S2E25: "Anonymization & Deletion at Scale" with Engin Bozdag (Uber) & Stefano Bennati (HERE)

The Shifting Privacy Left Podcast

This week, we're chatting with Engin Bozdag, Senior Staff Privacy Architect at Uber, and Stefano Bennati, Privacy Engineer at HERE Technologies. Today, we explore their recent IWPE'23 talk, "Can Location Data Truly be Anonymized: a risk-based approach to location data anonymization" and discuss the technical & business challenges to obtain anonymization. We also discuss the role of Privacy Engineers, how to choose a career path, and the importance of embedding privacy into product development & DevPrivOps; collaborating with cross-functional teams; & staying up-to-date with emerging trends.

Topics Covered:

• Common roadblocks privacy engineers face with anonymization techniques & how to overcome them
• How to get budgets for anonymization tools; challenges with scaling & regulatory requirements & how to overcome them
• What it means to be a 'Privacy Engineer' today; good career paths; and necessary skill sets
• How third-party data deletion tools can be integrated into a company's distributed architecture
• What Privacy Engineers should understand about vendor privacy requirements for LLMs before bringing them into their orgs
• The need to monitor code changes in data or source code via code scanning; how HERE Technologies uses Privado to monitor the compliance of its products & data lineage; and how Privado detects new assets added to your inventory & any new API endpoints
• Advice on how to deal with conflicts between engineering, legal & operations teams and hon how to get privacy issues fixed within an org
• Strategies for addressing privacy issues within orgs, including collaboration, transparency, and continuous refinement

Resources Mentioned:

• IAPP Defining Privacy Engineering Infographic
• EU AI Act
• Ethics Guidelines for Trustworthy AI
• Privacy Engineering Superheroes
• FTC Investigates OpenAI over Data Leak and ChatGPT’s Inaccuracy

Guest Info:

• Follow Engin
• Follow Stefano

Send us a Text Message.

Privado.ai
Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
Shifting Privacy Left Media
Where privacy engineers gather, share, & learn
Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
Copyright © 2022 - 2024 Principled LLC. All rights reserved.

Chapters

1. S2E25: "Anonymization & Deletion at Scale" with Engin Bozdag (Uber) & Stefano Bennati (HERE) (00:00:00)

2. Introducing Engin Bozdag (Uber) &. Stefano Benatti (00:02:25)

3. Engin & Stefano describe their recent talk, "Can location data truly be anonymized: a risk-based approach to location data anonymization" and describe some of the technical & business challenges in obtaining anonymization (00:04:27)

4. Roadblocks when it comes to deploying anonymization techniques & how to overcome them (00:11:38)

5. How to get budgets for anonymization tools; some of the challenges with scaling & regulatory requirements & how you can overcome them (00:16:24)

6. What it means to be a 'Privacy Engineer' today (00:18:49)

7. How third-party data deletion tools can be integrated into a company's distributed architecture (00:24:38)

8. Stefano & Engin describe good career paths / skill sets for becoming a Privacy Engineer (00:28:16)

9. What Privacy Engineers should understand about vendor privacy requirements for LLMs if they're bringing that into their organization (00:32:31)

10. Engin recommends reading the FTC's Demand Letter to OpenAI (00:37:23)

11. The need to monitor code changes in data or source code via code scanning; how HERE Technologies uses Privado to monitor the compliance of its products & data lineage; and how Privado detects new assets added to your inventory & any new API endpoints (00:37:54)

12. Advice on how to deal with conflicts between engineering, legal & operations teams (00:41:11)

13. Advice on how to get privacy issues fixed in an organization (00:43:57)

14. Stefano's advice to Privacy Engineers: message for my fellow Privacy Engineers: "Do not overlook the less technical aspects of the work, as they constitute the foundation of privacy-by-design" (00:47:04)

15. Engin's advice to Privacy Engineers: "You should really have some passion for privacy in order to sustain in this field." (00:48:05)