The Privacy Insider: Conversations on Data Privacy & AI, Compliance & GDPR

Nir Rothenberg [https://www.linkedin.com/in/nir-rothenberg-5a6b48ba/], Chief Information Security Officer of Rapyd [https://www.linkedin.com/company/rapydpayments/], joins us to discuss why building resilient privacy and security frameworks is critical now as fintech companies face heightened scrutiny. With Rapyd expanding globally and navigating rapid acquisitions, Nir shares why a pragmatic approach to compliance and risk management is crucial in an era where privacy regulations are tightening and cyber threats are growing more complex. Key Takeaways: 00:00 Introduction. 01:54 Building security programs that scale across global regulations. 05:01 Collaborating with legal and compliance teams to strengthen frameworks. 12:57 Maintaining resilience and avoiding burnout in fast-paced roles. 20:55 Consistent system updates significantly strengthen security. 32:24 Problems and lessons from insider risks. 49:55 Balancing data minimization with effective monitoring and logging. 54:31 Applying cybersecurity expertise to strengthen privacy initiatives. 57:37 Opportunities in the growth of payment fields. Resources Mentioned: Nir Rothenberg [https://www.linkedin.com/in/nir-rothenberg-5a6b48ba/] https://www.linkedin.com/in/nir-rothenberg-5a6b48ba/ Rapyd [https://www.linkedin.com/company/rapydpayments/] | LinkedIn https://www.linkedin.com/company/rapydpayments/ Rapyd [https://www.rapyd.net/] | Website https://www.rapyd.net/ Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode.  For more information, visit osano.com #DataPrivacy #InformationSecurity #GDPRCompliance #CISO

Privacy has entered a new era. AI-generated content, ubiquitous surveillance, and unchecked data collection have created a landscape where individuals are constantly tracked but rarely informed. As digital tools outpace policy and public awareness, the need for accessible privacy education has never been greater. University Distinguished Professor France Bélanger [https://www.linkedin.com/in/france-belanger/] and Professor of Practice Donna Wertalik [https://www.linkedin.com/in/donnawertalik/], both of Virginia Tech [https://www.linkedin.com/school/virginia-tech/], are meeting this moment with a blend of academic depth and public communication. Through their joint initiative, Voices of Privacy [https://www.linkedin.com/showcase/voices-of-privacy/], they translate decades of research and marketing insight into practical guidance for navigating the digital world. In this conversation, they discuss behavioral patterns, generational attitudes, flawed policy execution, and how building privacy habits early can shift the culture from passive acceptance to informed control. Key Takeaways: (05:10) Meaningful projects often begin with shared values and a simple idea. (07:20) Remote work was an early signal of evolving surveillance norms. (10:12) Advocacy in communication and branding can drive awareness around digital harm. (17:45) Data is constantly collected, and informed choices are essential. (23:39) Building privacy awareness requires relatable examples and early habit formation. (28:11) Early education is crucial to shifting how privacy is understood. (44:49) Strong policies can fall short without thoughtful implementation. (51:42) Even experts face trade-offs when balancing convenience and privacy. Resources Mentioned: France Bélanger [https://www.linkedin.com/in/france-belanger/] | LinkedIn [https://www.linkedin.com/in/france-belanger/] - https://www.linkedin.com/in/france-belanger/ Donna Wertalik [https://www.linkedin.com/in/donnawertalik/] | LinkedIn [https://www.linkedin.com/in/donnawertalik/] - https://www.linkedin.com/in/donnawertalik/ Virginia Tech [https://www.linkedin.com/school/virginia-tech/] | LinkedIn [https://www.linkedin.com/school/virginia-tech/] - https://www.linkedin.com/school/virginia-tech/ Voices of Privacy [https://www.linkedin.com/showcase/voices-of-privacy/] | LinkedIn [https://www.linkedin.com/showcase/voices-of-privacy/] - https://www.linkedin.com/showcase/voices-of-privacy/ Voices of Privacy | Website [https://voices-of-privacy.webflow.io] - https://voices-of-privacy.webflow.io/ Virginia Tech I Website [http://www.vt.edu] - http://www.vt.edu/ General Data Protection Regulation (GDPR) [https://gdpr-info.eu/] - https://gdpr-info.eu/ Children's Online Privacy Protection Act (COPPA) [https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa] - https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa Dove Real Beauty Campaign [https://www.dove.com/us/en/campaigns/purpose/real-beauty-pledge.html] - https://www.dove.com/us/en/campaigns/purpose/real-beauty-pledge.html Roblox [https://www.roblox.com/] - https://www.roblox.com/ Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode.  For more information, visit osano.com #DataPrivacy #InformationSecurity #GDPRCompliance #CISO

