Best Ccpa Podcasts (2026)

1
2025 - oh how we loved thee! 31:33

Play Pause

6d ago31:33

31:33

Send us a text Join your hosts on this week of Serious Privacy, Paul Breitbarth, Ralph O’Brien, and Dr. K Royal as they close out 2025 with favorite moments and episodes, state law review, and predictions. And of course, a little bit about EU data protection. We'll be back January 28, global privacy / data protection day! If you have comments or qu…

1
Optimism and AI in the same sentence?! 41:20

11d ago41:20

41:20

Send us a text On this week of Serious Privacy, Ralph O’Brien, and Dr. K Royal connect with Charlie Silver of permission.io to discuss data ownership and trackable permission for online data. Of course, while Paul Breitbarth is out, Raph and K cannot help but challenge some of the positions - revoking #consent, #democracy, and #optimism. Somehow, w…

1
Arc-ing into the New Year! 41:32

20d ago41:32

41:32

Send us a text On this week of Serious Privacy, Paul Breitbarth, Ralph O’Brien, and Dr. K Royal connect with Val Ilchenko, Eric Sendelbach, and Ian Runyon of TrustArc to discuss the launch of the Arc. Join us as we discuss the factors that went into developing the Arc, challenges for privacy and data protection professionals, and how AI is baked in…

1
A rip roaring week in privacy with Paul and K 33:46

27d ago33:46

33:46

Send us a text Join us for a rip-roaring week in privacy on this episode of Serious Privacy, where co-hosts Paul Breitbarth and Dr. K Royal (Ralph O'Brien is off this week) cover quality, not quantity - although there is no shortage of current events. If you have comments or questions, find us on LinkedIn and Instagram @seriousprivacy, and on BlueS…

1
The Indian Digital Personal Data Protection Act 2023 1:03:34

27d ago1:03:34

1:03:34

Send us a text The Indian Digital Personal Data Protection Act 2023 is a concise, practical podcast that explains India’s new privacy law and its practical implications. From an introduction to data protection and the historical context behind the Act to clear breakdowns of key DPDP provisions, children’s data rules, cross-border transfers, and enf…

1
An Open Letter from Open Rights Group 35:04

1M ago35:04

35:04

Send us a text On this episode of Serious Privacy, Ralph O'Brien and Dr. K Royal (while Paul Breitbarth is out) connect with Mariano delli Santi of Open Rights Group - a civil society pressure group - regarding an open letter to the UK department of Science Innovation and Technology (DSIT), signed by over 70 organisations and individuals, regarding…

1
Tea Time with Teresa - what do do if you are CPO? 33:38

1M ago33:38

33:38

Send us a text On this episode of Serious Privacy, Paul Breitbarth and Dr. K Royal (while Ralph O'Brien is out) connect with a long-time friend and colleague Teresa Troester-Falk. The topics are broad, but mainly center around her new book "So you got the Privacy Officer Title - Now what?" (amazon link) which has gained quite the popularity among p…

1
Conversation with ESRB on tackling today’s Top Web & App Privacy Risks 1:00:13

2M ago1:00:13

1:00:13

Send us a text Get an inside look at how ESRB’s Privacy Certified program uncovers hidden web & app privacy risks like GPC failures, sensitive data collection, misleading banners, misconfigured SDKs, and children’s data violations. In this conversation, Stacy Feuer (SVP, ESRB Privacy Certified) and Vaibhav Antil (CEO, Privado AI) break down: - The …

1
We do Redo - what's happening with GDPR? [Live from Privacy Space] 34:02

2M ago34:02

34:02

Send us a text On this episode of the award-winning Serious Privacy, Paul Breitbarth, Ralph O'Brien, and Dr. K Royal bring you an analysis of the leaked GDPR revisions recorded live at the award-winning Privacy Space in the UK. Tune in to hear what might be happening. If you have comments or questions, find us on LinkedIn and Instagram @seriouspriv…

