initiatives succeed. When leadership understands privacy risks and values trust and integrity, organizations are better positioned to integrate privacy into everyday business practices.

The conversation also addresses the rapid pace of technological change and the growing attention organizations are placing on artificial intelligence. Laura explains that while AI has become a major focus for businesses, privacy requirements and obligations have not disappeared. Organizations must continue managing privacy compliance while simultaneously developing governance frameworks for AI technologies. The discussion highlights the need for organizations to understand how personal data is used within AI systems and to educate both employees and consumers about the risks and benefits associated with emerging technologies.

The episode concludes with a discussion of third-party risk management and vendor accountability. Debbie and Laura examine the challenges organizations face when working with vendors that process personal data and discuss the importance of contracts, audits, due diligence, trust, and ongoing oversight. As organizations become increasingly interconnected through technology platforms and outsourced services, strong vendor governance practices remain a critical component of privacy and AI governance programs.

This episode is sponsored by JetStream Security. If you govern privacy or legal risk, you know the hardest AI question is who did what, with whose data, and on what authority. JetStream answers it. Every AI action, attributable to an identity. Every output, traceable to a purpose. See how at jetstream.security.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC