エピソード

  • Privacy by Design: Making Consent Meaningful

    Privacy by Design: Making Consent Meaningful
    2026/10/15

    Privacy notices, cookie banners, and consent forms are often treated as compliance checkboxes, but do users really understand them?


    In this episode of the FIT4Privacy Podcast, Punit and Erin explore how privacy, compliance, and user experience can work together to build trust. Learn why the timing of consent matters, how to present privacy information in simple and meaningful ways, and why the best privacy experiences are delivered now users need them most.


    Discover practical examples of just-in-time notices, granular privacy controls, preference centers, and user-friendly communication that help organizations meet compliance requirements while creating a better customer experience.


    🎧 Listen to the full conversation on YouTube, Spotify, or Apple Podcasts by searching FIT4Privacy Podcast.


    Resources & Links

    Guest Links

    Erin Rollenhagen

    • LinkedIn: https://www.linkedin.com/in/erin-rollenhagen-b4b7317/ , https://www.linkedin.com/company/people-friendly-tech/

    Grow Skills (Privacy Courses & Insights)

    • Courses: https://growskills.store/courses/

    • Insights: https://growskills.store/insights/

    • Website: https://growskills.store/

    FIT4Privacy

    • Website: https://www.fit4privacy.com

    • Podcast: https://www.fit4privacy.com/podcast

    • Blog: https://www.fit4privacy.com/blog

    • YouTube: http://youtube.com/fit4privacy


    Punit Bhatia

    • Website: https://www.punitbhatia.com

    Books

    • Be Ready for GDPR

    • AI & Privacy – How to Find Balance

    • Intro to GDPR

    • Be an Effective DPO

    続きを読む 一部表示
    6 分
  • What Does an AI Governance Professional Actually Do E175

    What Does an AI Governance Professional Actually Do E175
    2026/10/08
    What is AI governance? Who is an AI governance professional? How is AI governance different from ISO/IEC 42001, privacy compliance, or the EU AI Act? KEY MOMENTS 02:20 - How do you see this world of AI changing so fast? 5:20 - AI Governance Concept 12:20 - AI Governance Professional Definition 15:33 - Skills Framework and Roles 19:41 - Why AIGP Not Regional Like CIPP 27:37 - Why Get AIGP Certified 32:25 - How to Connect and Wrap Up In this episode of the FIT4Privacy Podcast, host Punit Bhatia welcomes Ashley Casovan, Managing Director of the IAPP AI Governance Center, to explore the rapidly evolving world of AI governance. Ashley shares her journey from developing Canada's pioneering guidance on automated decision-making systems to leading global conversations on AI governance, professional skills, and responsible AI practices. Together, they discuss why AI governance has become a critical discipline, how organizations can manage AI risks and opportunities, and what professionals need to know to succeed in this emerging field. Whether you're a privacy professional, compliance officer, AI practitioner, risk manager, auditor, or business leader, this episode provides valuable insights into building trustworthy, responsible, and effective AI governance programs. 🎧 Listen now to understand how organizations can turn responsible AI principles into practical governance frameworks. ABOUT THE GUEST As the managing director of the IAPP’s AI Governance Center, Casovan serves as the primary thought leader and public voice for the IAPP on AI governance, while providing strategic direction and contributions to the development of practical, relevant and timely content for the AIGC. Casovan will lead the AIGC engagement efforts with industry leaders, senior policy makers, regulators and international organizations to ensure AI governance is top of mind when discussing AI’s potential. Through roles in the public sector at the municipal and federal levels, Casovan developed expertise in responsible AI, standards, policy, open government and data governance. As the former director of data and digital for the government of Canada, Casovan previously led the development of the world’s first national government policy for responsible AI. Building from this work, Casovan served as the Executive Director of the Responsible AI Institute, a multi-stakeholder non-profit dedicated to mitigating harm from the use of AI systems, a member of OECD’s AI Policy Observatory Network of Experts, a member of the World Economic Forum's AI Governance Alliance, an Executive Board Member of the International Centre of Expertise in Montréal on Artificial Intelligence and as a member of the IFIP/IP3 Global Industry Council within the ABOUT THE HOST Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals. Resources & Links Guest Links Ashley Casovan • LinkedIn: https://www.linkedin.com/in/ashley-casovan-b3247211/ • Website: https://iapp.org/ Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/ • Website: https://growskills.store/ FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy Punit Bhatia • Website: https://www.punitbhatia.com Books • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO
    続きを読む 一部表示
    34 分
  • The Future of AI Challenges and Opportunities in Governance

    The Future of AI Challenges and Opportunities in Governance
    2026/10/01

    AI has changed the risk landscape faster than many organizations could have anticipated. But what does that mean for privacy, cybersecurity, ethics, and compliance professionals?


