From Compliance to Strategy with Fenwick & West

Summary

What happens to a privacy program after it declares itself ready for GDPR? According to Marcus Morissette, a privacy lawyer at Fenwick & West who was a CIPP before there were slashes, most of them stop evolving. Host Ethan Prete sits down with Marcus to unpack privacy 2.0, where compliance is table stakes and the real job is getting the business to its goals inside the company’s risk appetite.

Marcus explains why:

• He told his eBay team never to say no and never to say yes
• The enforcement everyone feared turned out to be security’s problem
• The next generation of privacy lawyers has to understand technology
  • Hashing
  • Encryption
  • Why no US law contains the word cookie

He also walks through:

• Maslow’s hierarchy of data
• The four-layer pyramid he built with Aaron Weller at Concise Consulting
• The CIPA consent banner trap
• An AI drone use case that sounds like science fiction
• Hiring for business acumen over law degrees
• How to make a company regulator-proof.

Essential listening for privacy professionals, marketers, and anyone deciding where privacy should sit in the org.