Send us Fan Mail

Andor Demarteau, Founder and Owner, Shamrock Information Security

In this episode of The Data Diva Talks Privacy, Debbie Reynolds, The Data Diva speaks with Andor Demarteau, Founder and Owner of Shamrock Information Security, about European data protection, information security, artificial intelligence, encryption, and the growing tension between innovation and fundamental rights. Andor shares his professional background and discusses the history of European privacy protections, from early human rights frameworks and Convention 108 to the GDPR and the expanding collection of European technology laws.

The conversation explores the difference between passing regulations and enforcing them effectively. Andor explains why large financial penalties may become little more than a cost of doing business for major technology companies. Debbie and Andor discuss how enforcement that directly affects a company’s operating model can create more meaningful change than fines alone.

The episode examines the data hunger of artificial intelligence systems and the risks created when models ingest large volumes of information from businesses, artists, employees, and individuals. Debbie and Andor discuss data scraping, model manipulation, prompt injection, hidden instructions placed within documents, and the importance of protecting organizational information from systems actively searching for accessible data.

Debbie and Andor also examine the differences between the GDPR and the EU AI Act. They discuss the EU AI Act’s risk-based approach, its focus on potential harm, and the confusion created as portions of the law take effect while European policymakers simultaneously consider efforts to simplify or change technology regulation. The conversation highlights risks associated with AI use in recruitment, emotional monitoring, surveillance, and automated decision-making.

The discussion also addresses proposals to weaken encryption, connect online activity to government identity, and introduce systems that could eliminate meaningful anonymity. Andor explains why universal access keys create security risks and why encryption remains essential to online communication and digital safety. The episode concludes with a discussion of human behavior, data minimization, secure software development, and why collecting less information remains one of the strongest ways to reduce privacy and security risk.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC

Send us Fan Mail

Naureen Hussain, Founder, Luminate Advisers Limited (United Kingdom)

In this episode of The Data Diva Talks Privacy, Debbie Reynolds, “The Data Diva,” speaks with Naureen Hussain, Founder of Luminate Advisers Limited in the United Kingdom, about the evolving role of privacy leaders, digital transformation, AI governance, and the importance of moving from gatekeeper to coach. Naureen shares her career journey from employment law into privacy, data protection, and digital transformation, explaining how curiosity and a willingness to raise her hand created new opportunities throughout her career.

The conversation explores how privacy professionals can become more effective by helping business teams understand how to achieve responsible outcomes rather than simply explaining legal requirements. Naureen discusses the importance of building trust, developing relationships, and helping stakeholders evaluate practical options and trade-offs.

Debbie and Naureen examine the growing pressure on privacy teams as organizations accelerate digital initiatives and AI adoption. They discuss why privacy, data governance, security, architecture, legal, ethics, and business strategy can no longer operate in isolation and why privacy leaders must build strong networks across the organization.

Naureen introduces the idea of moving from parent-child workplace dynamics toward adult-to-adult conversations. She explains that privacy leaders should clearly present risks, benefits, and consequences while allowing accountable business leaders to own the final decision. The discussion also highlights the need for risk-based approaches, clear guardrails, and practical escalation processes.

The conversation concludes with a discussion of human agency, human rights, workforce transformation, and the role privacy professionals can play in responsible AI adoption. Naureen encourages privacy leaders to move beyond box-ticking, reconnect privacy to its human impact, and engage earlier with business, technology, and Human Resources leaders.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC

Send us Fan Mail

In this episode of The Data Diva Talks Privacy, Debbie Reynolds, “The Data Diva,” speaks with Cat Casey, Founder of The Techno Cat and Chief Legal AI Futurist at Masters AI, about the transformation of the legal profession, AI literacy, and the governance challenges created by increasingly autonomous AI systems. Cat shares her unconventional journey from philosophy into legal technology and explains how her work has focused on helping legal professionals understand complex technologies in practical, accessible ways.

The conversation explores why AI literacy is becoming an essential professional responsibility for lawyers. Cat explains that legal professionals must understand how AI tools work, where they may fail, and how they affect confidentiality, competence, supervision, and accountability. Debbie and Cat discuss how lawyers remain responsible for verifying anything they sign, submit, or rely upon, regardless of whether AI helped produce it.

The episode examines the rise of AI agents and why organizations need stronger controls as systems gain the ability to access data, make decisions, and take actions on behalf of users. Debbie and Cat discuss examples involving an AI agent deleting emails and a chatbot making a promise that created consequences for the company. These examples highlight the need for clear permissions, access controls, human intervention, and accountability.

Debbie and Cat also discuss hallucinated legal cases, inaccurate quotations, automation bias, and the risks of outsourcing professional judgment to technology. Cat emphasizes that lawyers must continue reading cases, checking citations, and verifying legal authority, even as AI tools become more sophisticated.

The conversation concludes with a discussion of why privacy professionals should be involved much earlier when organizations evaluate and implement new technologies. Cat explains that privacy, security, ethics, and governance must be considered together if organizations want to adopt AI responsibly.

By popular demand, Debbie Reynolds Consulting is now offering executive briefings on emerging data privacy risks and how companies can avoid them. To learn more, visit the Executive briefings page on my website.

Support the show

Join Data Diva Confidential for exclusive email content featuring practical guidance, expert analysis, and strategic insights on data privacy, AI governance, cybersecurity, and emerging technology, delivered directly to your inbox. Subscribe at https://www.debbiereynoldsadvisory.com/datadivaconfidential

Debbie Reynolds Consulting, LLC