    In this episode of the FIT4Privacy Podcast, we explore how governance has evolved from data governance and privacy governance to the broader world of AI governance.


    The conversation looks at what AI governance really means, why privacy alone is no longer enough, and how organizations can balance innovation with risks around transparency, accuracy, ethics, cybersecurity, and societal impact.


    We also explore the evolution of AI governance before ChatGPT, lessons from Canada's approach to automated decision-making systems, and why organizations don't necessarily need another committee but do need a coordinated approach to managing AI risks.


    Tune in for a deeper conversation on AI, privacy, ethics, and the future of responsible governance.


    🎧 Catch the full episode on YouTube, Spotify, and Apple Podcasts.


    Resources & Links

    Guest Links

    Ashley Casovan

    • LinkedIn: https://www.linkedin.com/in/ashley-casovan-b3247211/

    • Website: https://iapp.org/

    Grow Skills (Privacy Courses & Insights)

    • Courses: https://growskills.store/courses/

    • Insights: https://growskills.store/insights/

    • Website: https://growskills.store/

    FIT4Privacy

    • Website: https://www.fit4privacy.com

    • Podcast: https://www.fit4privacy.com/podcast

    • Blog: https://www.fit4privacy.com/blog

    • YouTube: http://youtube.com/fit4privacy

    Punit Bhatia

    • Website: https://www.punitbhatia.com

    Books

    • Be Ready for GDPR

    • AI & Privacy – How to Find Balance

    • Intro to GDPR

    • Be an Effective DPO


    続きを読む 一部表示
    10 分
  • Does AI Create New Risks or Amplify Existing Ones E174

    Does AI Create New Risks or Amplify Existing Ones E174
    2026/09/24

    What happens when the CTO and CISO roles come together in one person?

    KEY MOMENTS

    2:14 New risks come up or amplify?

    3:12Copilot Rollout Risks

    6:50 How to prevent this scenario?

    9:20 AI Opportunity Mindset

    13:23 As a CISO CTO, how do they use AI on a regular basis?

    14:50 Starting use cases of AI

    18:55 What ProArch does?

    21:30 Conclusion

    In this episode, Punit Bhatia speaks with Ben Wilcox about balancing innovation and security in the age of AI. They explore whether AI introduces new risks or amplifies existing ones, and what organizations must consider when scaling tools like Microsoft Copilot.

    The discussion highlights the importance of data governance, access controls, and proper configuration to avoid unintended privacy risks. Ben also shares practical AI use cases from productivity gains to building agents and explains how organizations can start their AI journey responsibly.

    Overall, this episode offers a balanced view of AI as both an opportunity and a risk, with actionable insights for adopting it securely and effectively.

    ABOUT THE GUEST

    Ben Wilcox is the CISO and CTO at ProArch, where he leads cybersecurity strategy and cloud innovation for enterprise clients. With deep expertise in risk management, compliance, and AI-driven security, Ben helps organizations navigate evolving threats while building resilient, future-ready systems.

    ABOUT THE HOST

    Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.

    Resources & Links

    Guest Links

    Ben Wilcox

    • LinkedIn: https://www.linkedin.com/in/ben-wilcox/

    • Website: https://www.proarch.com

    Grow Skills (Privacy Courses & Insights)

