Life with GDPR

Welcome to a special series on Life with GDPR. Over the next five episodes, Tom Fox and Alyssa DeSimone, a legal/compliance & risk management expert with an extensive background in HR, will discuss the complex topic of a Compliance Roadmap for ADS/ADMT.

In this first episode, we break down the essentials of ADS/ADMT, focusing on who is covered, the nuances of jurisdiction, and the broader business implications of evolving employment laws. ADS is an automated decision system, and ADMT is an automated decision-making technology. Whether you are an HR professional, compliance professional, or legal eagle, this discussion will help you navigate the complexities of compliance in a changing legal landscape.

Key highlights:

• What is ADS/ADMT?
• Applies to 5+ employees (including part-time/out-of-state).
• Coverage limits for out-of-state conduct.
• Jurisdiction can reach beyond California.
• Risk mitigation tips for businesses.

Resources:

Connect with Tom Fox

• LinkedIn

Connect with Alyssa DeSimone

• LinkedIn

• Website

Life with GDPR was recently honored as a Top Data Security Podcast

Learn more about your ad choices. Visit megaphone.fm/adchoices

Welcome to a special series on Life with GDPR. Over the next five episodes, Tom Fox and Alyssa DeSimone, a legal/compliance & risk management expert, with an extensive background in HR,  will discuss the complex topic of a Compliance Roadmap for ADS/ADMT.

In this second episode, Tom Fox and Alyssa DeSimone review the opt-in and opt-out requirements introduced in the recent updates to the California Consumer Privacy Act (CCPA). They discuss what opting in and out entails, the concept of anti-retaliation in this context, and how disparate impact analysis can help regulators assess compliance. Additionally, they explore the importance of clear communication and training for HR departments on the use of AI in hiring, as well as the role of vendors in ensuring compliance. The episode wraps up with a discussion on the ambiguous term ‘significant decision making’ and its potential for litigation.

Key highlights:

• Understanding Opt-In and Opt-Out Requirements
• Anti-Retaliation Measures
• Disparate Impact Analysis
• Applicant Rights and Training
• Vendor Collaboration and Compliance
• Significant Decision Making

Resources:

Connect with Tom Fox

• LinkedIn

Connect with Alyssa DeSimone

• LinkedIn
• Website

Life with GDPR was recently honored as a Top Data Security Podcast

Learn more about your ad choices. Visit megaphone.fm/adchoices

Welcome to a special series on Life with GDPR. Over the next five episodes, Tom Fox and Alyssa DeSimone, a legal/compliance & risk management expert, with an extensive background in HR  will discusses the complex topic of a Compliance Roadmap for ADS/ADMT.

In this third episode, Tom Fox and Alyssa Simone discuss recent updates on data retention policies, training, and the implications of the California Consumer Privacy Act. They explore the necessity of retaining records for four years, methods for creating effective privacy policies, and the importance of training employees. They also highlight the role of HR in compliance training and emphasize adaptable training methods to engage different learning preferences. The episode concludes with information on how listeners can connect with Alyssa for further insights and consulting.

Key Highlights

·      Data Retention Policies

·      Policy Drafting and Implementation

·      Encouraging Employee Engagement

·      Training Strategies and Approaches

·      Compliance and HR Collaboration

 Connect with Tom Fox

• LinkedIn

Connect with Alyssa DeSimone

·      LinkedIn

·      Website

Life with GDPR was recently honored as a Top Data Security Podcast

Learn more about your ad choices. Visit megaphone.fm/adchoices

Welcome to a special series on Life with GDPR. Over the next five episodes, Tom Fox and Alyssa DeSimone, a legal/compliance & risk management expert, with an extensive background in HR  will discusses the complex topic of a Compliance Roadmap for ADS/ADMT.

In this fourth episode, Tom Fox and Alyssa DeSimone explore the complexities of managing third-party vendors under the amendments to the California Consumer Privacy Act (CCPA). They discuss the high risks associated with these vendors for HR departments and companies due to the lack of direct control. They delve into the importance of due diligence, good faith efforts, and consistent monitoring of third-party vendors to ensure compliance. Alyssa emphasizes the need for HR professionals to be more proactive in partnership with their business leaders and stakeholders. The conversation also covers the legal nuances and the importance of adopting a conservative approach to meet compliance standards, focusing on in-person due diligence to strengthen good faith efforts. Alyssa offers practical strategies and insights from her experience in HR compliance and legal obligations.

