Masters of Privacy

Daniel “Dazza” Greenwood is the founder of CIVICS.com, a boutique provider of professional consultancy services for legal technologies, automated transactions, privacy and data management, and technology strategy. Dazza is also a researcher at MIT Media Lab and Lecturer at MIT Connection Science where he has been advancing the field of computational law and generative AI for law as Executive Director of law.MIT.edu.
Our guest serves as lead on the Data Rights Protocol initiative through Consumer Reports Digital Lab. This protocol provides a common open specification for enabling consumers and companies to process the exercise of individual data rights as a consumer-connected digital service.
Dazza Greenwood consults to Fortune 100 companies, architecting and building integrated business, legal and technology cross-boundary networks at industry scale. As an attorney, he served as both in-house and special counsel for technology law, representing corporations and governments. He has also testified before the US House, US Senate and other legislatures on electronic transactions law and consults extensively to the public sector.
References:
* Dazza Greenwood on LinkedIn
* Dazza Greenwood’s Substack
* CIVICS.com
* Data Rights Protocol: Standardizing consumers’ data rights requests (Consumer Reports)
* Uniform Electronic Transactions Act (1999)
* Authority Boundaries for AI (Dazza Greenwood, May 2026)
* LQAI from LegalQuants on Github (open source platform for law firms)
* Thirteen Words Shape Legal AI (Dazza Greenwood, September 2026)
* MIT Computational Law Report - Now part of Stanford Law School
* HOPE Lab, Hands-On Projects and Experimentation: Learn to work with agents across multiple stages, with clear goals, boundaries, and evidence of what worked.
* Interlateral (“Bring your own agent”), run by Dazza Greenwood: A space where people and their AI agents meet, coordinate, and build together over the web.
* Jamie Smith: AI Agents, digital identity, wallets and personal data (Masters of Privacy, December 2024).


This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe

Shannon Yavorsky is a Global Co-Chair of Orrick’s Cyber, Privacy & Data Innovation group and co-head of its AI practice. She advises leading companies on privacy, cybersecurity and AI regulation, governance, transactions and strategic risk management, helping clients translate fast-moving legal requirements into practical, business-focused solutions.
References:
* Shannon Yavorsky on LinkedIn
* Shannon Yavorsky at Orrick
* AI governance frameworks, comparison and overlaps (AI Sentinel docs): Thirteen widely used AI governance frameworks, including AIUC-1, AI Act, NIST, ISO, California ADMT, and more. Compared across fourteen dimensions.


This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe

How should we approach a Data Protection Impact Assessment or Privacy Impact Assessment in this new world? Are we recycling “mitigation measures” shamelessly? Are we drowning in futile DPIAs that were never really required?
Julian Gage is a fractional DPO and the founder of Engage Compliance. He has acted as an external DPO and EU representative for over 100 companies including Coinbase and Robinhood, as well as plenty of startups.
References:
* DPO Central: build a DPIA
* TODO.LAW: Run it your way
* Julian Gage on LinkedIn
* Engage Compliance
* EDPB: Template for a Data Protection Impact Assessment
* Nick Baskett: Mastering DPIAs (Masters of Privacy, July 2023)


This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe

Amy Lawrence is Chief Privacy Officer and Head of Legal at SuperAwesome, where she leads global privacy strategy for technology and media products designed for young audiences. An expert in youth privacy and digital regulation, Amy advises on building adtech services and responsible advertising in compliance with COPPA, GDPR, state privacy laws, and age-appropriate design codes. Previously, she was with Epic Games helping modernize the global privacy program and regulatory engagement.
Amy began her career in private practice, focused on privacy compliance in media and entertainment. She holds CIPP/US and CIPP/E certifications and is admitted to practice in California and New York.
References:
* Amy Lawrence on LinkedIn
* About SuperAwesome
* Meta agrees to pay $18 billion to settle US lawsuits over children’s social media addiction (Reuters, August 28th 2026). The company denied wrongdoing and agreed to restrict teenagers’ use of Facebook and Instagram ​to two hours a day and block all usage from midnight to 6 a.m., absent parental consent.
* Reddit issued with £14.47m fine for children’s privacy failures (ICO, February 24th 2026)
* Yoti: “Thoughts from our CEO: Spanish regulator AEPD fining Yoti” (€950,000, March 27th 2026)
* California AB-1043, Age verification signals: software applications and online services. The law enters into force on January 1st 2027, with OS providers (iOS, Android) required to collect a date of birth during the initial device or account setup, subsequently passing age signals to specific apps via API -consisting of age brackets.
* AI Sentinel: Future-Proof AI Governance (hosted on TODO.LAW, free)
* InScope (North End Law): Which privacy/AI laws apply to your company?


This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe

Rosalia Anna D’Agostino is an Italian Lawyer, Data Privacy and AI Compliance Expert, until recently working at the German law firm Spirit Legal. Fluent in five languages, she graduated in Comparative European and International law from the University of Trento (IT).
Rosalia completed a joint programme with the University of Birmingham in the UK and, together with fellow students, founded Legal4Tech, where she leads a podcast on Law and Technology, engaging with top experts in tech governance.
Our guest has gone quite deep into the legal analysis of LLMs and their outputs, class action lawsuits in the EU and the UK, social media platform algorithms and more.
References:
* Rosalia Anna D’Agostino on LinkedIn
* Legal4Tech: on Spotify, Apple Podcasts, LinkedIn
* Deepfake: Italian Data Protection Authority orders immediate stop to Clothoff, the app that undresses people (Garante, October 2025)
* 20M EUR fine for Clearview AI in Italy (Garante, December 2022)
* EU Digital Services Act
* Russmedia decision (December 2025, CJEU): liability as a data controller for user generated content on a platform, flying over safe harbor provisions for hosting providers (originally in the Ecommerce Directive, now in the DSA)
* Rahul Uttamchandani: a legal framework for Deep Fakes (Masters of Privacy ES, March 2023).


This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.mastersofprivacy.com/subscribe