    • Courses: https://growskills.store/courses/

    • Insights: https://growskills.store/insights/

    • Website: https://growskills.store/

    FIT4Privacy

    • Website: https://www.fit4privacy.com

    • Podcast: https://www.fit4privacy.com/podcast

    • Blog: https://www.fit4privacy.com/blog

    • YouTube: http://youtube.com/fit4privacy

    Punit Bhatia

    • Website: https://www.punitbhatia.com

    Books

    • Be Ready for GDPR

    • AI & Privacy How to Find Balance

    • Intro to GDPR

    • Be an Effective DPO

    続きを読む 一部表示
    23 分
  • AI Power, Threats & Responsibility E172

    AI Power, Threats & Responsibility E172
    2026/08/27
    What does responsible AI look like in practice? In this episode, we explore AI governance, AI risks, ethical AI, and how businesses can use artificial intelligence responsibly to create value without losing trust. KEY MOMENTS 02:33 What is the current state of AI? 06:32 What are the biggest AI risks and threats? 11:00 How can AI become a force multiplier? 15:17 What is the Global AI Association? 18:00 How to connect with the guest In this episode of the FIT4Privacy Podcast, host Punit Bhatia speaks with Pasquale Falconio from the Global AI Association about responsible AI, AI governance, generative AI, and the real business impact of artificial intelligence. They discuss where AI stands today, what makes AI risky, and how organizations can adopt AI in a way that is ethical, practical, and trustworthy.You will learn why AI itself is not the problem, why governance and human oversight matter, and how AI can support people as a super-assistant instead of replacing them. If you are interested in responsible AI, AI ethics, AI regulation, digital trust, or business transformation with AI, this conversation offers practical insights you can apply immediately.🎧 Listen now to discover how to use AI responsibly, manage AI risks, and unlock the value of artificial intelligence for business and society. If this episode helps you, subscribe to FIT4Privacy for more conversations on privacy, AI governance, and responsible innovation. ABOUT THE GUEST Pasquale Falconio was born in Italy and holds dual Italian and French citizenship. He currently resides in Nice, France. He holds a Master’s degree in Electronic Engineering, obtained in Rome, along with a Master’s in Innovation and a Master’s in Innovation and Entrepreneurship earned at HEC in Paris.Over the past years, Pasquale has specialized in machine learning and generative AI. He currently works for a leading company in data management and machine learning.His professional experience spans multiple countries, including Italy, Spain, Germany, and France, and covers a wide range of sectors such as satellite technology, media and broadcast industries and IT solutions for Life Science, in service and commercial-oriented roles. ABOUT THE HOST Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals. Resources & Links Guest Links Pasquale Falconio • LinkedIn: https://www.linkedin.com/in/pfalconio/ Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/ • Website: https://growskills.store/ FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy Punit Bhatia • Website: https://www.punitbhatia.com Books • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO
    続きを読む 一部表示
    23 分
  • Scaling Copilot Hidden Risks & Data Exposure

    Scaling Copilot Hidden Risks & Data Exposure
    2026/09/17

    Scaling Copilot: Hidden Risks & Data Exposure


    Most organizations are adopting Microsoft Copilot as a natural extension of their existing Microsoft environment, but scaling it is not as simple as assigning licenses.


    In this discussion, Punit Bhatia and Ben Wilcox explore what really happens when Copilot is introduced into environments with scattered data, unstructured information, and complex access permissions.


    They highlight how AI doesn’t create new risks but makes existing ones visible and usable. Copilot can surface data based on access rights even when those permissions were never properly reviewed.


    A real-world example shows how an employee unintentionally accessed a coworker’s personal improvement plan due to misconfigured permissions, turning it into a potential privacy breach.


    The conversation emphasizes that successful Copilot adoption requires proper data governance, clear access controls, and mechanisms such as data classification, sensitivity labeling, and encryption.


    This is not a plug-and-play exercise organization that must prepare their data before scaling AI.


    🎧 To catch the full discussion, search FIT4Privacy on YouTube, Spotify, or Apple Podcasts.

    Resources & Links

    Guest Links

    Ben Wilcox

    • LinkedIn: https://www.linkedin.com/in/ben-wilcox/

    • Website: https://www.proarch.com

    Grow Skills (Privacy Courses & Insights)

    • Courses: https://growskills.store/courses/

    • Insights: https://growskills.store/insights/

    • Website: https://growskills.store/

    FIT4Privacy

    • Website: https://www.fit4privacy.com

    • Podcast: https://www.fit4privacy.com/podcast

    • Blog: https://www.fit4privacy.com/blog

    • YouTube: http://youtube.com/fit4privacy

    Punit Bhatia

    • Website: https://www.punitbhatia.com

    Books

    • Be Ready for GDPR

    • AI & Privacy – How to Find Balance

    • Intro to GDPR

    • Be an Effective DPO


    続きを読む 一部表示
    6 分
  • AI Agents and Compliance Opportunity Without Losing Control E173

    AI Agents and Compliance Opportunity Without Losing Control E173
    2026/09/10

    What if AI could monitor your compliance controls 24/7 more consistently than any team ever could?


