PrivacyPod
Podcast Ensemble
All episodes
Best episodes
Top 10 PrivacyPod Episodes
Goodpods has curated a list of the 10 best PrivacyPod episodes, ranked by the number of listens and likes each episode have garnered from our listeners. If you are listening to PrivacyPod for the first time, there's no better place to start than with one of these standout episodes. If you are a fan of the show, vote for your favorite PrivacyPod episode by adding your comments to the episode page.
08/20/24 • 52 min
See how we get back to podcasting after the brat summer? Very demure, very mindful. We are not like these other podcasts, we don’t come back for the new season with a half-planned episode, we don’t use chatGPT to make notes, we don’t record too long episodes where half of it is just giggling–we’re very mindful, very considerate, very cutesy.
In today’s very considerate episode Jyri, Milla, and Pilvi walk you through the most interesting news from the summer, such as the mega fine of €13,9 million given by the the Czech Supervisory Authority to a cyber security company that shared data of 100 million data subjects to its subsidiaries in a not very mindful way. We also discuss the latest drama on the EU Commission’s Preliminary DMA Findings on Pay or Consent as well as Meta suing the EDPB that is very interesting, very cutesy.
We also take a look at the secret collaboration between Meta and Google to target ads at 13–17-year-olds and have a discussion on what’s the harm in this? Is it really a problem or are we just trying to hold on to a world that is not realistic? We are not like these other privacy people–we don’t just gush about this–we explore different perspectives and play devil’s advocate. Very mindful, very considerate, very demure.
These and much more in this episode where we do not try to play too much slightly off pitch on the hottest meme by the amazing @joolieannie , we’re very considerate, very funny, very cutesy, very mindful, and most certainly very demure.
Did you enjoy our show? Support us by buying us a coffee here: https://bmc.link/privacypod4u
We would love to get feedback – so please tag us, follow us, DM us, or send us traditional email:
Twitter: https://twitter.com/PodPrivacy, #privacypod
Instagram: @privacypod
LinkedIn: https://www.linkedin.com/company/tietosuojapod/about/
Email: [email protected]
Links:
Big fine in Czech:
EU Commission and Pay or Consent:
Meta and Google not very demure collaboration:
https://www.ft.com/content/b3bb80f4-4e01-4ce6-8358-f4f8638790f8
NOYB annual report
Annual_Report_2023_EN.pdf (noyb.eu)
Scraping and OpenAI:
Microsoft Word - 2024.08.02 FINAL OpenAI Complaint (2) (courtlistener.com)
12/31/24 • 64 min
Today’s episode is perfect for the holiday season - or maybe you don’t want to think about work stuff during holidays? Oh well, you are very welcome to join the ride with Laura and Pilvi when they discuss consent or pay -models with Filip Sedefov.
What is the topic really about? Are we regulating/focusing on the right things? Is personal data a tradable commodity that you can exchange for free services? What has all this to do with the values we wish we had and what we actually live by? Is the pay or consent just about making money while stomping on people’s rights or can it actually be seen as an improvement from the current state of affairs?
Listen in to hear our hosts exploring the arguments while playing all types of devils’ advocates from “people will not be able to make informed decisions” to “this is about safeguarding users’ autonomy” and everything in between.
With this episode we’ll wrap up the year 2024 and wish all our 7 (+ Joost’s wife and dog = 9) listeners happy holidays and a Schrems III-free 2025!
LINKS: https://www.edpb.europa.eu/news/news/2024/edpb-consent-or-pay-models-should-offer-real-choice_en
Did you enjoy our show? Support us by buying us a coffee here: https://bmc.link/privacypod4u
We would love to get feedback – so please tag us, follow us, DM us, or send us traditional email:
Twitter: https://twitter.com/PodPrivacy, #privacypod
Instagram: @privacypod
LinkedIn: https://www.linkedin.com/company/tietosuojapod/about/
Email: [email protected]
04/12/24 • 45 min
It’s been a heavy spring. So many new things are coming to privacy folk’s way, the world is (literally) shaking, we are killing our one planet, old men are driving the world to turmoil and horror. The world is getting darker.
