Building Privacy Programs for Software Engineers

Explicit content warning

12/08/22 • 28 min

Vaibhav Antil is the Co-founder of Privado.ai, a developer-friendly privacy platform. Privado was purpose-built as a code-scanning solution for privacy to discover personal data, usage, flows, and leakages, as well as flag privacy issues in the code for GDPR regulations. Vaibhav became a privacy consultant to help companies remain compliant after the introduction of GDPR. Before Privado, he was the Co-founder of Jukebox Studio, which was acquired by Gaana, where he served as the Senior Product Manager of Subscriptions.

In this episode...

When developing apps and other software, engineers often collect excessive consumer data and lack consideration for potential breaches. As a privacy professional, how can you implement developer-friendly privacy programs?

According to privacy consultant Vaibhav Antil, there is a knowledge barrier between engineering and privacy teams. To address and mitigate this, it’s essential to provide developers with readily-available privacy tools that display each code's data leaks and breaches. By collaborating with engineers and using familiar language when giving instructions, you can mitigate risks to your software.

In today’s episode of She Said Privacy/He Said Security, Jodi and Justin Daniels host Vaibhav Antil, Co-founder of Privado.ai, to discuss building privacy programs for developers. Vaibhav explains privacy debt, the qualities of a developer-friendly privacy program, and how Privado scans codes for privacy risks.

In this episode...

Previous Episode

Assessing and Preventing Financial Risks

Gary Vecchiarelli is the Chief Financial Officer at CleanSpark, a sustainable Bitcoin mining company solving modern energy challenges. As a licensed CPA, he has over 10 years of experience in public accounting, having worked for international firms with clientele ranging in size from $50 million to $1 billion while operating in various industries. Gary serves on the board of directors for the Doral Academy of Nevada and Financial Executives International Las Vegas Chapter. He was named by VEGAS INC magazine to the “Las Vegas 40 Under 40” list in 2014.

In this episode...

With the enforcement of the Sarbanes-Oxley Act of 2002, finance departments must remain transparent in their reporting practices to mitigate fraudulent activity. Yet these departments continue to struggle with privacy and security measures and as a result, fall victim to wire fraud and phishing scams. So, how can you assess and prevent risks to stay compliant and combat attacks?

Finance and accounting expert Gary Vecchiarelli recommends implementing internal security controls to conduct preventative risk analyses and assessments and forecast potential attacks. At the foundational level, finance departments can invest in firewalls and encryption and instruct team members to approve transactions. To ensure maximum security, Gary advises incorporating the COSO Framework into your business processes to comply with industry standards and identify, monitor, and eliminate risks effectively.

In this episode of She Said Privacy/He Said Security, Jodi and Justin Daniels host Gary Vecchiarelli, Chief Financial Officer at CleanSpark, to discuss managing risks in financial environments. Gary shares how he manages security from a financial perspective, how finance departments can prevent fraud and hacking, and the impact of risk assessments on financial decisions.

Next Episode

Protecting Consumer Data From Third Parties

Ian Cohen is the Founder and CEO of Lokker, a company committed to protecting businesses from third-party privacy risks. Before Lokker, he served as CEO of Credit.com, where he transformed the company into a trusted high-growth hub for consumers seeking guidance on credit and finance. Ian is also a Board Member of Uqual, an Industry Advisor at Long Ridge Equity Partners, and an Advisor and Investor at PolyScale.

In this episode...

Data collection has become increasingly obscure, and companies like Meta and Oracle are facing lawsuits for unauthorized data tracking and sharing across third parties. With data sharing largely unregulated among companies, how can you protect customer data?

When collecting consumer data, companies often struggle to interpret the data and lack knowledge about its location and usage. With the emergence of GDPR (General Data Protection Regulation) in the US, businesses must go beyond internal privacy programs to regulate external data sharing and comply with the law. Ian Cohen stresses the importance of establishing awareness campaigns and fostering transparency and visibility among third parties.

In today’s episode of She Said Privacy/He Said Security, Jodi and Justin Daniels host Ian Cohen, Founder and CEO of Lokker, to discuss protecting consumer data from third-party access. Ian explains how Lokker collects and analyzes data, discusses the compliance challenges of third-party data, and offers advice on third-party data sharing.