Masters of Privacy

How should we approach a Data Protection Impact Assessment or Privacy Impact Assessment in this new world? Are we recycling “mitigation measures” shamelessly? Are we drowning in futile DPIAs that were never really required?
Julian Gage is a fractional DPO and the founder of Engage Compliance. He has acted as an external DPO and EU representative for over 100 companies including Coinbase and Robinhood, as well as plenty of startups.
References:
* DPO Central: build a DPIA
* TODO.LAW: Run it your way
* Julian Gage on LinkedIn
* Engage Compliance
* EDPB: Template for a Data Protection Impact Assessment
* Nick Baskett: Mastering DPIAs (Masters of Privacy, July 2023)


This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe

Amy Lawrence is Chief Privacy Officer and Head of Legal at SuperAwesome, where she leads global privacy strategy for technology and media products designed for young audiences. An expert in youth privacy and digital regulation, Amy advises on building adtech services and responsible advertising in compliance with COPPA, GDPR, state privacy laws, and age-appropriate design codes. Previously, she was with Epic Games helping modernize the global privacy program and regulatory engagement.
Amy began her career in private practice, focused on privacy compliance in media and entertainment. She holds CIPP/US and CIPP/E certifications and is admitted to practice in California and New York.
References:
* Amy Lawrence on LinkedIn
* About SuperAwesome
* Meta agrees to pay $18 billion to settle US lawsuits over children’s social media addiction (Reuters, August 28th 2026). The company denied wrongdoing and agreed to restrict teenagers’ use of Facebook and Instagram ​to two hours a day and block all usage from midnight to 6 a.m., absent parental consent.
* Reddit issued with £14.47m fine for children’s privacy failures (ICO, February 24th 2026)
* Yoti: “Thoughts from our CEO: Spanish regulator AEPD fining Yoti” (€950,000, March 27th 2026)
* California AB-1043, Age verification signals: software applications and online services. The law enters into force on January 1st 2027, with OS providers (iOS, Android) required to collect a date of birth during the initial device or account setup, subsequently passing age signals to specific apps via API -consisting of age brackets.
* AI Sentinel: Future-Proof AI Governance (hosted on TODO.LAW, free)
* InScope (North End Law): Which privacy/AI laws apply to your company?


This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe

Rosalia Anna D’Agostino is an Italian Lawyer, Data Privacy and AI Compliance Expert, until recently working at the German law firm Spirit Legal. Fluent in five languages, she graduated in Comparative European and International law from the University of Trento (IT).
Rosalia completed a joint programme with the University of Birmingham in the UK and, together with fellow students, founded Legal4Tech, where she leads a podcast on Law and Technology, engaging with top experts in tech governance.
Our guest has gone quite deep into the legal analysis of LLMs and their outputs, class action lawsuits in the EU and the UK, social media platform algorithms and more.
References:
* Rosalia Anna D’Agostino on LinkedIn
* Legal4Tech: on Spotify, Apple Podcasts, LinkedIn
* Deepfake: Italian Data Protection Authority orders immediate stop to Clothoff, the app that undresses people (Garante, October 2025)
* 20M EUR fine for Clearview AI in Italy (Garante, December 2022)
* EU Digital Services Act
* Russmedia decision (December 2025, CJEU): liability as a data controller for user generated content on a platform, flying over safe harbor provisions for hosting providers (originally in the Ecommerce Directive, now in the DSA)
* Rahul Uttamchandani: a legal framework for Deep Fakes (Masters of Privacy ES, March 2023).


This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe

Carissa Véliz is an Associate Professor in Philosophy at the Institute for Ethics in AI, and a Fellow at Hertford College at the University of Oxford. She is the recipient of the 2021 Herbert A. Simon Award for Outstanding Research in Computing and Philosophy.
Our guest is the author of Prophecy, now longlisted for the Financial Times business book of the year (2026), as well as the editor of the Oxford Handbook of Digital Ethics. Her previous book, Privacy is Power, was chosen by The Economist as one of the best books of the year in 2020.
Carissa advises companies and policymakers around the world on privacy and the ethics of AI, and is a member of UNESCO’s Women 4 Ethical AI.
References:
* Breakfast Workshop - Santa Monica, CA - September 2, 2026 (free for MoP subscribers)
* Prophecy: Prediction, Power, and the Fight for the Future, from Ancient Oracles to AI (Amazon)
* Carissa Véliz on Substack (The Antidote)
* Gary Marcus: Even more good news for the future of neurosymbolic AI (Substack, April 2026)
* Refresher (January 28th special, Masters of Privacy): Data Protection vs. Privacy and Data Privacy (with Carissa Véliz, Gabriela Zanfir-Fortuna, Brendan Quinn, Tim Turner, and Markus Wünschelbaum)
* Carissa Véliz: privacy is power (Masters of Privacy ES, Oct 2021 - Spanish)
* Install the TODO.LAW suite on your own device (Dealroom, DPO Central, AI Sentinel).
Send us your questions, feedback, or report requests (InScope, AuditScan) to: info[@]northend.law.


This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe

Professor Solove returns to discuss the fundamental flaws of “informed consent” and explore viable alternatives in the quest for true individual privacy.
Daniel J. Solove is the Bernard Professor of Intellectual Property and Technology Law at the George Washington University Law School. He is the co-director of the GW Center for Law & Technology. One of the world’s leading experts in privacy law, Solove is the author of 10+ books, 100+ articles, and a children’s fiction book about privacy. His latest book is “On Privacy and Technology”.
References:
* Daniel J. Solove on Substack
* Daniel J. Solove on LinkedIn
* Daniel J. Solove on Bluesky
* Daniel J. Solove’s personal page
* On Privacy and Technology: Oxford University Press, Amazon
* Murky Consent: An Approach to the Fictions of Consent in Privacy Law, (Daniel J. Solove, August 2023)
* Orwell vs. Huxley: Which Dystopia Was More Prescient? (Daniel J. Solove, June 2026)
* How to Maintain Our Privacy in the AI Age (Daniel J. Solove, June 2026).


This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe