Privacy in Practice

The episode has a useful myths-as-framework structure and delivers a handful of genuinely substantive points - especially the CJEU inference-equals-sensitive-data implication and the AI-as-not-new framing - but there is significant padding, host editorializing, and several segments that restate the obvious for privacy-adjacent audiences. The density of novel ideas per minute is moderate, not high.

“what the CJU said is that certain personal data that can be used to give rise to an inference of sensitive data also counts as sensitive data”

“essentially, I think that all personal data is actually sensitive data in the age of AI inferences”

The privacy paradox, 'nothing to hide,' and GDPR-vs-state-laws myths are extremely well-trodden in the privacy community; the car-safety-and-innovation analogy is a standard regulatory-debate cliché. The claim that AI makes all personal data effectively sensitive is the freshest and most consequential idea in the episode, but it is not developed deeply.

“one of the myths about AI is that it's new. A lot of the issues that AI is raising are issues that have long been with us”

“Regulation steers companies to innovate in a different direction, but it doesn't stop innovation”

Daniel Solove is a genuinely top-tier privacy law academic - among the most cited scholars in the field, author of 10+ books, GWU law professor, and founder of a practitioner-focused training company - giving him real credibility. He is more scholar-practitioner than scale operator, which slightly limits direct business-decision applicability, but he is far from a generic thought-leader guest.

“He's the author of more than 10 books and is one of the most cited legal scholars in the field of law and technology”

“I got into this during law school in the mid-90s”

The episode contains several concrete anchors - the Target cotton-balls-and-soap inference story, a $6M negligent-design verdict against Meta and YouTube, the CJEU inference ruling, and the COPPA birthday-data example - but multiple claims are made without case names, company names, timelines, or enforcement figures, and the Target example is widely recycled.

“there's a recent verdict was $6 million jury verdict against Meta and YouTube for addictive design”

“a company just thought, hey, you know, it'd be cool to collect the birth dates of our users because we just want to wish them a happy birthday”

The hosts make a genuine effort to translate academic points into business implications and pivot the conversation toward operator takeaways, but they over-editorialize, frequently answer their own questions before the guest can respond, and the rapid-fire closing section truncates depth on several consequential myths; there is virtually no pushback or productive disagreement with Solove's positions.

“I'm thinking about this from the perspective of a company and I'm listening to your answers and I'm thinking about, well, what does that mean for this company?”

“I know I'm forcing you rapid fire, so I just, I'm cheating now. And adding a couple other sentences”