Therefore, without forgetting the importance of discussing all the difficult things, we decided to treat you with an invitation to Milla’s happy place: to discuss something that is full of bright colors and makes everyone focus, just for a brief moment, on the importance of coming together and enjoying the beautiful wonders that people do. We are of course talking about the Eurovision!
Will ABBA serve a beautiful Swedish Suprise in May in Malmö? Which year did TIX compete for Norway (Milla gets this wrong)? What country did Flo Rida compete for? And whats the most efficient way to collect consent? One of these questions is not answered in this episode.
Even though the task was to talk a little bit about Eurovision and a lot about privacy, Pilvi kinda ends up interviewing Milla about her love for the Eurovision and all the wonderful twists and turns this performance art competition includes. We also asked the presenters to take few breaks for editing purposes, but guess that was too much to ask. And anyway we maybe did or didn’t have time to cover privacy-related news - one has to prioritize.
So put on your headphones, grab a glass of your favorite beverage, and slide into the bliss of Eurovision for a moment – it’s on us!
And Herkko, you can skip this episode!
Did you enjoy our show? Support us by buying us a coffee here: https://bmc.link/privacypod4u
We would love to get feedback – so please tag us, follow us, DM us, or send us traditional email:
Twitter: https://twitter.com/PodPrivacy, #privacypod
Instagram: @privacypod
LinkedIn: https://www.linkedin.com/company/tietosuojapod/about/
Email: [email protected]
12/15/24 • 70 min
Gather around the fire, children, and listen closely: it is time once again to enjoy CJEU case law in the best possible way with Joost’s Case Corner! Yes, Jyri and Pilvi join forces again with the amazing Joost Gerritsen and dive right back into the CJEU Super Friday cases. In this episode, we will cover:
- Case C-200/23, Agentsia po vpisvaniyata (A Bulgarian case about whether an individual has the right to ask the agency to delete their personal data from the company registry, the scope of legal obligation as a legal basis, whether signatures are personal data, and if the official opinion of the Data Protection Authority can shield a controller from liabilities if the court disagrees with the DPA’s opinion.)
- Case C-4/23, Mirin (If a first name and sex/gender are changed in one member state, must other member states recognize it as well?)
- Case C-768/21, Land Hessen (Does the DPA have an obligation to exercise corrective power in all cases of data breaches, particularly to impose a fine, at the demand of the data subject?)
As a bonus, we also cover the following cases:
- C-169/23, Masdi (A Hungarian case focusing on Article 14(5)(c): does the article exempt controllers from their obligation to inform data subjects when the data processing—obtaining or disclosure—derives from national law?)
- C-80/23, Ministerstvo na vatreshnite raboti (A Bulgarian case about the Law Enforcement Directive (LED) regarding the concept of “strict necessity” in the context of biometric and genetic data collection for creating police records.)
So lean back, close your eyes, reward yourself for making it to December of this eventful year, and let the velvety voice of Joost carry you to the wonderful wonderland of CJEU Case Law. Darling, we got you.
Did you enjoy our show? Support us by buying us coffee here: https://bmc.link/privacypod4u
We would love to get feedback – so please tag us, follow us, DM us, or send us traditional email:
Instagram: @privacypod
LinkedIn: https://www.linkedin.com/company/tietosuojapod/about/
Email: [email protected]
Links:
Case C-200/23, Agentsia po vpisvaniyata: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A62023CN0200
Case C-4/23, Mirin: https://curia.europa.eu/juris/documents.jsf?num=C-4/23
Case C-768/21, Land Hessen: https://curia.europa.eu/juris/liste.jsf?lgrec=fr&td=%3BALL&language=en&num=C-768/21&jur=C
C-169/23, Masdi: https://gdprhub.eu/index.php?title=AG_-_C-169/23_-_M%C3%A1sdi
09/13/24 • 58 min
In this episode, Jyri, Milla, and Pilvi walk you through the latest hottest tea in privacy and data protection. First, we turn our attention to the herald of doom itself: Clearview and the actions taken by the Dutch Data Protection Authority (fine of 30,5 million euros and then some). Will the Dutch DPA follow through with going after the management and inflict personal liability the managers or directors of Cleaview?