Revenge porn. Doxxing. Online harassment. All of these privacy violations go beyond just inconvenience or loss of money. They result in real emotional and sometimes physical harm for the victim. Until President Trump signed into law the “TAKE IT DOWN” Act in May 2025, legal protections were  fragmented and outdated. How do you fight a virtual attacker? And how do you bring one to justice? Though laws are catching up, the gap between harm and remedy has never been wider, making it critical to rethink how privacy and safety are protected today. Carrie Goldberg [https://www.linkedin.com/in/carrie-goldberg-04511a6/], Victims’ Rights Activist/Founding Attorney of C.A. Goldberg, PLLC [https://www.linkedin.com/company/c-a-goldberg-pllc/], draws on her extensive litigation against tech companies and abusers, as well as personal experience, in this episode. She brings sharp insights into how the legal system is adapting — and where it continues to fall short. Her work offers a timely perspective for businesses navigating privacy, risk, and digital harm in an increasingly volatile landscape. Key Takeaways: (04:12) Building a legal career rooted in advocacy and reparations work. (18:30) Identifying legal gaps in protecting victims of digital abuse. (22:54) Using litigation as a tool to drive systemic change. (29:10) Addressing privacy violations in the workplace environment. (34:54) Understanding the risks of employer negligence in employee safety. (43:45) Recognizing emerging threats like sextortion and deepfake technology. (49:25) Examining long-term impacts of online harassment on victims. (53:47) Noting improvements in tech platform policies while acknowledging persistent risks. (01:01:50) Achieving significant outcomes through persistent litigation efforts. Resources Mentioned: Carrie Goldberg [https://www.linkedin.com/in/carrie-goldberg-04511a6/] https://www.linkedin.com/in/carrie-goldberg-04511a6/ C.A. Goldberg, PLLC [https://www.linkedin.com/company/c-a-goldberg-pllc/] | LinkedIn https://www.linkedin.com/company/c-a-goldberg-pllc/ C.A. Goldberg, PLLC [https://www.cagoldberglaw.com/] | Website https://www.cagoldberglaw.com/ “Nobody’s Victim” by Carrie Goldberg [https://www.amazon.com/Nobodys-Victim-Fighting-Psychos-Stalkers/dp/052553377X] https://www.amazon.com/Nobodys-Victim-Fighting-Psychos-Stalkers/dp/052553377X Omegle [https://omegle.life/] https://omegle.life/ Section 230 Overview [https://www.congress.gov/crs-product/R46751] https://www.congress.gov/crs-product/R46751 Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode.  For more information, visit osano.com. #DataPrivacy #InformationSecurity #GDPRCompliance #CISO

As questions of trust, surveillance, and data sovereignty become central to global trade, businesses face mounting pressure to prove not just compliance but true accountability. That’s why we turned to Constantine Karbaliotis [https://www.linkedin.com/in/karbaliotis/], Counsel of nNovation LLP [https://www.linkedin.com/company/nnovation-llp/]. His career spans privacy law, international trade, and corporate governance. Constantine’s global perspective and hands-on experience with cross-border data flows make him the right voice for this moment. With new international regulations, collapsing frameworks, and the rising costs of poor data governance, the stakes are high and urgent. Key Takeaways: (04:57) Humor can be an effective tool for communicating complex compliance messages. (11:05) Career paths in privacy often emerge from multidisciplinary backgrounds. (20:11) Data is becoming the central driver of economic and political power. (27:10) Fixed laws struggle with rapid change, but adaptable rules offer a sustainable solution. (30:51) Privacy compliance is increasingly tied to business growth and market access. (38:21) Poor data governance creates long-term organizational risk. (42:47) Enforcement and litigation often reveal underlying retention failures. (47:33) Boards and executives are being held more accountable for information management. (52:56) Restoring global trust will require renewed commitment to transparency and legal cooperation. Resources Mentioned: Constantine Karbaliotis [https://www.linkedin.com/in/karbaliotis/] https://www.linkedin.com/in/karbaliotis/ nNovation LLP [https://www.linkedin.com/company/nnovation-llp/] | LinkedIn https://www.linkedin.com/company/nnovation-llp/ nNovation LLP [https://www.nnovation.com] | Website https://www.nnovation.com OECD Privacy Guidelines [https://www.oecd.org/en/topics/policy-issues/privacy-and-data-protection.html] https://www.oecd.org/en/topics/policy-issues/privacy-and-data-protection.html EU-US Data Privacy Framework [https://www.dataprivacyframework.gov/Program-Overview] https://www.dataprivacyframework.gov/Program-Overview ARMA Metro New York [https://www.armanyc.org/] https://www.armanyc.org/ Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode.  For more information, visit osano.com #DataPrivacy #InformationSecurity #GDPRCompliance #CISO

As we navigate the complex landscape of technology and its impact on society, considering how our digital interactions shape our identities and communities is crucial. The shift towards virtual third spaces — like social media and online platforms — has transformed how we connect and share personal data. This evolution raises important questions about privacy, community building and the future of human interaction. Christine Rosen, Fellow of The American Enterprise Institute [https://www.linkedin.com/company/american-enterprise-institute/], explores these themes in her work. With a background in American history, society, and culture, Christine offers unique insights into how technology influences human behavior. Key Takeaways: (07:37) Technology makes things easier but not always better. (10:08) Rapid technological adoption challenges societal adaptation. (13:41) We've traded deep, messy human experiences for convenience — and barely noticed. (16:44) Traditional skills are being lost due to technological advancements. (20:34) Concerns about technology replacing human connections. (28:45) Technology influences identity formation in young people. (40:07) Reviving face-to-face interactions is crucial for well-being. (53.48) The need for new community spaces in a digital world. (56:07) When no one can explain how a system works, people turn to stories that pretend to. Resources Mentioned: Christine Rosen [https://www.linkedin.com/company/american-enterprise-institute/] https://www.linkedin.com/company/american-enterprise-institute/ The American Enterprise Institute [https://www.linkedin.com/company/american-enterprise-institute/] | LinkedIn https://www.linkedin.com/company/american-enterprise-institute/ American Enterprise Institute [http://www.aei.org] | Website http://www.aei.org The Extinction of Experience by Christine Rosen [https://www.amazon.com/Extinction-Experience-Being-Human-Disembodied/dp/0393241718] https://www.amazon.com/Extinction-Experience-Being-Human-Disembodied/dp/0393241718 The New Atlantis [https://www.thenewatlantis.com/] https://www.thenewatlantis.com/ Thank you for listening to “The Privacy Insider” podcast. Be sure to leave us a review and subscribe so you don’t miss an episode.  For more information, visit osano.com #DataPrivacy #InformationSecurity #GDPRCompliance #CISO