Advertise on podcast: We Get Privacy

#WeGetPrivacy #RecruitmentFraud #AI #DataPrivacy #CyberSecurity Fake applicants, fraudulent recruiters and AI-enabled deception are creating real-time security, compliance and reputational risks for employers. We Get Privacy cohosts Damon Silver and Joe Lazzarotti examine the issues from both sides of the hiring process, providing practical steps employers can take to verify candidates, strengthen safeguards and third-party relationships, and respond effectively when suspicious conduct arises. Chapter 0:00 Cold open 0:54 Welcome to We Get Privacy 1:55 Today's question: recruitment fraud 2:54 Fake hires and insider threats 4:18 Scammers posing as recruiters 5:23 North Korean remote IT worker schemes 6:40 OFAC sanctions and breach fallout 7:42 How impersonation scams surface 8:48 Spoofed emails and look-alike branding 10:43 Building a response program 11:12 Vetting your recruiting process 12:06 Résumé red flags 13:06 Identity verification and biometrics 14:38 Warning job seekers on your careers page 16:07 Scanning for misuse and requesting takedowns 16:58 A fraud response playbook 17:45 Limiting access for remote hires 18:40 Monitoring for unusual activity 19:51 Investigating suspected bad actors 21:53 Reporting to law enforcement 22:35 Wrap-up

AI-enabled threats are rapidly outpacing traditional cybersecurity defenses, creating increasingly sophisticated risks to an organization’s data and systems. Podcast co-hosts Joe Lazzarotti and Damon Silver offer practical strategies for protecting sensitive data against AI-generated incidents through data minimization and mapping, access controls, vendor management, incident response and other strategies.

#AIContracts #AIGovernance #DataPrivacy #RiskManagement #LegalCompliance Companies negotiating AI-related contract provisions increasingly have to balance innovation flexibility with evolving regulatory rigidity. In this episode, co-hosts Joe Lazzarotti and Damon Silver discuss the AI clauses increasingly appearing in vendor and customer agreements and share practical strategies for negotiating them in alignment with a company’s AI governance program. Chapters 0:00 Introduction: AI Terms in Contracts 1:36 Where AI Contract Terms Appear 2:58 Can Your Organization Agree? 6:08 Scoping AI Use and Restrictions 10:48 Disclosure and Change Management 12:37 Narrowing Compliance Clauses 15:23 Materiality, Scope, and Execution 17:39 Audit Rights and Data Segregation 20:46 Insurance Coverage 22:29 Indemnification and Liability Caps 24:24 Subcontractor AI Use 25:23 Human Review Requirements 27:22 Closing Takeaways

#ArtificialIntelligence #AIProcurement #VendorRisk #AIContracts #DataPrivacy Companies expose themselves to significant legal, compliance and operational risks when contracting for or procuring AI technologies. In this episode of We Get Privacy, co-hosts Damon Silver and Joe Lazzarotti break down the AI-specific provisions — from disclosure obligations and data use to liability, audit rights and human oversight employers — that companies should address during vendor contracting. Chapters 0:00 Welcome and Episode Overview 1:15 The AI Procurement Question 2:19 Understanding How Vendors Use AI 6:09 Reviewing MSAs and DPAs 7:40 AI Recordkeeping Requirements 8:55 Vendor Data Use and Model Training 10:45 De-Identification and Re-Identification 11:39 AI Disclosure and Contract Definitions 13:52 Human Review and High-Risk Decisions 16:54 Liability and Indemnification 19:25 Colorado Law and Intended Use 21:47 Prompt Data and DPA Scope 23:45 Negotiating AI Audit Rights 24:55 Exercising Vendor Oversight 28:20 Closing Thoughts

From AI-assisted interviews, applicant scoring tools, dash cams, targeted advertising and employee productivity monitoring, CCPA risk assessment obligations can arise in unexpected places. Podcast cohosts Joe Lazzarotti and Damon Silver discuss common practices that may now trigger these California requirements and offer practical guidance for building risk assessments into existing compliance workflows.

