x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified - CIPP/US Audio Course

The CIPP/US Audio Course is your complete, audio-first companion for mastering the Certified Information Privacy Professional – United States (CIPP/US) certification. Designed for learners who want structured, on-the-go preparation, this Audio Course transforms the IAPP Body of Knowledge into clear, engaging, and easy-to-follow episodes. Each lesson unpacks the foundations of U.S. privacy law—from federal and state frameworks to workplace regulations and cross-border data principles—helping you

education courses

All Episodes

23:26

Episode 38 — HIPAA Security Rule: Administrative,...

Certified - CIPP/US Audio Course ·

2025/09/08

Complementing the Privacy Rule, the HIPAA Security Rule sets standards for protecting electronic protected health information (ePHI). This episode breaks down its three safeguard categories: administrative, physical, and technical. Administrative safeguards include policies, risk analyses, and workforce training. Physical safeguards address facility access and workstation security. Technical safeguards cover encryption, access controls, and audit logs.By understanding these safeguards,

en

25:41

Episode 37 — HIPAA Foundations: Privacy Rule Overview

Certified - CIPP/US Audio Course ·

2025/09/08

The Health Insurance Portability and Accountability Act (HIPAA) remains one of the most significant federal privacy statutes. This episode explains the Privacy Rule, which establishes protections for protected health information (PHI). We’ll cover covered entities, business associates, permitted uses and disclosures, and the rights of individuals under HIPAA. This foundation is critical for understanding healthcare privacy.We also examine common compliance challenges, such as managing

en

24:46

Episode 36 — Future Priorities: Data Brokers, IoT,...

Certified - CIPP/US Audio Course ·

2025/09/08

Privacy law continues to evolve as technology advances. This episode highlights priority areas identified by regulators and policymakers, including the risks posed by data brokers, the proliferation of Internet of Things devices, the rise of artificial intelligence, and the expanding use of biometric identifiers. We’ll discuss why these areas raise unique concerns and how regulators are responding through enforcement, guidance, and proposed legislation.Anticipating future trends not only

en

25:35

Episode 35 — FTC Enforcement: Case Studies and...

Certified - CIPP/US Audio Course ·

2025/09/08

Enforcement brings theory into practice. In this episode, we review major FTC privacy and data security cases, highlighting recurring themes such as inadequate security, deceptive disclosures, and failure to honor stated practices. These case studies illustrate how the FTC frames violations and the remedies it imposes, from fines to compliance monitoring.We’ll also analyze settlement patterns, which provide insight into the agency’s priorities and evolving expectations. Understanding these

en

26:15

Episode 34 — COPPA: Children’s Online Privacy...

Certified - CIPP/US Audio Course ·

2025/09/08

Children’s privacy carries heightened protections in U.S. law. This episode introduces the Children’s Online Privacy Protection Act (COPPA), which governs the collection of personal information from children under 13. We’ll break down requirements such as verifiable parental consent, privacy notice disclosures, and limits on data use and sharing. Enforcement by the FTC has made COPPA one of the most visible privacy statutes.We’ll also discuss how COPPA interacts with emerging state laws

en

26:36

Episode 33 — FTC Authority: Section 5 and Consumer...

Certified - CIPP/US Audio Course ·

2025/09/08

The Federal Trade Commission is often described as the nation’s top privacy cop. This episode dives into Section 5 of the FTC Act, which prohibits unfair and deceptive acts or practices. We’ll examine how the FTC uses this authority to address privacy and data security, even without specific statutes. Notable cases have established expectations for transparency in privacy notices, promises about data handling, and reasonable safeguards against breaches.We also explore the FTC’s limitations,

en

27:01

Episode 32 — Domain II Overview: Federal vs. State...

Certified - CIPP/US Audio Course ·

2025/09/08

Domain II focuses on federal and state laws governing specific sectors such as health, finance, education, and telecommunications. This episode introduces the federal “sectoral” approach, where distinct statutes regulate different industries rather than one overarching law. We contrast this with state-level frameworks that increasingly take comprehensive approaches, such as California’s CCPA and CPRA. By examining this domain, you’ll learn how overlapping systems create both compliance

en

27:05

Episode 31 — Comparative Analysis: U.S. Privacy vs....

Certified - CIPP/US Audio Course ·

2025/09/08

This episode explores how U.S. privacy frameworks compare to the European Union’s General Data Protection Regulation (GDPR) and Switzerland’s Federal Act on Data Protection (FADP). We’ll review differences in scope, enforcement powers, and individual rights. While U.S. privacy law is fragmented across federal and state systems, GDPR and FADP establish comprehensive regimes that apply broadly across industries. We also highlight common principles such as purpose limitation, proportionality,

en

27:50

Episode 30 — Multinational Conflicts: E-Discovery vs....

Certified - CIPP/US Audio Course ·

2025/09/08

Privacy law collides with other legal obligations when organizations face multinational conflicts. This episode highlights the tension between U.S. e-discovery requirements in litigation and EU data protection laws that restrict data transfers. Companies must navigate competing demands, often under tight timelines, while minimizing the risk of penalties from either jurisdiction.We’ll discuss real-world strategies, such as anonymization, protective orders, and negotiated cross-border

en

28:56

Episode 29 — International Transfers: Schrems, SCCs,...

