Operationalizing Privacy: A Blueprint for Success

Written by Jodi Daniels on June 20, 2024

Aaron Mendelsohn is currently Director – Privacy Officer at the LEGO Group in Denmark, where he leads data protection and privacy compliance within the Digital Technologies teams, including LEGO.com, LEGO Insiders, LEGO Marketing, and LEGO Retail. Prior to joining the LEGO Group, Aaron held leadership roles in data protection, privacy, and information security, including creating and managing global data protection and privacy programs at two Fortune 500 companies.

Here’s a glimpse of what you’ll learn:

  • Aaron Mendelsohn’s career journey and why he became a privacy officer
  • What operationalizing privacy means to Aaron and his approach to it
  • Thoughts on the misconception that privacy software alone is sufficient for operationalizing privacy
  • Insights on what makes a successful privacy professional in any organization
  • Importance of tailoring privacy training sessions to specific roles and departments
  • Aaron’s top personal privacy tip

In this episode…

Establishing a functional privacy framework within an organization is crucial for maintaining compliance and safeguarding data. It goes beyond simply adhering to legal regulations. Effective privacy management involves understanding how privacy laws and privacy initiatives work together to impact overall business operations. So, how can companies seamlessly integrate privacy into their day-to-day activities?

Customizing privacy objectives to align with a company’s individual needs, culture, and risk profile is imperative. To be successful in this approach, privacy professionals must be flexible and strategic, tailoring their strategies to align with organizational priorities through comprehensive policies, privacy-by-design programs, training, and other initiatives.

In today’s episode of She Said Privacy/He Said Security, Jodi and Justin Daniels welcome Aaron Mendelsohn to discuss practical strategies for operationalizing privacy within organizations. Aaron emphasizes integrating people, processes, and technology to achieve effective privacy management. The discussion also underscores the value of targeted privacy training tailored to specific business roles and how privacy professionals can successfully adapt and evolve privacy strategies as business needs change.

Resources Mentioned in this episode

Episode Summary with Aaron Mendelsohn

Aaron Mendelsohn 2:45
"Thank you, Jodi. Thank you, Justin, for having me this afternoon."

Aaron Mendelsohn discusses how he began his career in IT and information security almost 20 years ago and emphasizes the need for privacy professionals to adapt their strategies to align with organizational priorities and culture.

Jodi Daniels shares her perspective about privacy operations and how it should integrate into everyday business functions, moving beyond merely having policies in place.

Aaron Mendelsohn emphasizes that software is just one piece of a successful privacy program and that effective privacy management requires a combination of people, processes, and technology. He also suggests that targeted in-person training tailored to specific roles provides the most effective learning experience for employees.

Best Personal Privacy Tip

According to Aaron, the best personal privacy tip is to use a strong password manager. This not only simplifies managing numerous passwords but also enhances security by minimizing the risks associated with password reuse.

Conclusion

In this episode, listeners will gain insights into the importance of integrating privacy into the fabric of organizational culture, emphasizing the need for flexibility and understanding tailored to unique company dynamics.

For more practical strategies on operationalizing privacy and to learn from industry leaders like Aaron, connect with him on LinkedIn or follow his newsletter.