We also explore whether such a grim herald can have any positive aspects. The Dutch DPA suggests that the government could create its own version of Clearview, raising an important question. Should we, as a human society, pursue every technological capability simply because we can?
Next, we visit the herald of digital future and all things beautiful, that is of course Sweden. The Swedish data protection authority, IMY, has given out two fines for unfortunate use of Meta pixels by a pharmacy and a bank that led to leaking sensitive personal data to Meta. The cases have some meme aspects (legal said no) but also raise up important questions: what is the root cause? Could Meta’s way of enrolling in updates be the one to blame? What steps to take to ensure your organization’s compliance?
Then, we take a look at the latest blog by Anu Talus, the Finnish Data Protection Ombudsman and the the Chair of the European Data Protection Board. She admires Sweden (don’t we all?), who seems to thrive under the GDPR rules whereas Finland’s Data Protection Authority remains under-resourced, raising concerns about its ability to support future demands. She distinctly calls out for the ability to fine the public sector also in Finland (one of the few countries where this isnt possible), and discusses the AI Act.
Lastly, we dive into a fast-paced Lightning RoundTM of key data protection developments. From the Belgian DPA’s crackdown on dark patterns in cookie consent to fines against Uniqlo by the Spanish DPA (AEPD), and a penalty for Vejen Municipality in Denmark over stolen school laptops, important actions are shaping the landscape. We also explore Liechtenstein’s insights on remote work and
This and much more (such as some tips on who to follow on LinkedIn) awaits behind the play-button!
Did you enjoy our show? Support us by buying us a coffee here: https://bmc.link/privacypod4u
We would love to get feedback – so please tag us, follow us, DM us, or send us traditional email:
Twitter: https://twitter.com/PodPrivacy, #privacypod
Instagram: @privacypod
LinkedIn: https://www.linkedin.com/company/tietosuojapod/about/
Email: [email protected]
Links:
Swedish Meta Pixel cases: https://www.imy.se/nyheter/sanktionsavgift-mot-avanza-for-overforing-av-personuppgifter-till-meta/
Anu Talus’ blog: https://tietosuoja.fi/-/tekoaly-hoi-missa-suomen-digistrategia-
Belgian DPA’s cookie case: https://www.gegevensbeschermingsautoriteit.be/publications/beslissing-ten-gronde-nr.-113-2024-van-6-september-2024.pdf
Vejen Municipality fine: https://www.datatilsynet.dk/afgoerelser/afgoerelser/2024/aug/endnu-en-kommune-indstillet-til-boede-for-manglende-kryptering
The DPA of Lichtenstein’s activity report for 2023: https://www.datenschutzstelle.li/application/fi...
10/22/24 • 60 min
In this episode, amazing hosts Milla Keller and Floora Kukorelli sit down with Jussi Mäkinen to discuss the (bright?) future of EU technology regulation. Jussi Mäkinen leads the EU regulatory team at the Federation of Finnish Technology Industries and has extensive experience in digital regulation, both in drafting policies and advocating for industry interests.
The discussion revolves around the so-called Draghi Report, in which the former European Central Bank President and Prime Minister of Italy Mario Draghi warns that the EU is falling behind the US and China in the use of data and digital services. The report suggests that Europe’s declining competitiveness is partly due to its stringent data (protection) regulations. The conversation explores whether the Draghi Report marks a turning point in EU data protection policies and what it might mean for the future.
The episode also looks at the role of the incoming European Commission in shaping future technology regulations, with special attention to Commissioner Henna Virkkunen from Finland, who oversees areas like technology and competitiveness. The discussion examines her approach and the potential impact it could have on EU tech regulation.
Additionally, the episode delves into the future of the EU’s General Data Protection Regulation (GDPR) and the fate of the ePrivacy Regulation. Our guest believes that a more practical approach to privacy is needed moving forward, with the EU striking a better balance between protecting privacy and fostering innovation - the million dollar question is, where this balance lies.
This episode provides an engaging and timely look at the current state and future prospects of EU technology regulation for anyone interested in the digital economy and EU policymaking.
