.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
Steps to Take in Response to 23andMe Bankruptcy Filing
Hello all, and happy Thursday!
Read Now
.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
Hello all, and happy Thursday!
Privacy professionals—who at your organization has the biggest impact on your ability to do your job?
I’ll give you a hint. It’s not the CEO. It’s not your direct manager. It’s not even that one coworker who decided to microwave fish in the office (but if they’re around, you probably won't get any work done without a clothespin on your nose).
It’s the CFO. That might come as a surprise to you, but it’s true. And it’s kind of a big problem.
Your company’s top financial mind probably doesn’t understand data privacy. And odds are, you don’t understand business finance. That gap is a challenge for the efficacy of any privacy program, not to mention the business’s compliance posture and consumers’ rights.
Osano is pretty lucky. Although our CFO isn’t a privacy expert, he’s more sympathetic to privacy professionals’ needs and concerns than most. So, we thought we’d lend him out for an hour to answer any questions that privacy professionals might have for CFOs.
Have you ever wondered:
- How to get a bigger budget for data privacy?
- How to talk to your CFO in the language they understand?
- How to align privacy and business goals?
Then join us on February 20th. On this registration page, you’ll be able to sign up and submit your questions, and our CFO will answer them live.
In what might be the understatement of the year, CFOs are busy! You won’t want to miss this opportunity to quiz the person who holds the purse strings. Trust me: They have a heck of a lot more influence on your company’s actual compliance and privacy posture than you might think.
Best,
Arlo
Highlights from Osano
What's New?
Blog: Don’t Mess with Texas: The First Lawsuit Under a State Data Privacy Law
In a national first, Texas Attorney General Ken Paxton has filed a lawsuit against Allstate and its subsidiaries for violating the Texas Data Privacy and Security Act (TDPSA). It could be a signal of more data privacy enforcement in the US in 2025.
In Case You Missed It...
Blog: AI and Data Privacy: Exploring the Privacy Risks
You can’t have AI without data—and that means you can’t have AI without data privacy. What should privacy professionals and AI experts alike be aware of when it comes to the privacy risks of AI? Find out in this blog.
On-Demand Webinar: Getting Bang for Your Buck: Spending Your 2025 Privacy Budget Wisely
It's a new year, and for privacy teams, that means a new budget. The question is: How do you spend that budget to get the most bang for your buck? Osano's Chief Customer Officer, Skye McCullough, and Head of Privacy, Rachael Ormiston, break down where to focus your attention and your dollars in 2025.
Upcoming Webinars and Events...
Sex, Lies, and AI: Dating Apps & Privacy
A conversation about the world of dating apps and privacy, how it's changing, and whether we're ready for the future. We'll talk facts, share stories, have fun, and get to know our fellow privacy pros. As part of Osano's Women in Privacy series, which is aimed at elevating women's voices in the conversation surrounding the future of privacy, this event is only accepting attendees who identify as a woman.
Save Your Seat | February 12th
Ask the CFO Anything: Everything You Ever Wanted to Know (But Are Afraid to Ask)
Like so many other professionals, privacy professionals are constrained by the resources at their disposal. Getting buy-in and budget seems like it’s an impossible task. There seems to be an impossible gap between what financial decision-makers see and what privacy professionals need. This webinar serves as the rare opportunity for privacy pros to ask the Osano CFO—someone with a foot in both the finance and privacy worlds—anything on their mind.
Register and Submit Your Questions | February 20th
Top Privacy Stories of the Week
DeepSeek Exposes Database with over 1 Million Chat Records
DeepSeek, the Chinese AI startup known for its competitive chatbot, has publicly exposed two databases containing sensitive user and operational information. The databases reportedly held over a million log entries containing user chat history in plaintext form, API keys, backend details, and operational metadata. Security firm Wiz Research discovered this exposure during a security assessment of DeepSeek's external infrastructure.
Trump’s Privacy Watchdog Purge Threatens EU-US Data Transfer Framework
By ousting three democratic members of the Privacy and Civil Liberties Oversight Board, Trump may have jeopardized the EU-US Data Transfer Framework. This agreement was the result of nearly a decade of negotiations and court fights over data flows between the EU and US and their separate data processing policies. Max Schrems and the privacy advocacy group noyb (or “none of your business”)—who were involved in many of those legal battles—have stated that the Trump administration’s direction is “really not looking good.”
Musk’s DOGE Takeover of the Treasury Represents a Massive Privacy and Security Breach
Democratic lawmakers and government watchdog groups are pledging to fight back against Elon Musk’s takeover of the federal government's payment system, which they say may be the biggest privacy and security breach in American history. Workers at the Department of Government Efficiency, or DOGE, spent the weekend accessing the Treasury Department’s massive federal payment system, said Senator Ron Wyden, including “the personal information of hundreds of millions of Americans, bank accounts and tax data, Social Security numbers and home addresses.”
DeepSeek and Data Protection: Recommendations from Luxembourg’s Data Privacy Watchdog
Luxembourg’s National Commission for Data Protection (CNPD) recently issued guidance aimed at raising awareness around privacy risks associated with using the DeepSeek artificial intelligence tool. Although this generative AI model is freely available on the Internet, it has not been designed for European consumers. The CNPD warns that data entered by users will be recorded, transferred, stored, or analyzed without a clear data protection framework.
Colorado’s AI Task Force Issues a Report and Recommendations for the Colorado Legislature
Colorado's Artificial Intelligence Impact Task Force recently submitted a report summarizing its work and recommendations regarding protections for consumers and workers from artificial intelligence systems and automated detection systems. The report identifies areas where the Colorado AI Act could be improved or clarified.
Like what you hear from the Privacy Insider newsletter?
There's more to explore:
🎙️The Privacy Insider Podcast
We go deeper into additional privacy topics with incredible guests monthly. Available on Spotify or Apple.
📖 The Privacy Insider: How to Embrace Data Privacy and Join the Next Wave of Trusted Brands
The book inspired by this newsletter: Osano CEO, Arlo Gilbert, covers the history of data privacy and how companies can start building a privacy program from the ground up. More details here.
If you’re interested in working at Osano, check out our Careers page!