# Let’s Get Technical: Talking Privacy With Your CISO

**Brandon Greenwood** CISO, Overstock (Now known as Bed Bath & Beyond)  
**Jonathan Agha** CISO, FanDuel

By 2024, 75% of the world’s population will have privacy rights, but many organizations are still in the early stages of building comprehensive data privacy programs. Regardless of where privacy resides in an organization, it’s a technical challenge that needs security team support. Overstock’s Brandon Greenwood and Fanduel’s JJ Agha will unpack data privacy’s technical challenges and discuss how to speak with security teams about building lasting privacy programs that reduce overall business risk.

[Presentation slides](/content/summit/sessions/lets-get-technical-talking-privacy-with-your-ciso/#/index.html)

## Discussion Highlights

**JJ Agha (00:09):**  
This was the session that was brought up, a conversation I had with a bunch of general counsels. They're asking me and the panelists, "Well, what do we need to know as GCs and data privacy officers? How do we actually connect with my CISO or security program?" Do I need to be very technical? How does my CISO understand the compliance and regulations that I need to support? This is our conversation about how we bridge the gap in our companies.

**Brandon Greenwood (01:33):**  
I'll just give a quick story here, very brief, when we were first discussing this slide specifically. I don't know if you've talked with folks who either have at their organization a DPO, or have discussed this with the Spidey pointing at each other.

**JJ Agha (02:20):**  
I think at the end of the day it's whoever pulls the short straw becomes the DPO. Over the last four years we saw the explosion go from, we care about privacy, GDPR was that kickoff, go from 10 to I think 75% on the screen.

**Brandon Greenwood (03:12):**  
How do we do them? The scale sometimes isn't as great as maybe what we're looking at here, but these are all considerations and factors we need to think about when putting together the privacy program and working with our peers in the organization.

**JJ Agha (03:51):**  
So, you're saying I cannot throw money at the problem?  
**Brandon Greenwood (03:53):**  
You can, I just don't know how efficient it'll be.

**JJ Agha (03:56):**  
What about AI?  
**Brandon Greenwood (03:58):**  
AI will work.

**JJ Agha (04:47):**  
It does feel like we're squeezing Jell-O because no one really owns the problem.

**Brandon Greenwood (05:28):**  
The Jell-O goes everywhere. Nobody's going to be able to get their hands around it.

**JJ Agha (06:07):**  
When we transition to the next slide, our assets now, both on a technical side, are no longer owned by us.

**Brandon Greenwood (06:25):**  
The cloud paradox, essentially I think the slide speaks for itself, very much like the Jell-O. Where is the PII? Where is the other maybe IP that we need to be worried about?

**JJ Agha (08:48):**  
To add on to that, when you look at the cloud paradox, it becomes, again, what do I prioritize?

**Brandon Greenwood (10:11):**  
What are our assets? Who has access to what assets?

**JJ Agha (11:17):**  
There really is no silver bullet on solving this of just slapping the technology on and saying this has solved for this.

**Brandon Greenwood (14:37):**  
The technology problem being the enablement. If we didn't have the technology, would the problem be as big as it is today?

**JJ Agha (16:40):**  
When you look at privacy, privacy is a risk that we want to deduce and reduce for us.

**Brandon Greenwood (28:05):**  
That is a nightmare to deal with. I've dealt with it multiple times.

**JJ Agha (30:27):**  
We automated much of that with some tools that we might be here for today as part of that process on our side to make it a lot easier.

**JJ Agha (31:50):**  
It's a team sport, so make sure you're all on the same playbook.

**Brandon Greenwood (40:43):**  
There's a lot of work that needs to be done. I don't think just in the technology and the security side, but the coordination with legal, coordination with other folks in the business who are going to help us get to that end state.