1
Getting Ahead of CCPA Enforcement: Audits, Opt Outs, & Risk Assessments 1:01:31

2M ago1:01:31

1:01:31

Send us a text In this session, privacy attorney Josh Hansen (Shook, Hardy & Bacon L.L.P.) breaks down what’s happening inside active CPPA reviews right now and why most privacy programs are planning for yesterday’s risks. In the last 60 days alone, regulators have launched: • Multi-state GPC + opt-out signal sweeps • New cybersecurity audit, risk …

1
If it ain't California, it's Texas 38:48

2M ago38:48

38:48

Send us a text In this episode of Serious Privacy, Ralph O'Brien and Dr. K Royal discuss the weekly news, including the Google settlement in Texas, ClearviewAI and much more. If you have comments or questions, find us on LinkedIn and Instagram @seriousprivacy, and on BlueSky under @seriousprivacy.eu, @europaulb.seriousprivacy.eu, @heartofprivacy.bs…

1
A week in Privacy with Paul and Ralph 36:49

2M ago36:49

36:49

Send us a text Join us on this episode of Serious Privacy, as Paul Breitbarth and Ralph O'Brien present the breaking news and hot events in data protection and privacy while Dr. K Royal was out this week. Tune in for a great discussion and catch up! If you have comments or questions, find us on LinkedIn and Instagram @seriousprivacy, and on BlueSky…

1
Vanessa Vakharia — From Failing Math to becoming The Math Guru, a Rock Star, and a Mission to Heal Math Trauma 39:46

2M ago39:46

39:46

In this episode of Forks, we sit down with Vanessa Vakharia, founder of The Math Guru, bestselling author of Math Hacks and Math Therapy, and frontwoman of the indie rock band Goodnight Sunrise. After failing math twice in high school, Vanessa was convinced she “just wasn’t a math person.” Years later, she’s built a movement around proving that bel…

1
The Tash Dash: a mini marathon on data protection 42:55

2M ago42:55

42:55

Send us a text On this week of Serious Privacy, Dr. K Royal connects with Tash Whitaker to cover all things top of mind in data protection. Paul Breitbarth and Ralph O'Brien were out, so Tash and K hit the microphone unfettered! Join us as we discuss DSARs, AI, and more - in the run up to the Privacy Space in London in less than a month away. If yo…

1
The pattern is full with this week in privacy 41:37

3M ago41:37

41:37

Send us a text On this episode of Serious Privacy, hosts Paul Breitbarth, Ralph O'Brien, and Dr. K Royal bring you a full week in privacy and data protection featuring new laws, new decisions, and new enforcement. We span from Pay to Play, to children's privacy, to California's Frontie AI - tune in... it's a hot one! If you have comments or questio…

1
Trailer 1:56

3M ago1:56

1:56

By Jason Edwards

1
Episode 12: Clear Waters, Big Impact: Save Crystal River & the Manatees 38:03

3M ago38:03

38:03

Episode 12 of the CCPA Playbook has dropped! Cregg recently had the pleasure of sitting down with Tina Champagne from Save Crystal River on our podcast to hear all about the fin-tastic work their team has been doing to protect our beloved waters. From the impact recent hurricanes have had on the eelgrass, to the incredible partnership with Crystal …

1
CIPA Lawsuits: Everything Privacy Leaders Should Know 1:04:23

3M ago1:04:23

1:04:23

Send us a text More than 5,000 CIPA lawsuits have been filed — and privacy teams are racing to prevent the next wave. In this webinar, Matthew Pearson, one of the leading CIPA legal experts, explains how this 1967 wiretapping law is being used against modern websites and apps. You’ll learn: 🔍 How CIPA lawsuits start and what makes them credible ⚙️ …

1
Ideas about IDs 34:24

3M ago34:24

34:24

Send us a text On this week of Serious Privacy, Paul Breitbarth, Ralph O’Brien of Reinbo Consulting, talk about the UK's plans to introduce a mandatory digital identity card. This is not the first time a proposal for mandatory ID has come up in the UK, and Ralph has thoughts about it. Paul on the other hand is a little surprised about the uproar, s…