    KEY MOMENTS

    1:50 What are AI agents and why should business leaders care?

    5:24 Is that agent or limited capability agent?

    8:13 Is that the dimension this agent can go to?

    13:50 How can AI agents help?

    22:30 How to handle risks when it comes to AI agents?

    26:24 Dislike in the journey of entrepreneur

    In this episode of the FIT4Privacy Podcast, Punit Bhatia speaks with Richa Kaul, CEO of ComplYant, to unpack what AI agents really are and what they are not. They clarify the difference between true agentic AI and simple “call-and-response” tools, and explore how AI agents are transforming governance, risk, and compliance (GRC).

    This conversation goes beyond hype to offer practical, enterprise-ready insights on using AI responsibly in compliance.

    👉 Listen now and rethink how AI can support smarter, continuous compliance.

    ABOUT THE GUEST

    Richa Kaul is the Founder and CEO of Complyance, a privacy and compliance platform that helps companies simplify data protection and regulatory requirements. A seasoned leader in data privacy and governance, Richa is known for translating complex compliance challenges into practical, scalable solutions for modern businesses.

    ABOUT THE HOST

    Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.

    Resources & Links

    Guest Links

    Richa Kaul

    • LinkedIn:

    https://www.linkedin.com/in/richa-kaul/

    https://www.linkedin.com/company/complyancehq

    • Website: https://www.complyance.com/

    Grow Skills (Privacy Courses & Insights)

    • Courses: https://growskills.store/courses/

    • Insights: https://growskills.store/insights/

    • Website: https://growskills.store/

    FIT4Privacy

    • Website: https://www.fit4privacy.com

    • Podcast: https://www.fit4privacy.com/podcast

    • Blog: https://www.fit4privacy.com/blog

    • YouTube: http://youtube.com/fit4privacy

    Punit Bhatia

    • Website: https://www.punitbhatia.com

    Books

    • Be Ready for GDPR

    • AI & Privacy – How to Find Balance

    • Intro to GDPR

    • Be an Effective DPO

    続きを読む 一部表示
    29 分
  • Real Use Cases of AI Agents

    Real Use Cases of AI Agents
    2026/09/03

    Real Use Cases of AI Agents

    AI in compliance beyond theory.


    What can AI agents really do?


    In this episode from the FIT4Privacy Podcast, we move from concepts to concrete use cases highlighting how AI agents are already transforming compliance into practice. From continuous 24/7 control monitoring to automating third-party risk assessments, the shift is clear.


    No more periodic checks. No more chasing vendors. Instead, organizations gain continuous oversight, deeper insights, and real risk visibility.


    The conversation also highlights an important transition: compliance teams moving from operational tasks to strategic decision-making.


    👉 Listen to see how AI agents are turning compliance into a proactive, continuous function.

    Resources & Links

    Guest Links

    Richa Kaul

    • LinkedIn:

    https://www.linkedin.com/in/richa-kaul/

    https://www.linkedin.com/company/complyancehq

    • Website: https://www.complyance.com/

    Grow Skills (Privacy Courses & Insights)

    • Courses: https://growskills.store/courses/

    • Insights: https://growskills.store/insights/

    • Website: https://growskills.store/

    FIT4Privacy

    • Website: https://www.fit4privacy.com

    • Podcast: https://www.fit4privacy.com/podcast

    • Blog: https://www.fit4privacy.com/blog

    • YouTube: http://youtube.com/fit4privacy

    Punit Bhatia

    • Website: https://www.punitbhatia.com

    Books

    • Be Ready for GDPR

    • AI & Privacy – How to Find Balance

    • Intro to GDPR

    • Be an Effective DPO

    続きを読む 一部表示
    7 分