Did you enjoy our show? Support us by buying us a coffee here: https://bmc.link/privacypod4u
We would love to get feedback – so please tag us, follow us, DM us, or send us traditional email:
Twitter: https://twitter.com/PodPrivacy, #privacypod
Instagram: @privacypod
LinkedIn: https://www.linkedin.com/company/tietosuojapod/about/
Email: [email protected]
11/16/24 • 66 min
Tired of keeping up with all the CJEU case law? Want to prepare yourself for all the cool discussions at the IAPP Brussels event? Not to worry! The Joost’s Case Corner covering the CJEU Super Friday cases has landed for you to enjoy. In the first of two of the Super Friday episodes, we will cover:
- Case C-21/23 Lindenapotheke (What is Art 9 data and what’s not? Can companies rat out each other regarding compliance with the GDPR (and is it smart)?)
- Case C-621/22 KNLT (Can a commercial interest constitute legitimate interest? We also get a brief history of this case and learn to understand the Dutch DPA a bit better and cover some hot tea on the subject.)
- Case C-446/21 Schrems v Facebook (Can you process publicly disclosed information on sexual orientation for targeted advertising just because it is public information?)
We also learn about the most awesome Dutch legal term “breaking through the wall” and Olaus Petri (a priest who lived 1493-1552, in Swedish Olof Persson, who is still an important character in Finnish law) while discussing legal theory of EU law.
So take a good breath, let all the stress of November leave your mind, and enjoy the awesome drama that is CJEU case law!
Links:
Case C-21/23 Lindenapotheke
https://curia.europa.eu/juris/documents.jsf?num=C-21/23
Case C-621/22 KNLT https://curia.europa.eu/juris/document/document.jsf?text=&docid=290688&pageIndex=0&doclang=EN&mode=req&dir=&occ=first&part=1&cid=4086618
Case C-446/21 Schrems v Facebook https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A62021CJ0446
Did you enjoy our show? Support us by buying us a pumpkin spice latte here: https://bmc.link/privacypod4u
We would love to get feedback – so please tag us, follow us, DM us, or send us traditional email:
Twitter: https://twitter.com/PodPrivacy, #privacypod
Instagram: @privacypod
LinkedIn: https://www.linkedin.com/company/tietosuojapod/about/
Email: [email protected]
10/31/24 • 63 min
Are you googling me? Stop googling me, Jyri!
In this episode Jyri, Pilvi, and Milla take a look at the latest interesting privacy news. The repertoire includes discussion on what happens when regulation is 20 years late (=personalized ads and privacy issues) in the form of LinkedIn’s 310 million euro fine and NOYB’s Pinterest complaint.
We also fall in love (and you will too) with Germany’s Traunstein Court and their Schrems II case (transfers to the US), where the court gave out a decision that seems to include some common sense (no joke). Do listen in for some statements that will first make you feel warm and fuzzy, smiling from ear to ear, and then break you in the “Don’t do that, Don’t give me hope.” -meme kind of way. But hey–when was the last time you felt warm and fuzzy about a Schrems II decision? We thought so too. We all need this, we’ve been through a lot.
We also rant about the latest “know your sub-processors to the infinity and beyond” EDPB guideline draft and most importantly, Jyri tells you in detail how you can actually get some suggestions implemented in the public consultation rounds (no joke).
So grab your Halloween-candy-flavored-popcorn and enjoy some privacy goodie-goodie! You deserve it and darling, we got you.
Did you enjoy our show? Support us by buying us a pumpkin spice latte here: https://bmc.link/privacypod4u
We would love to get feedback – so please tag us, follow us, DM us, send us your Pinterest boards, or send us traditional email:
Twitter: https://twitter.com/PodPrivacy, #privacypod
Instagram: @privacypod
02/02/23 • 69 min
This week, we talk with Romain Robert, a Program Director and a senior lawyer working at NOYB. For the few who might not know, NOYB is a Austrian NGO founded by Max Schrems, who is probably a familiar name to everyone in the privacy world (heard of Scherms I or Schrems II anyone?).