1
Beyond the Job Title: Career Coach Lynn Unger on Mindset, Change, and Redefining Success 43:18

3M ago43:18

43:18

1
Privacy Programs with a Touch of Magic (with Paul Iagnocco) 38:55

3M ago38:55

38:55

Send us a text On this week of Serious Privacy, Paul Breitbarth, Ralph O’Brien of Reinbo Consulting, and Dr. K Royal speak with Paul Iagnocco, Head of Customer Enablement at our sponsor TrustArc. Apart from catching up, the team speaks with our guest about the development and maintenance of data protection compliance programs, especially in this ti…

1
Fun with Facts plus... Korea! 31:02

3M ago31:02

31:02

Send us a text On this episode of Serious Privacy, Paul Breitbarth brings us news from the Global Privacy Assembly held in Korea and Dr. K Royal has fun with privacy trivia! Ralph O'Brien is out this week. Open offer to all fans... if you answered all the questions correctly, send oneof us your address and we will send you a sticker for playing Tri…

1
Episode 11: More Than Electricity: WREC’s Mission in Action 36:49

3M ago36:49

36:49

Episode 11 of the CCPA Playbook Podcast has just dropped! 🎤 In this episode of The CCPA Playbook, Cregg Dalton sits down with Jamen Monbarren, Gary Steele, and Pat Sullivan from Withlacoochee River Electric Cooperative WREC to talk about careers in the power industry, hurricane preparedness, community service, and life as a lineman. The crew shares…

1
AI Agents for Privacy: Automating PIAs, Contract Risk & Website Compliance | Privado.ai 48:03

3M ago48:03

48:03

Send us a text Manual privacy work is breaking under new regulations. Watch how Privado.ai’s AI Agents for Privacy replace repetitive tasks with automation — giving privacy teams real-time risk visibility and compliance proof. 🔹 Assessment Agent – Auto-populate PIAs, DPIAs & RoPAs by analyzing product docs, JIRA tickets & technical specs. 🔹 Contrac…

1
A slamming week in Privacy with Ralph and K 35:32

4M ago35:32

35:32

Send us a text On this week of Serious Privacy, Ralph O'Brien of Reinbo Consulting and Dr. K Royal (Paul Breitbarth is travelling) discuss current events in privacy, data protection, and cyber law. Fascinating episode with all the hot stories which seem to follow a theme - adequacy and child online safety, plus some enforcements. Coverage includes …

1
Preparing for New US Privacy Laws: Maryland, Tennessee, & Minnesota 1:00:37

4M ago1:00:37

1:00:37

Send us a text Three new US state privacy laws—Tennessee (July 1), Minnesota (July 31), and Maryland (October 1)—are now in enforcement. Each introduces requirements that go beyond “standard” compliance, and regulators are preparing to act. In this session, privacy attorneys Jordan Francis (Future of Privacy Forum) and Samuel Kane (WilmerHale) brea…

1
Fireside Chat with a UK DPO (with Jordan Hall) 33:55

4M ago33:55

33:55

Send us a text On this episode of Serious Privacy, while both Paul Breitbarth and Ralph O'Brien of Reinbo Consulting are out, Dr. K Royal connects with Jordan Hall, a DPO based in the UK. Discussion centers around scope of DPO, where the field has developed, and thoughts on current events. If you have comments or questions, find us on LinkedIn and …

1
Episode 97 — Cross-Domain Comparison: Federal, State, and International Overlaps 26:50

4M ago26:50

26:50

The final episode ties everything together by comparing U.S. federal privacy laws, state-level frameworks, and international regimes like the GDPR. We’ll highlight how similar principles—such as data subject rights, accountability, and security safeguards—take different forms across jurisdictions. We’ll also explore where overlaps create synergies …

1
Episode 96 — Recent Changes: Pennsylvania SB 696 and Utah S.B. 127 28:22

4M ago28:22

28:22

State privacy laws continue to evolve. This episode reviews recent changes, such as Pennsylvania SB 696, which updated breach notification requirements, and Utah S.B. 127, which amended cybersecurity provisions. These examples show how states adapt their frameworks to address new threats and policy priorities. For exam purposes, understanding recen…

