What Every Company Should Know About Privacy with Robin Andruss

Partially Redacted: Data Privacy, Security & Compliance

Robin Andruss has spent her career working in and thinking about privacy and compliance. She's previously held privacy roles at Google, Yahoo!, and Twilio, where she served as the Global Director for Privacy and Data Protection. She's currently the Chief Privacy Officer for Skyflow.

In this episode, she discusses her background, how she got interested in privacy, privacy engineering, the responsibilities of a Chief Privacy Officer, and what every company needs to be thinking about when it comes to the ever changing privacy landscape.

Topics:

• What are the responsibilities of a chief privacy officer?
• How did you end up with an interest in working in the data privacy space? And what’s your work history in this space?
• What is privacy engineering?
• What is the typical background of someone that ends up working as a privacy engineer?
• Where does privacy engineering typically sit in an organization
• How does an engineering team typically work with the privacy function within an organization?
• People tend to lump security and privacy together, what’s the difference?
• If you were advising a startup today, what advice would you give them about how to navigate the ever changing privacy landscape?
• What should every company be thinking about when it comes to data privacy?
• Does every company need to hire a privacy specialist? If not, at what point does that make sense?
• What are the big gaps in data privacy today? What future technology or development are you excited about?
• Where should someone looking to learn more about the data privacy space begin?

Resources:

• Effective Privacy is Always Proactive
• NIST Framework
• CMU Privacy Engineering Programming
• Data Protocol Privacy Engineering Certificate Program
• IAPP Privacy. Security. Risk. 2022