Key Highlights

·      Understanding Third Party Vendor Risks

·      HR’s Role in Vendor Due Diligence

·      Good Faith Efforts and Legal Ambiguities

·      Legal Resources and Vendor Relationships

·      Navigating Jurisdictional Challenges

Connect with Tom Fox

• LinkedIn

Connect with Alyssa DeSimone

·      LinkedIn

Life with GDPR was recently honored as a Top Data Security Podcast

Learn more about your ad choices. Visit megaphone.fm/adchoices

Welcome to a special series on Life with GDPR. Over the next five episodes, Tom Fox and Alyssa DeSimone, a legal/compliance & risk management expert, with an extensive background in HR  will discusses the complex topic of a Compliance Roadmap for ADS/ADMT. In this concluding episode 5, Tom Fox and Alyssa DeSimone discuss post-contract vendor management. 

They explore strategies for HR professionals to maintain compliance and effective relationships with vendors, covering regular follow-ups, audits, training, and legal documentation. Key highlights include jurisdictional considerations, opt-in/opt-out requirements, data retention policies, and the importance of hotlines for vendor employees. Practical advice on pre- and post-contract phases is provided to ensure thorough compliance and risk mitigation.

Key Highlights

·      Managing Vendor Relationships Post-Contract

·      The Importance of Audits in Vendor Management

·      Training and Compliance for Vendors

·      Jurisdictional Issues and Legal Considerations

·      Data Retention and Training Policies

Connect with Tom Fox

• LinkedIn

Connect with Alyssa DeSimone

·      LinkedIn

·      Website

Life with GDPR was recently honored as a Top Data Security Podcast

Learn more about your ad choices. Visit megaphone.fm/adchoices

Jonathan Armstrong remains on assignment. Today Tom visits with fellow Texan Jim LaRoe, founder of Symphion. LaRoe discusses data privacy, data protection and compliance all around printer security in one of the most interesting podcasts in these areas I have done in sometime.  

Jim provides insight into how 20-30% of network endpoints are printers, and alarmingly, 99% of these are unprotected. Printers, despite being integral to business functions, are typically left vulnerable, making them prime targets for sophisticated phishing and cyber-attacks. LaRoe shares his journey from a trial lawyer to founding Symon in 1999 and explains Symphion’s groundbreaking work in developing comprehensive security software for printers. LaRoe highlights the importance of a culture of compliance in managing endpoint security and the multifaceted challenges that come with securing printers.  LaRoe emphasizes the collaborative effort needed among GRC compliance teams, IT, and supply chain departments to effectively manage printer security, and offers actionable steps for businesses to mitigate these risks. 

Key Takeaways 

·      The Hidden Risk of Printers

·      Understanding Endpoint Security

·      Challenges in Printer Security

·      Risk Management Strategies

·      Supply Chain Vulnerabilities

 Resources 

Connect with Tom Fox

●      LinkedIn

Connect with Jim LaRoe

●      LinkedIn

Connect with Symphion

●      Website

●      LinkedIn 

The award winning Life with GDPR was recently honored as a Top Data Security Podcast  . This was a sponsored podcast.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Jonathan Armstrong remains on assignment. Today Tom visits with Adam Goslin, founder of Total Compliance Tracking, to discuss his journey from IT development and management to becoming a leader in the security and compliance sector.  

Adam shares his professional background, the challenges he faced with achieving PCI compliance, and the insights that led him to create a system to streamline compliance management. He details how his company, TCT, helps organizations manage various certifications and compliance standards efficiently. Adam also discusses the unique, direct marketing approach TCT employs and shares the philosophy behind providing accessible compliance resources. This conversation offers valuable perspectives on the importance of pragmatic, user-friendly compliance solutions. 

