S2E6: 'Privacy Left Trust' with Gary LaFever (Anonos)

The Shifting Privacy Left Podcast

Today, I welcome Gary LaFever, co-CEO & GC at Anonos; WEF Global Innovator; and a solutions-oriented futurist with a computer science and legal background. Gary has over 35 years of technical, legal and policy experience that enables him to approach issues from multiple perspectives. I last saw Gary when we shared the stage at a RegTech conference in London six years ago, and it was a pleasure to speak with him again to discuss how the Schrems II decision coupled with the increasing prevalence of data breaches and ransomware attacks have shifted privacy left from optional to mandatory, necessitating a "privacy left trust" approach.
---------
Thank you to our sponsor, Privado, the developer-friendly privacy platform
---------
Gary describes the 7 Universal Data Use Cases with relatable examples and how they are applicable across orgs and industries, regardless of jurisdiction. We then dive into what Gary is seeing in the market in regard to the use cases. He then reveals the 3 Main Data Use Obstacles to accomplishing these use cases and how to overcome them with "statutory pseudonymization" and "synthetic data."

In this conversation that evaluates how we can do business in a de-risked environment, we discuss why you can't approach privacy with just words - contracts, policies, and treaties; why it's essential to protect data in use; and how you can embed technical controls that move with data for protection that meets regulatory thresholds while "in use" to unlock additional data use cases. I.e., these effective controls equate to competitive advantage.
Topics Covered:

• Why trust must be updated to be technologically enforced - "privacy left trust"
• The increasing prevalence of data breaches and ransomware attacks and how they have shifted privacy left from optional to mandatory
• 7 Data Use Cases, 3 Data Use Obstacles, and deployable technologies to unlock new data use cases
• How the market is adopting technology for the 7 use cases and trends that Gary is seeing
• What it means to "de-risk" data
• Beneficial uses of "variant twins" technology
• Building privacy in by design, so it increases revenue generation
• "Statutory pseudonymization" and how it will help you reduce data privacy risks while increasing utility and value

Resources Mentioned:

• Learn about Anonos
• Read: "Technical Controls that Protect Data When in Use and Prevent Misuse"

Guest Info:

• Follow Gary on LinkedIn
• Follow Gary on Twitter

Send us a text

Privado.ai
Privacy assurance at the speed of product development. Get instant visibility w/ privacy code scans.
Shifting Privacy Left Media
Where privacy engineers gather, share, & learn
Buzzsprout - Launch your podcast
Disclaimer: This post contains affiliate links. If you make a purchase, I may receive a commission at no extra cost to you.
Copyright © 2022 - 2024 Principled LLC. All rights reserved.

Chapters

1. S2E6: 'Privacy Left Trust' with Gary LaFever (Anonos) (00:00:00)

2. Introducing Gary LaFever (00:01:15)

3. Gary opines on what "Shifting Privacy Left" means to him (00:03:30)

4. Why Gary believes the Schrems II decision and the increasing prevalence of data breaches and ransomware attacks have shifted privacy left from optional to mandatory (00:04:09)

5. Why trust must be updated to be technologically enforced (00:08:12)

6. Introducing the seven universal data use cases (00:10:16)

7. 1) Using Data for Application Development & Testing (00:11:14)

8. 2) Internal Data Sharing across Business Boundaries (00:13:11)

9. 3) Using Data for Analytics, ML & AI Model Building (00:15:23)

10. 4) Using Data to Generate Inferences & Predictions (using AI & ML models in production) (00:17:02)

11. 5) Sharing Data with a 3rd Party Service Provider (00:19:42)

12. 6) Sharing Data with 3rd Parties for Monetizations (00:24:40)

13. 7) Using Data for Enrichment (inbound, outbound, or bi-directional) (00:29:11)

14. Gary's assessment as to how the market is adopting technology for the 7 use cases (00:31:56)

15. Debra & Gary share views on what it means to "de-risk" data (00:35:19)

16. Data Use Obstacle 1: Data must be protected when in use / Gary unpacks what he means by "statutory pseudonymization" (00:40:03)

17. Data Use Obstacle 2: Data is too sparsed or biased (00:46:33)

18. Data Use Obstacle 3: Satisfying regulatory requirements for lawful international transfer and surveillance-proof processing (00:51:18)

19. Gary discusses the use of "variant twins" (00:52:56)

20. Gary discusses how technologically enforced privacy can make it easier to achieve "proportionality" goals under GDPR / Schrems II (00:54:47)