Romain has extensive and interesting background and can claim a rare feat of actually taking part in writing the GDPR.
We talk about three groundbraking cases delivered by the Irish DPA by just the beginning of the privacy year 2023 concerning Instagram, Facebook and Whatsapp, all Meta owned platforms (yeah, those ones, everybody is talking about them, right?).
The complaints against these three companies were made on 25th of May 2018, on the day GDPR entered into force, and concerned their legal basis for processing the personal data of their users. The legal basis used for multiple different purposes, such as behavioural advertising and service improvement, was claimed to be contract, and this ultimately did not go through with the DPC. However, the case is more complicated than it sounds and included many twists and turns between the parties as well as between the DPC and other Member State DPAs- and ultimately the EDPB).
We also talk to Roman about working with NOYB, their future agenda, consent or pay -solutions and GDPR enforcement. Please tune in and learn more about the inside world of the most talked-about privacy NGO in Europe (or the world)!
Did you enjoy our show? Support us by buying us a coffee here: https://bmc.link/privacypod4u
We would love to get feedback – so please tag us, follow us, DM us, or send us traditional email:
Twitter: https://twitter.com/PodPrivacy, #privacypod
Instagram: @privacypod
LinkedIn: https://www.linkedin.com/company/tietosuojapod/about/
Email: [email protected]
02/10/25 • 45 min
Once again, Pilvi and Jyri are joined by the legendary Joost, in another episode of Joost Case Corner and the magic of European Court of Justice (and Court of First Instance) case law!
In this episode, Pilvi and Jyri (with some connection issues but not to worry Phil and all Jyri fans–he’s there!) discuss the following cases with Joost Gerritsen:
- Case T-354/22: Judgment of the General Court in Bindl v. Institutions, commission (Can an unlawful data transfer to the USA be annulled? Also, 400€ damages for an unlawful transfer of IP Address via Facebook by the EU. A case that highlights the importance of DPF and the difficulties to function if it should fall.)
- Case C-394/23: Mousse Jan 9 2025 Association Mousse v Commission nationale de l'informatique et des libertés (CNIL) and SNCF Connect. (A data subject was forced to pick a salutation (monsieur/madame) when buying a train ticket because the train company wanted to send marketing, this case made us happy to live in Europe in these st/o+range times.)
- Case C‐416/23, Österreiche Datenschutzbehörde (Can a Data Protection Authority tell a data subject to stop filing complaints and stick to no more than 2 complaints per month?)
- We also take a look at what court cases are cooking in the Court of Justice of the European Union and ready for us to enjoy soon!‘
This episode will be a great treat while prepping for the end of the world, so do listen in!
Did you enjoy our show? Support us by buying us a coffee here: https://bmc.link/privacypod4u
We would love to get feedback – so please tag us, follow us, DM us, or send us traditional email:
Instagram: @privacypod
LinkedIn: https://www.linkedin.com/company/tietosuojapod/about/
Email: [email protected]
Links:
Case T-354/22: https://curia.europa.eu/jcms/upload/docs/application/pdf/2025-01/cp250001en.pdf
Case C-394/23: https://eur-lex.europa.eu/legal-content/fi/TXT/?uri=CELEX:62023CJ0394
Case C‐416/23: https://www.euractiv.com/section/tech/news/eu-court-rules-gdpr-complaints-cant-be-rejected-based-on-frequency/
Show more best episodes
Show more best episodes
FAQ
How many episodes does PrivacyPod have?
PrivacyPod currently has 72 episodes available.
What topics does PrivacyPod cover?
The podcast is about Society & Culture, Podcasts, Technology, Business and Privacy.
What is the most popular episode on PrivacyPod?
The episode title '#60: Microtargeting on EU Elections 2024 and the new regulation with Norman Aasma' is the most popular.
What is the average episode length on PrivacyPod?
The average episode length on PrivacyPod is 64 minutes.
How often are episodes of PrivacyPod released?
Episodes of PrivacyPod are typically released every 13 days, 23 hours.
When was the first episode of PrivacyPod?
The first episode of PrivacyPod was released on Mar 10, 2021.
Show more FAQ
Show more FAQ