Key Takeaways 

·      Adam Goslin’s Professional Journey

·      Founding Total Compliance Tracking

·      Marketing Strategy and Philosophy

·      Future of TCT and Industry Insights

 Resources 

Connect with Tom Fox

●      LinkedIn

Connect with Adam Goslin

●      LinkedIn

Connect with Total Compliance Tracking

●      Website

●      LinkedIn

Life with GDPR was recently honored as a Top Data Security Podcast  

Learn more about your ad choices. Visit megaphone.fm/adchoices

Tom Fox takes a solo turn as Jonathan Armstrong is on assignment. Today, Tom visits with Inge Zwick, Executive Director, Head of Europe, and ESG Lead at Emapta Global, a global outsourcing company.

They discuss the company’s operations, with a particular focus on managing GDPR compliance within the outsourcing framework. They also discuss common misconceptions about outsourcing under the GDPR, risk assessment processes, handling data subject access requests, and integrating compliance into business operations. Zwick also shares insights into how EMAPTA collaborates with clients to ensure compliance and offers advice to business leaders on future-proofing their outsourcing strategies in light of GDPR requirements. Additionally, the discussion explores the integration of ESG initiatives within the company’s operations.

Key takeaways:

• Outsourcing and GDPR Compliance
• Risk Assessment and Data Security
• Subject Access Requests (SAR)
• Outsourcing Contracts and GDPR Obligations
• Integrating Compliance into Operations

Resources:

Connect with Tom Fox

• LinkedIn

Connect with Inge Zwick

• LinkedIn

Connect with Emapta Global

• Website
• LinkedIn

Life with GDPR was recently honored as a Top Data Security Podcast.  

Learn more about your ad choices. Visit megaphone.fm/adchoices

Tom Fox and Jonathan Armstrong, renowned cybersecurity experts, co-host the award-winning Life with GDPR. This episode explores the complex intersection of AI and recruitment, focusing on compliance challenges under GDPR and potential risks.

Jonathan highlights that AI is often more prevalent in recruitment processes than many compliance officers realize, often through third-party vendors. He discusses the regulatory landscape in the UK and EU, sharing insights on recent cases related to automated decision-making and the transparency required for such systems. Jonathan offers a seven-point plan for organizations that use or are considering using AI in recruitment, covering provider selection, due diligence, transparency obligations, and mechanisms for handling data subject requests. The conversation underscores the need for proactive engagement between data protection officers, compliance teams, and recruiters to ensure that AI tools are used responsibly and transparently.

Key takeaways:

• AI in Recruitment: An Overview
• Legal and Ethical Concerns
• Transparency and Fairness in AI Decisions
• Practical Steps for Companies
• Future of AI in Recruitment

Resources:

Connect with Tom Fox

• LinkedIn

Connect with Jonathan Armstrong

• Twitter
• LinkedIn
• PunterSouthall

Life with GDPR was recently honored as a Top Data Security Podcast.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Tom Fox and Jonathan Armstrong, renowned experts in cyber security, co-host the award-winning Life with GDPR. In this episode, they discuss Cookie Compliance Under GDPR.

Their discussion highlights the increasing enforcement actions surrounding website cookies, emphasizing that this is a data protection issue and a broader compliance challenge. Specific case studies, such as the Dutch regulator’s fine against Pool Blue and fines in other EU countries, illustrate the significant financial penalties companies can face for non-compliance. Jonathan outlines an eight-point plan to help organizations ensure their cookie practices are current, including regular checks, proper configuration of cookie banners, and transparency about data retention periods.

The episode also touches on the role of third-party cookies, potential litigation, and regulatory actions. Compliance with cookie regulations is becoming increasingly important, with groups like NOYB driving many complaints and regulatory bodies across Europe ramping up enforcement efforts. Listeners are encouraged to assess their cookie practices and make necessary adjustments to avoid fines and maintain compliance.

Key takeaways:

• The Rise of Cookie Enforcement
• Global Fines and Consequences
• Practical Compliance Tips
• Challenges with Cookie Banners
• Understanding Your Own Cookies
• Guidelines for Cookie Retention

Resources:

Connect with Tom Fox

• LinkedIn

Connect with Jonathan Armstrong

• Twitter
• LinkedIn
• PunterSouthall

Life with GDPR was recently honored as a Top Data Security Podcast.

Learn more about your ad choices. Visit megaphone.fm/adchoices