Summary
What do you do when privacy rights create a challenge your existing process was never designed to handle? Host Ethan Prete sits down with Pari Sarnot, a Privacy, Risk & Governance Leader with experience across organizations including Meta, Grant Thornton, eBay, and Microsoft, as well as an IAPP instructor and mentor. Pari shares an example from her broader professional experience involving a growing volume of GDPR access requests for customer service call recordings, and the privacy, operational, employee, and governance considerations that followed. She walks through how a cross-functional team evaluated multiple options and ultimately aligned the retention period more closely with the underlying business needs. Pari also discusses her approach to structured decision-making, why privacy is a team sport, the importance of cross-functional relationships, using metrics to anticipate operational challenges, and considerations around AI transparency and governance.