Categories
Life with GDPR

Life With GDPR: Episode 114 – Navigating GDPR in Global Outsourcing with Inge Zwick

Tom Fox takes a solo turn as Jonathan Armstrong is on assignment. Today, Tom visits with Inge Zwick, Executive Director, Head of Europe, and ESG Lead at Emapta Global, a global outsourcing company.

They discuss the company’s operations, with a particular focus on managing GDPR compliance within the outsourcing framework. They also discuss common misconceptions about outsourcing under the GDPR, risk assessment processes, handling data subject access requests, and integrating compliance into business operations. Zwick also shares insights into how EMAPTA collaborates with clients to ensure compliance and offers advice to business leaders on future-proofing their outsourcing strategies in light of GDPR requirements. Additionally, the discussion explores the integration of ESG initiatives within the company’s operations.

Key takeaways:

  • Outsourcing and GDPR Compliance
  • Risk Assessment and Data Security
  • Subject Access Requests (SAR)
  • Outsourcing Contracts and GDPR Obligations
  • Integrating Compliance into Operations

Resources:

Connect with Tom Fox

Connect with Inge Zwick

Connect with Emapta Global

Life with GDPR was recently honored as a Top Data Security Podcast.  

Categories
FCPA Compliance Report

FCPA Compliance Report – Ethical Challenges in AI, Data Protection, and Sports with André Paris

Welcome to the award-winning FCPA Compliance Report, the longest-running podcast in compliance. Today, Tom Fox welcomes back André Paris for an insightful discussion on various ethical challenges in today’s world. André revisits his role in compliance and ethics and provides updates on his work since the pandemic and delves into the issues of algorithmic bias, transparency, and the ethical ramifications of AI systems, particularly in surveillance and privacy. André also shares his experience as a PhD candidate researching AI’s impact on civil liberties. The episode further explores the ethical challenges in the sports industry, including corruption, doping, and harassment. Lastly, André talks about his book ETHICS & TRANSPARENCY: A Path To Compliance on Amazon and its practical applications in fostering an ethical corporate culture.

Key highlights include:

  • André‘s Role in Compliance and Ethics
  • Ethics and Transparency: André’s Book
  • The Rise of AI and Ethical Challenges
  • AI in Business and Research Applications
  • Data Protection as a Civil Liberty
  • Ethical Challenges in Sports

Resources:

André Paris on LinkedIn

ETHICS & TRANSPARENCY: A Path To Compliance on Amazon

André Paris Website

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

For more information on the use of AI in Compliance programs, my new book, Upping Your Game. You can purchase a copy of the book on Amazon.com.

Categories
Innovation in Compliance

Innovation in Compliance: The Critical Importance of Mobile Application Security: Insights from Subho Halder

Innovation comes in many areas, and compliance professionals need to not only be ready for it but also embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom Fox visits Subho Halder, the CEO & Co-Founder of Appknox, to discuss the often-overlooked yet crucial topic of mobile application security in the corporate compliance world.

Halder shares his extensive background in mobile app security, including developing the first mobile malware and presenting at prestigious conferences like Black Hat and DEF CON. The conversation covers the evolving market need for specialized mobile app security tools, the unique challenges faced by mobile applications compared to web applications, and the critical importance of integrating security early in the development lifecycle—a concept known as the ‘left shift’ approach. Halder also explores AI-powered cyberattacks and how Appknox is utilizing AI to develop defensive strategies. The discussion highlights regulatory blind spots in the US regarding mobile security, the challenges of managing mobile app security in large multinational corporations, and best practices for ensuring robust mobile app security.

Key highlights:

  • Market Need and Opportunity for AppKnox
  • Appknox Security Assessment of Perplexity’s Android App
  • Regulatory Blind Spots in US Cybersecurity Frameworks
  • Engaging with Large Multinational Companies
  • AI-Powered Cyber Attacks and Defensive Strategies
  • Importance of the Left Shift Approach in Mobile App Security

Resources:

Subho Halder on LinkedIn

Appknox

Appknox Resources Page

Appknox Blog: Is Perplexity AI Safe to Use? Security Flaws in the Android App

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Compliance and AI

Compliance and AI: Using AI for Data Loss Prevention Systems with Vinay Goel

What is the role of Artificial Intelligence in compliance? What about Machine Learning? Are you using ChatGPT? These questions are just three of the many we will explore in this cutting-edge podcast series, Compliance and AI, hosted by Tom Fox, the award-winning Voice of Compliance. In this episode, Tom is joined by Vinay Goel, co-founder of Wald.ai.