1
Episode 95 — State Variations: Comparing Notification Timelines and Duties 21:52

4M ago21:52

21:52

Even within the common framework of breach notification, state differences matter. This episode compares notification timelines, which can range from “without unreasonable delay” to fixed deadlines like 30 or 45 days. We’ll also examine variations in whom to notify, from affected consumers to regulators and credit reporting agencies. Understanding …

1
Episode 94 — Breach Notification: Definitions, Triggers, and Scope 22:25

4M ago22:25

22:25

State breach notification laws form one of the most uniform yet varied areas of privacy law. This episode reviews the common elements—definitions of personal information, what constitutes a breach, and when notification is required. We’ll also explore differences across states, such as timelines, thresholds, and required content of notices. We’ll a…

1
Episode 93 — Enforcement Mechanics: Cure Periods and Penalties 22:32

4M ago22:32

22:32

Enforcement provisions determine how state privacy laws are applied in practice. This episode explains cure periods, which give businesses time to fix violations before penalties are imposed, and how these provisions differ across states. We’ll also examine penalties, remedies, and enforcement authority, often vested in state attorneys general or p…

1
Episode 92 — Other State Acts: Emerging Comprehensive Privacy Laws 23:42

4M ago23:42

23:42

Beyond California, Virginia, and Colorado, many states are adopting or considering comprehensive privacy laws. This episode surveys these developments, highlighting features of statutes in states like Connecticut, Utah, and others. We’ll discuss how they generally follow the same model of applicability thresholds, consumer rights, and controller/pr…

1
Episode 91 — Colorado Privacy Act: Rights, Duties, and Insurance Bias Provisions 24:35

4M ago24:35

24:35

Colorado’s Privacy Act builds on the momentum from California and Virginia, offering a comprehensive framework with unique twists. This episode reviews its applicability standards, consumer rights, and controller/processor obligations, including data protection assessments. We’ll also cover Colorado’s focus on fairness in insurance, with rules addr…

1
Episode 90 — Virginia CDPA: Consumer Data Protection Act Essentials 23:12

4M ago23:12

23:12

Virginia’s Consumer Data Protection Act (CDPA) established one of the first comprehensive state privacy frameworks outside California. This episode reviews its applicability thresholds, consumer rights, and obligations for controllers and processors. We’ll also discuss how the CDPA balances business flexibility with consumer protections. We’ll high…

1
Episode 89 — California Delete Act: Data Broker Registration and Rights 22:19

4M ago22:19

22:19

The California Delete Act introduces obligations for data brokers, requiring them to register and enabling consumers to request deletion of their data from all registered brokers at once. This episode explores the mechanics of the Act, its impact on the data broker industry, and how it expands consumer control. We’ll also review enforcement provisi…

1
Episode 88 — California AADC: Age-Appropriate Design Code Protections 25:28

4M ago25:28

25:28

Children’s privacy receives special attention in California’s Age-Appropriate Design Code Act (AADC). This episode explains its requirements for online services likely to be accessed by minors, including risk assessments, high privacy default settings, and restrictions on profiling. The law reflects growing concern about children’s digital wellbein…

1
Episode 87 — California CCPA/CPRA: Comprehensive Consumer Privacy Framework 27:13

4M ago27:13

27:13

California remains the leader in state privacy law. This episode reviews the California Consumer Privacy Act (CCPA) and its amendment through the California Privacy Rights Act (CPRA). We’ll explore applicability thresholds, data subject rights, notice obligations, and enforcement by the California Privacy Protection Agency. We’ll also highlight how…

1
Episode 86 — AI Bias and ADM: NAIC AIS Guidelines, NYC AEDT, and State Rules 26:43

4M ago26:43

26:43

Automated decision-making (ADM) and artificial intelligence raise fairness and discrimination concerns. This episode introduces the NAIC Artificial Intelligence Governance Guidelines, New York City’s Automated Employment Decision Tools (AEDT) law, and state-level rules in California and Colorado. We’ll examine requirements for transparency, testing…

1
Episode 85 — Biometric Privacy: IL BIPA, WA, TX, and Related Statutes 28:14

4M ago28:14

28:14

Biometric privacy laws impose strict requirements on collecting and using data such as fingerprints, facial recognition, and iris scans. This episode covers the Illinois Biometric Information Privacy Act (BIPA), which requires consent, disclosure, and safeguards, as well as similar statutes in Washington and Texas. We’ll also review the growing num…

