Privacy Chats with Rachel and John

Ep. 36 - Death, Taxes, and Your Data

We all know the saying: nothing is certain except death and taxes. But in today’s digital world, there’s a third certainty—data. In this episode of Privacy Chats with Rachel and John, we ask a big question: what happens to your digital footprint after you die? 💬 From personal anecdotes to platform policies, we explore: * ⚰️ The default “limbo” state of accounts on Google, Facebook, and Apple * 🛠️ Practical tools like Google’s Inactive Account Manager & Apple’s Legacy Contacts * 📜 Estate planning laws (like RUFADAA) that give loved ones digital access * 📉 The risks of doing nothing—and letting outdated Terms of Service decide for you🔑 Why password managers might be your unsung digital heirs This episode is a wake-up call (and a gentle nudge) to take action while you can. 👀 Tune in, reflect, and maybe even update your password vault. Approximate timestamps: 00:00 🎙️ Intro – Death, Taxes... and Data?   01:45 🧠 What Happens to Our Data After We Die?   04:10 👵 A Generational Shift in Digital Footprints   06:30 🗃️ Google Drive & Inactive Account Manager   10:45 📨 Setting Up a Digital Legacy with Google   13:15 📘 Facebook Memorialization & Legacy Contacts   17:40 💔 A Real Example: Remembering a Friend on Facebook   20:30 ❓ Who Can Request Memorialization (and How)?   23:20 ⚖️ The Legal Void Around Post-Mortem Data   26:00 📜 Estate Planning, RUFADAA & Digital Assets   28:40 🛠️ Tools to Prep: Password Managers & Account Access   30:15 🍏 Apple’s Legacy Contacts – Pros & Limitations   33:00 🎶 Why Digital Purchases Don’t Really Belong to You   34:50 🧩 Recap – 4 Things to Do Before You Die (Digitally)   35:45 📝 Disclaimer & Next Episode Preview  ___________________________________________________________________________________________________________________________________________________________________________________________________ While this video's content is based on our own thoughts and professional opinions, it was also made possible through the consultation of the following resources:  * Benjamin Franklin’s last great quote and the Constitution: https://constitutioncenter.org/blog/benjamin-franklins-last-great-quote-and-the-constitution [https://constitutioncenter.org/blog/benjamin-franklins-last-great-quote-and-the-constitution] * What Happens to Your Social Media Assets After You Die?: https://www.cccba.org/article/what-happens-to-your-social-media-assets-after-you-die/ [https://www.cccba.org/article/what-happens-to-your-social-media-assets-after-you-die/]Facebook Legacy Contact Settings [https://www.facebook.com/settings?tab=memorialization]: https://www.facebook.com/settings?tab=memorialization * Report a deceased person’s Facebook profile [https://www.facebook.com/help/contact/228813257197480]: https://www.facebook.com/settings?tab=memorialization

Ep. 35: Legitimate Interest, AI, and the Limits of Consent

Can "Legitimate Interest" justify using personal data to train AI models? 🤔That’s the central tension we explore in episode 35 of of Privacy Chats. What started as a follow-up to our global privacy law recap turned into a deep dive into how companies lean on legitimate interest to process personal data at scale. We explore how this legal basis stacks up against user's basic rights, what regulators like NOYB are pushing back on, and whether current rules strike the right balance in an AI-driven world.Approximate timestamps: 00:00 🎙️ Intro & Recap of Global Privacy Laws 01:30 🧠 What Is “Legitimate Interest”? 04:10 ⚖️ GDPR’s Six Legal Bases Explained 10:25 🧪 ICO’s Three-Part Test (Purpose, Necessity, Balancing) 14:00 🚗 Rachel’s Car Analogy for Legal Basis 16:00 ❌ When Legitimate Interest Doesn’t Apply 19:45 📩 NOYB’s Cease & Desist to a Major Tech Company 23:10 🤖 AI Training, Consent & the “Right to Be Forgotten” 27:20 🕵️‍♂️ Is Legitimate Interest a Catch-All for Big Tech? 30:00 💡 Should There Be a New Legal Basis for AI Innovation? 33:15 🔄 The Privacy Paradox & Balancing Rights 35:45 📝 Disclaimer____________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________ While this video's content is based on our own thoughts and professional opinions, it was also made possible through the consultation of the following resources: 1. What counts as legitimate interest?: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/legitimate-interests/what-is-the-legitimate-interests-basis/#what_counts2. noyb sends 'cease and desist' letter over AI training. European Class Action as potential next step (14 May 2025): https://noyb.eu/en/noyb-sends-meta-cease-and-desist-letter-over-ai-training-european-class-action-potential-next-step

Ep. 34 - Rest of World

In this episode of Privacy Chats, we explore the growing global momentum behind comprehensive privacy regulations.  With over 140 countries that have embraced laws inspired by the GDPR, Rachel and John zoom in on four frameworks in particular: GDPR (EU), LGPD (Brazil), APPI (Japan), and PIPA (South Korea) — highlighting how they align (and diverge) across key areas including: * Scope and extraterritorial reach * Lawful bases for processing * Data subject rights * Sensitive data definitions * DPO and DPIA requirements * Breach notification rules * Enforcement, sanctions, and international data transfers Along the way, we analyze which countries are still lagging, where U.S. state laws fit into the picture, and how global organizations can navigate compliance across borders. ________________________________________________________________________________________________________________________________ This episode was inspired by the following publications and resources: * European Commission: GDPR [https://gdpr.eu/] * https://commission.europa.eu/law/law-topic/data-protection/legal-framework-eu-data-protection_en?utm_source=chatgpt.com [https://commission.europa.eu/law/law-topic/data-protection/legal-framework-eu-data-protection_en?utm_source=chatgpt.com] * https://commission.europa.eu/law/law-topic/data-protection_en * ANPD Brazil: LGPD * https://iapp.org/media/pdf/resource_center/Brazilian_General_Data_Protection_Law.pdf * South Korea PIPC: PIPA * https://www.pipc.go.kr/eng * Japan PPC: APPI * https://www.japaneselawtranslation.go.jp/en/laws/view/2616/en