They discuss Goel’s professional background, his journey to founding his company, Wald.ai, and the transformative impact of AI, particularly following the launch of ChatGPT. Goel shares insights into the compliance challenges posed by AI, the importance of secure AI usage, and how businesses can strike a balance between productivity and data protection. They also delve into democratizing workplace data through AI and the importance of privacy and identity protection in AI solutions. Goel offers practical advice for companies seeking to adopt AI responsibly, discussing the future of AI in the business world.

Key highlights:

  • The Inspiration Behind Wald
  • AI and Data Security Challenges
  • Compliance and AI Usage
  • Democratizing Data with AI
  • Future of AI and Compliance

Resources:

Vinay Goel on LinkedIn

Wald.ai

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Check out my latest book, Upping Your Game- How Compliance and Risk Management Move to 2023 and Beyond, available from Amazon.com.

Categories
Innovation in Compliance

Navigating Regulatory Changes and Compliance in Trade and Data Privacy with Stephanie Font

Innovation comes in many areas, and compliance professionals must be ready for and embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. Today, we begin a 3-part podcast series sponsored by Diligent with Clint Palermo, Kristy Grant-Hart, and Stephanie Font. Part 2 discusses navigating regulatory changes and compliance in trade and data privacy.

In this episode, host Tom Fox converses with Stephanie Font, Director for Operations Optimization Group at Diligent, to discuss the ever-evolving landscape of economic sanctions, trade policies, and data privacy. Font shares insights on how businesses can stay compliant amidst rapid regulatory changes, emphasizing the importance of continuous monitoring, thorough due diligence, and understanding one’s business partners. The conversation also touches on new regulatory trends such as BIS address specifications, Mexican cartels being designated as FTOs, and the implications of the Uyghur Forced Labor Prevention Act.

Key highlights:

  • Economic Sanctions and Trade Policy
  • Compliance and Business Operations
  • Staying Updated on Regulatory Changes
  • Cartels and Foreign Terrorist Organizations
  • Data Privacy and Cybersecurity
  • Human Rights and Business Culture

Resources:

Stephanie Font on LinkedIn

Visit Diligent Website

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
FCPA Compliance Report

FCPA Compliance Report – AI, Data Compliance, and Ownership: A Conversation with Andrew Hopkins

Welcome to the award-winning FCPA Compliance Report, the longest-running podcast on compliance. In this episode, Tom welcomes Andrew Hopkins, President of PrivacyChain, to discuss the critical intersection of AI, data compliance, and data ownership.

Andrew brings his expertise from years of consulting, focusing on outcome-driven business support, and provides a comprehensive overview of the challenges and opportunities in managing and securing data in the age of AI. The conversation delves into the complexities of data security, the inefficiencies of traditional data management systems, and the potential of new technologies to enhance data governance and personal data ownership. Listeners will gain valuable insights into navigating the evolving landscape of data management and the importance of contextual integrity in AI processes.

Key highlights:

  • The Intersection of AI, Data Compliance, and Ownership
  • Challenges in Data Management and Compliance
  • Data Governance
  • Shortcomings of Current Data Management Systems
  • Data Integrity and Context

Resources:

Andrew Hopkins on LinkedIn

The Privacy Chain

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Innovation in Compliance

Innovations in Compliance – Data Collection & Cybersecurity with ModeOne’s Matt Rasmussen and Ryan Frye

Innovation comes in many areas, and compliance professionals need to be ready for it and embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom Fox visits Matt Rasmussen and Ryan Frye from ModeOne and their innovative approach to compliance data collection and cybersecurity.