1
Episode 84 — Cookies and Tracking: Online Privacy Regulations 27:24

4M ago27:24

27:24

State laws increasingly regulate cookies, pixels, and online tracking. This episode explains how transparency, consent, and opt-out obligations apply to digital advertising technologies. We’ll discuss requirements for cookie banners, preference signals, and global opt-out mechanisms. We’ll also highlight enforcement actions where regulators targete…

1
Episode 83 — Health Data Rules: WA MHMD, NV Health Data Act, and IL GIPA 25:57

4M ago25:57

25:57

Beyond HIPAA, states have introduced new health data privacy statutes. This episode explores Washington’s My Health My Data Act (MHMD), Nevada’s Consumer Health Data Privacy Act, and Illinois’ Genetic Information Privacy Act (GIPA). We’ll review how these laws define consumer health data, impose consent requirements, and establish rights for deleti…

1
Episode 82 — State Security Requirements: Common Controls Across Jurisdictions 22:06

4M ago22:06

22:06

Most state privacy laws include explicit security requirements. This episode reviews common obligations such as implementing reasonable safeguards, risk-based controls, encryption, and access restrictions. While states vary in language, the underlying expectation is that businesses adopt practices proportional to the sensitivity of data. We’ll also…

1
Episode 81 — Data Protection Agreements: Contracts and Assessments 21:33

4M ago21:33

21:33

Contracts are central to ensuring compliance with state privacy laws. This episode explains how data protection agreements define the obligations between controllers and processors, including rules for data use, security, subcontracting, and breach notification. We’ll also review assessment requirements, where organizations must conduct and documen…

1
Episode 80 — Privacy Notices: Transparency and Consumer Disclosures 21:41

4M ago21:41

21:41

Transparency is a cornerstone of state privacy laws. This episode covers the requirements for privacy notices, including disclosures about data collection, use, sharing, and consumer rights. We’ll examine layered notices, just-in-time disclosures, and special statements for sensitive data or financial incentives. We’ll also highlight enforcement tr…

1
Episode 79 — Data Subject Rights: Access, Deletion, Portability, and Consent 22:14

4M ago22:14

22:14

State laws grant individuals a suite of rights over their personal data. This episode explains the rights to access, correct, delete, and port data, as well as opt-out and consent requirements. We’ll highlight how these rights compare across major state frameworks like California’s CCPA/CPRA, Virginia’s CDPA, and Colorado’s Privacy Act. We’ll also …

1
Episode 78 — Applicability Tests: Resident Thresholds, Revenue, and Exemptions 21:40

4M ago21:40

21:40

Comprehensive state privacy laws often hinge on applicability thresholds. This episode explores the criteria that determine whether a business must comply, such as number of state residents, annual revenue, or percentage of revenue from selling personal information. We’ll also cover common exemptions, including nonprofit entities, small businesses,…

1
Episode 77 — State Authority: Attorneys General and CPPA Oversight 22:59

4M ago22:59

22:59

State enforcement has become increasingly influential in privacy regulation. This episode examines the role of state attorneys general, who bring actions under both state privacy laws and general consumer protection statutes. We’ll also focus on the California Privacy Protection Agency, which has broad authority under the CCPA and CPRA to issue reg…

1
Episode 76 — Domain V Overview: Role of States in the U.S. Privacy Framework 23:18

4M ago23:18

23:18

Domain V introduces state privacy laws, which increasingly shape the U.S. privacy landscape. This episode provides an overview of how state authority interacts with federal law, highlighting the roles of state attorneys general, legislatures, and agencies like the California Privacy Protection Agency. We’ll also discuss how states serve as “laborat…

1
Episode 75 — Post-Employment: Records, References, and Retention Duties 23:39

4M ago23:39

23:39

Privacy obligations continue even after employment ends. This episode reviews how employers manage personnel records after termination, including requirements for retention and eventual disposal. We’ll also cover privacy issues in providing references, balancing truthfulness with obligations to protect sensitive information. We’ll discuss how state…