Building Cross-Functional Privacy & Risk Councils: Kirsten Daru at The 2024 DataGrail Summit
Data privacy is a business challenge, not a one-off issue to be tackled in isolation. Building a robust privacy program rooted inΒ ...
General Counsel & Chief Privacy Officer, Netgear
Search every verified Kirsten Daru interview, podcast appearance, and on-the-record quote β each transcript cross-checked by AI and human review to confirm speaker identity. Kirsten Daru, General Counsel and Chief Privacy Officer at Netgear, spoke at the 2024 DataGrail Summit about building cross-functional privacy and risk councils. Daru described her experience as the first privacy counsel at Electronic Arts in 2008 and later as a general counsel, where she realized that privacy and governance required a broader approach. She advocated for creating a council of cross-functional leaders to make strategic decisions about data and AI, aiming to "unleash the power and value of data and AI while maintaining trust and minimizing risk." Daru emphasized that such councils should use a principles-first framework, be engaging for stakeholders, and include open forums to drive alignment and surface risks. Daru stated that privacy and AI are among the most challenging legal disciplines because they involve ethics, integrity, morality, and trust. She noted that a successful privacy council requires a definition and governance framework, the right people, and the right focus. Daru also highlighted the importance of embracing dissent, as it ensures a program serves the company's best interests and adapts to evolving law, technology, and consumer expectations. She concluded that governance today requires a mindset shift toward proactive change and that a simple framework allowing leaders to contribute meaningfully is key to success.
“Privacy and AI are the most challenging legal disciplines in existence hands down because they're about not just law but ethics, integrity, morality, and trustβtrust of a company's most important stakeholders: employees, customers, investors, shareholders, and partners.”
“Unlocking the potential and value of AI and data requires a lot of insight that no one privacy lawyer, IT pro, or even a team of those people can do on their ownβyou need a lot of perspective from across the organization.”
“A privacy council is a governance body charged with developing privacy-related policies to ensure legal obligations are met and risk is minimized throughout the enterprise.”
“I needed to make the privacy council exciting and engaging for stakeholders, so I redefined it as an exclusive team of cross-functional leaders charged with making strategic decisions to unleash the power and value of data and AI while maintaining trust and minimizing risk.”
“A successful privacy council needs three things: a definition and governance framework, the right people in the room, and the right focus.”
“Open forums drive alignment; bringing smart, talented leaders together to openly share thoughts and gain alignment according to a simple framework creates advocates and allies who help on the mission and surface ideas and risks that otherwise wouldn't be identified.”
“Embracing dissent is the most important but practically difficult part of a privacy program because well-meaning and reasonable dissenting feedback ensures the program serves the best interest of the company and adapts as law, technology, and consumer expectations evolve.”
“When people started asking themselves without me or my team, 'We can do this, but should we?' I knew the privacy council had created a tectonic shift and achieved what I had been working so hard to accomplish for so long.”
“The landscape of governance today requires more than just compliance; it requires a shift of mindset and a proactive approach to change, recognizing that change is the only constant and evolution is inherent within it.”
“Privacy and AI are very hard, and we don't have to do it by ourselves; a simple framework that gives opportunities for leaders within your company to meaningfully contribute on their own terms is the biggest key to success.”
Data privacy is a business challenge, not a one-off issue to be tackled in isolation. Building a robust privacy program rooted inΒ ...
Sign in to search the full transcript archive, filter by topic, and access every quote from Kirsten Daru.
The summary and quote tags on this profile are produced with AI assistance from verified, first-person interview transcripts, then checked by our team to confirm the speaker's identity and the accuracy of every quote. See how we verify →