They discuss their professional backgrounds, the founding of ModeOne, and their solutions to common challenges in data collection for compliance purposes. The conversation covers the shift from full data extraction to targeted data collection, navigating the complexities of encrypted communications, and the evolution of cloud compliance and AI integration. Key takeaways include the importance of targeted data collection, the use of AI in compliance monitoring, and strategies for balancing data privacy and protection.

Key highlights:

  • Founding ModeOne: The Journey
  • Innovation in Compliance and Cybersecurity
  • Role of the Chief Innovation Officer
  • Risk Management Frameworks
  • Future of Cloud Compliance and AI
  • Top Action Items for Compliance Officers
  • Preparing for the Future: 2030 and Beyond

Resources:

Matt Rasmussen on LinkedIn

Ryan Frye on LinkedIn

ModeOne Technologies in LinkedIn

ModeOne Website

Mobile Device Data Collection: What You Need to Know in 2025

ModeOne News

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Daily Compliance News

Daily Compliance News: March 27, 2025, The Eliminate The District Courts Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen to the Daily Compliance News—all from the Compliance Podcast Network. Each day, we consider four stories from the business world: compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • Who is going to get your 23andMe data? (WSJ)
  • Even Bloomberg says to enforce the FCPA.  (Bloomberg)
  • The House speaker says Congress can eliminate district courts.  (Reuters)
  • What is the fire risk for your business? (NYT)
Categories
Life with GDPR

Life With GDPR: Cookie Compliance

Tom Fox and Jonathan Armstrong, renowned experts in cyber security, co-host the award-winning Life with GDPR. In this episode, they discuss Cookie Compliance Under GDPR.

Their discussion highlights the increasing enforcement actions surrounding website cookies, emphasizing that this is a data protection issue and a broader compliance challenge. Specific case studies, such as the Dutch regulator’s fine against Pool Blue and fines in other EU countries, illustrate the significant financial penalties companies can face for non-compliance. Jonathan outlines an eight-point plan to help organizations ensure their cookie practices are current, including regular checks, proper configuration of cookie banners, and transparency about data retention periods.

The episode also touches on the role of third-party cookies, potential litigation, and regulatory actions. Compliance with cookie regulations is becoming increasingly important, with groups like NOYB driving many complaints and regulatory bodies across Europe ramping up enforcement efforts. Listeners are encouraged to assess their cookie practices and make necessary adjustments to avoid fines and maintain compliance.

Key takeaways:

  • The Rise of Cookie Enforcement
  • Global Fines and Consequences
  • Practical Compliance Tips
  • Challenges with Cookie Banners
  • Understanding Your Own Cookies
  • Guidelines for Cookie Retention

Resources:

Connect with Tom Fox

Connect with Jonathan Armstrong

Life with GDPR was recently honored as a Top Data Security Podcast.

Categories
FCPA Compliance Report

FCPA Compliance Report: Jonathan Armstrong on Sweeping Changes in The UK Government: Insights on Compliance

Welcome to the award-winning FCPA Compliance Report, the longest running podcast in compliance. In this edition of the FCPA Compliance Report, Tom Fox welcome Jonathan Armstrong to discuss the seismic shift in the UK’s political landscape following the election last week.

The election was literally one for the ages. It led to a significant Labor victory over the Conservatives. They delve into the implications for compliance and governance in both the UK and globally. Topics include the new government’s proactive approach, anticipated shifts in bribery enforcement, and fiscal policies.

They also explore potential changes in AI regulation, employment law, data protection, and international relations, especially concerning Russia and China. The conversation highlights Labor’s balanced strategy, aiming for sensible, centrist policies while addressing key issues like corruption, AI, and data privacy.

Highlights in this Episode:

  • An election result for the ages
  • Impact on Bribery and Corruption Enforcement
  • Trade Sanctions, Russian Oligarch’s and Forced Labor
  • AI and Beyond
  • Data Privacy and Data Protection
  • Labor and Employment Rights

 Resources:

Jonathan Armstrong on LinkedIn

UK General Election 2024 – What Might This Mean for Compliance?

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

For more information on the Ethico ROI Calculator and a free White Paper on the ROI of Compliance, click here.