Ep. 33 - US Federal Acceleration of AI

Visual Artifacts Here [https://docs.google.com/presentation/d/1ipYCPA70Q93bpd5bkWO8O_XvLXQFAduS7_YAQloa9L8/edit?usp=sharing]! On Episode 33 of Privacy Chats, we revisit the United States’ evolving approach to AI governance, breaking down the latest policy mandates and exploring what they mean for responsible AI procurement, innovation, and public trust.And for a bit of perspective, we rewind the clock—comparing today’s AI frontier to past regulatory turning points, like the rise of the FDA. ____________________________________________________________________________________________________________________________________________________________________________________ This episode was informed by the following publications: - https://learn.g2.com/eu-ai-continent-action-plan - https://www.whitehouse.gov/presidential-actions/2025/01/removing-barriers-to-american-leadership-in-artificial-intelligence/ - https://www.federalregister.gov/documents/2023/11/01/2023-24283/safe-secure-and-trustworthy-development-and-use-of-artificial-intelligence - https://www.theverge.com/2025/1/21/24348504/donald-trump-ai-safety-executive-order-rescind

Episode 32: Europe’s AI Optimism, the Fall of 23andMe, and ChatGPT’s New Memory Feature

This is a 3-part episode, so see below for the time-stamps discussing each topic: 🇪🇺 Europe’s AI Ambitions: 00:00-25:00 The EU is stepping up with new announcements aimed at accelerating its AI strategy. But is it too late to compete with the US and China, and how might this shape their positioning as key global privacy regulators? We unpack the optimism, the funding, and the political will behind Europe's AI push. 🧬 23andMe’s Identity Crisis: 25:00-40:50 Once a pioneer in consumer genomics, 23andMe is now navigating a very public privacy backlash and a Chapter 11 bankruptcy. We explore what went wrong—and what it signals about trust in data-driven health companies. 🧠 Chat Memory Is Here: 40:50-55:44 OpenAI just launched a game-changing “memory” feature that remembers your preferences and builds continuity across chats. Helpful or a little too close for comfort? We dive into the privacy implications and use cases. ________________________________________________________________________________________________________________________________________________________________ This episode was informed by the following publications:  Europe’s AI Optimism:  * European Commission's latest AI initiatives look to drive competitiveness, broader integration: https://iapp.org/news/a/european-commission-s-latest-ai-initiatives-look-to-drive-competitiveness-broader-integration [https://iapp.org/news/a/european-commission-s-latest-ai-initiatives-look-to-drive-competitiveness-broader-integration] * Shaping Europe’s leadership in artificial intelligence with the AI continent action plan: https://commission.europa.eu/topics/eu-competitiveness/ai-continent_en [https://commission.europa.eu/topics/eu-competitiveness/ai-continent_en] * GDPR Simplification (LinkedIn post written by Stephan Geering): https://www.linkedin.com/pulse/gdpr-simplification-wish-list-stephan-geering-lnbge?utm_source=chatgpt.com [https://www.linkedin.com/pulse/gdpr-simplification-wish-list-stephan-geering-lnbge?utm_source=chatgpt.com] 23andMe:  * Congress has questions about 23andMe bankruptcy: https://techcrunch.com/2025/04/19/congress-has-questions-about-23andme-bankruptcy/?utm_source=chatgpt.com [https://techcrunch.com/2025/04/19/congress-has-questions-about-23andme-bankruptcy/?utm_source=chatgpt.com] * How 23andMe's bankruptcy led to a run on the gene bank: https://www.npr.org/2025/04/25/1247139353/23andme-data-genome-bankruptcy-privacy-customer-data?utm_source=chatgpt.com [https://www.npr.org/2025/04/25/1247139353/23andme-data-genome-bankruptcy-privacy-customer-data?utm_source=chatgpt.com] * What will happen to your 23andMe data — and can you delete it?: https://www.thetimes.com/us/news-today/article/what-happen-23andme-data-how-delete-tfjn5lfmx?utm_source=chatgpt.com®ion=global [https://www.thetimes.com/us/news-today/article/what-happen-23andme-data-how-delete-tfjn5lfmx?utm_source=chatgpt.com®ion=global] ChatGPT Memory Updates:  * ChatGPT can now remember and reference all your previous chats (Ars Technica [https://arstechnica.com/ai/2025/04/chatgpt-can-now-remember-and-reference-all-your-previous-chats/]): https://arstechnica.com/ai/2025/04/chatgpt-can-now-remember-and-reference-all-your-previous-chats/ [https://arstechnica.com/ai/2025/04/chatgpt-can-now-remember-and-reference-all-your-previous-chats/] * Memory FAQ - OpenAI: https://help.openai.com/en/articles/8590148-memory-faq [https://help.openai.com/en/articles/8590148-memory-faq]