New CCPA requirements are turning employers’ everyday data activity into potential compliance exposure. In this episode, Jackson Lewis Privacy, AI and Cybersecurity co-leaders Joe Lazzarotti and Damon Silver discuss the CCPA-defined “high-risk” activities that may trigger risk assessment obligations and offer practical guidance for building a workable assessment process, coordinating with vendors and documenting decisions in ways that supports compliance.

Integrating AI into hiring and other employment processes increasingly raises important legal and compliance risks — especially if those tools cross the line from supporting decisions to making them. In this We Get Privacy episode, Jackson Lewis principals Damon Silver and Joe Lazzarotti explore California’s new Automated Decision-Making Technology regulations and offer employers subject to its requirements some practical guidance on evaluating the roles of automated tools and human oversight.

#DataPrivacy #ArtificialIntelligence #Cybersecurity #TechRisk As AI-powered smart glasses and related emerging tech blur the line between everyday activity and constant data collection, organizations face growing privacy, security and compliance risks. In this episode, Jackson Lewis Privacy, AI and Cybersecurity co-leaders Damon Silver and Joe Lazzarotti clarify what these technologies are, why they’re raising red flags across industries, and how employers should respond.  Chapters 00:00 Introduction to AI Smart Glasses and Their Resurgence 02:46 What Are AI Smart Glasses and How Do They Work? 04:09 Privacy Risks and Ethical Concerns with Smart Glasses 05:25 Industry Responses and Bans on Smart Glasses 06:14 Legal Considerations for Recording and Data Collection 07:59 Challenges in Obtaining Consent and Managing Privacy 08:57 Regulatory Environment and Data Security in Different Sectors 10:01 Employer Policies and Banning Smart Glasses in the Workplace 11:06 Balancing Benefits and Risks of Smart Glasses in Business 11:45 Future Outlook and the Need for Governance and Controls 12:56 Conclusion and Key Takeaways for Organizations

Escalating vendor cyber risk, tighter regulatory expectations and fast-moving AI-driven threats increasingly make checkbox diligence insufficient. In this episode, 360 Advanced’s Director of Compliance Strategy, Eric Ratcliffe, joins co-hosts Damon Silver and Joe Lazzarotti to discuss system and organizational control framework reports and how businesses can use them to address critical gaps and make vendor assessments.

As AI tools, workplace monitoring technologies, and data‑driven platforms expand, organizations face growing exposure from collecting, sharing, and retaining more data than they need for defined purposes. In this episode of We Get Privacy, Jackson Lewis Principals Joe Lazzarotti and Damon Silver, co‑leaders of the firm’s Privacy, AI, and Cybersecurity group, break down the data minimization principle and how organizations can use it to better manage data breach, class action litigation, and regulatory risk.

When an organization’s data systems are compromised, they face the daunting challenge of sorting through mountains of sensitive data under intense regulatory pressure. In this episode of We Get Privacy for Work, hosts Joe Lazzarotti and Damon Silver are joined by Matt Morocco, Director and Cyber Practice Lead at Consilio, to break down the real-world complexities of data mining after a breach. Together, they discuss why data mining is essential and how organizations can streamline the process for faster, smarter incident response.

In the event of the disclosure of business trade secrets, organizations are often so overwhelmed that they overlook potential data breach notification requirements. The potential exposure of trade secrets is increasingly becoming intertwined with the release of legally protected personal information, and it is incumbent on organizations to thoroughly respond to incidents.

Oftentimes, organizations view training simply as another obligation; however, tailored and hands-on privacy and cybersecurity training are essential to safeguard data and ensure operations run smoothly in the event of a breach.

Lured by the promise of better productivity and compliance with company policies, employee monitoring tools are gaining a lot of traction among employers. On this episode of We Get Privacy for work, we discuss the important privacy and legal implications that organizations must consider before implementing employee monitoring tools.

From timekeeping technologies to dash cams, the Illinois Biometric Information Privacy Act (BIPA) is now being used to challenge a number and variety of time-saving programs and tools. On this episode of We Get Privacy for work, we discuss the factors leading to the rise in BIPA cases.