Certified - CIPP/US Audio Course ·

2025/09/08

U.S. companies regularly transfer data across borders, triggering international privacy obligations. This episode introduces the Schrems cases, which invalidated earlier EU-U.S. transfer mechanisms, and explains how Standard Contractual Clauses (SCCs) remain a cornerstone of compliance. We also cover the EU-U.S. Data Privacy Framework, designed to restore lawful transfer channels under stricter safeguards.By mastering these mechanisms, you’ll understand how multinational organizations

en

30:21

Episode 28 — Online Privacy: Tracking, Profiling, and...

Certified - CIPP/US Audio Course ·

2025/09/08

The online environment presents unique privacy risks. This episode examines how tracking technologies, behavioral profiling, and targeted advertising shape consumer experiences and regulatory responses. We’ll explore how cookies, pixels, and mobile identifiers operate, and why transparency and consent requirements are central to online privacy frameworks.We also discuss how consumer expectations often outpace legal requirements, leading to reputational risks even when practices are

en

29:28

Episode 27 — Data Retention and Disposal: Lifecycle,...

Certified - CIPP/US Audio Course ·

2025/09/08

Data has a lifecycle, and managing it responsibly is critical for privacy compliance. This episode covers retention schedules that specify how long data must be kept, archival practices for historical or legal purposes, and secure disposal methods to prevent unauthorized access. We also explore the role of legal holds, which suspend deletion when litigation or investigations are pending.Balancing retention requirements with minimization principles is a recurring challenge in privacy

en

29:24

Episode 26 — Accountability Models: Demonstrating...

Certified - CIPP/US Audio Course ·

2025/09/08

Accountability is the thread connecting all privacy obligations. In this episode, we define accountability models as frameworks for demonstrating compliance through documentation, assessments, and governance structures. Examples include risk assessments, data protection impact assessments, and ongoing monitoring. These models serve as proof that an organization has taken reasonable steps to protect personal data.We’ll also discuss the exam-relevant principle that accountability is

en

31:34

Episode 25 — Incident Response Programs: Ransomware...

Certified - CIPP/US Audio Course ·

2025/09/08

Privacy law intersects with cybersecurity when incidents occur. This episode explains how organizations build incident response programs to address threats like ransomware, data breaches, and vendor security failures. We’ll cover the steps of detection, containment, investigation, notification, and remediation, highlighting where privacy law imposes specific obligations.We also look at how regulators evaluate incident response, from timeliness of notifications to adequacy of corrective

en

29:58

Episode 24 — Cloud and Third-Party Sharing:...

Certified - CIPP/US Audio Course ·

2025/09/08

Cloud services and third-party vendors introduce unique privacy challenges. This episode examines how processing agreements define roles and responsibilities between controllers and processors, including clauses on security, breach notification, and sub-processing. Due diligence processes—such as audits, questionnaires, and certifications—help ensure vendors meet contractual and regulatory requirements.We’ll also explore how cloud environments complicate data flows, requiring clear

en

31:12

Episode 23 — Privacy Program Development: Workforce...

Certified - CIPP/US Audio Course ·

2025/09/08

Building a privacy program is more than drafting policies—it requires embedding privacy into operations. In this episode, we cover workforce training, including how to tailor content for different roles and ensure employees understand their responsibilities. Vendor management is another core element, requiring organizations to assess risks, negotiate processing agreements, and monitor compliance. Together, these practices create the operational backbone of privacy governance.We’ll also

en

24:11

Episode 22 — Data Flow Mapping: Transfers, Sharing,...

Certified - CIPP/US Audio Course ·

2025/09/08

Data doesn’t stay put—it flows across systems, organizations, and borders. This episode explains how to map those flows, identify points of transfer, and implement controls that ensure compliance. We’ll discuss intra-organizational transfers, such as between departments or subsidiaries, and external flows to vendors, partners, or regulators. Accountability mechanisms, such as contractual clauses and data processing agreements, form the backbone of lawful transfers.We’ll also examine how

en

25:24

Episode 21 — Information Management: Data Inventory...

Certified - CIPP/US Audio Course ·

2025/09/08

Strong privacy programs begin with knowing what data you have. This episode covers how organizations build and maintain a data inventory, cataloging personal information across systems, applications, and vendors. We’ll explore how classification frameworks distinguish between sensitive and non-sensitive categories, and why these distinctions matter for regulatory compliance, contractual obligations, and internal risk management. Without clear visibility, organizations cannot fulfill

en

23:08

Episode 20 — Self-Regulatory Enforcement: PCI, Trust...

Certified - CIPP/US Audio Course ·

2025/09/08

Building on our earlier discussion of self-regulation, this episode focuses specifically on enforcement mechanisms. We’ll look at how programs such as the Payment Card Industry Data Security Standard (PCI DSS) enforce compliance through contractual obligations, and how privacy seals or trust marks maintain credibility through audits and monitoring. While not legally binding, these mechanisms often carry significant commercial weight, influencing consumer trust and partner

en

29:06

Episode 19 — Cross-Border Enforcement: GPEN and...

Certified - CIPP/US Audio Course ·

2025/09/08

Privacy enforcement is increasingly global. This episode introduces the Global Privacy Enforcement Network (GPEN), a collaboration of regulators worldwide who share information and coordinate investigations. We’ll explore how cross-border cooperation arises in cases involving multinational companies, data transfers, or online services with global reach.We also highlight the challenges of aligning different legal systems, enforcement priorities, and remedies. Understanding how international

en

98 results

Similar Podcasts

Science Talk

Albert Einstein College of Medicine

五分钟心理学

柠檬心理

Daily Facts

Amalia Dupray and Montgomery Jones.

Les dents et dodo

BFMTV

Veterinary Clinical Podcasts

The Royal Veterinary College