Compliance Detective

We were honored to participate in the Privacy Summit on tracking technologies, hosted by DenizBank, NEOHUB, and Efilli. ✅ Compliance Detective took center stage with a gamified workshop, which built upon a previous presentation by the NEOHUB team highlighting challenges in the martech ecosystem. Our workshop extended this conversation, focusing on developing privacy-by-design strategies specifically for martech within an enterprise context. 🔍 The workshop was structured as an investigative detective challenge: a simulated post-mortem analysis of a fictional fintech startup that experienced a significant data breach due to third-party SDKs in their mobile app. Three teams, representing marketing professionals, legal experts, and academia, competed to solve clues around dark patterns, data linkage attacks, and hidden web tracking detection. 🥳 A special thanks goes to Associate Prof Nafiye Yucedag, her insights and competitive spirit inspired both participants and audience members, elevating the experience for everyone. 🎁 This workshop was a fantastic opportunity to demonstrate the power of gamified learning to transform compliance training. Our Creative Privacy Framework, rooted in the early days of Hitchhikers Guide to Privacy Engineering and Privacy Quest, remains a timeless mission—especially now, as we integrate AI literacy and responsible AI practices into our training initiatives. Demet Keklikkıran, LL.M. Necati Namlı Riza Doruk Ercan Aziz Burak Uruş Emre Dönmez Gökay Berkay Aktaş Şefik Yunus Özcan Ercan Gumus Burak Özdemir LL.M.

📅 The EU AI Act has arrived. With the February 2nd deadline looming, companies must rise to the challenge of ensuring their teams are AI literate—or face the consequences. 🔍 But how? Boring lectures? Endless PowerPoints? Cheesy cartoons? No more. It’s time to gamify compliance. 🎁 Enter Compliance Detective, where compliance training turns into an interactive adventure. From digital quests to boardroom battles, your team embarks on a creative journey to master privacy and AI compliance while having fun. 🚀 📣 Shoutout to Didomi for hosting us on their The Privacy Soapbox blog series to discuss the future of compliance training! Big thanks to Thierry Maout and the team for consistently delivering top-notch content! Let the compliance games era begin. 🎮 https://lnkd.in/dk9NYUpq

📺 Watch this week's fireside chat episode from PQ Village : DPD24FEST where we sat down with Jay Averitt from Microsoft for an epic fireside chat on privacy engineering & AI governance. ✅ We covered everything from data minimization and AI opt-outs to cutting-edge tools like synthetic data, differential privacy, and IP challenges. Catch the full episode to dive deep into AI privacy reviews, third-party audits for bias, and the latest on AI governance tools. 🎥 : https://lnkd.in/dS2Jr5Vj #creativeprivacy #privacyengineering #AIGovernance

📺 This week's featured highlight from PQ Village Festival was an incredible fireside chat with Rebecca Balebako, where we dove into some fascinating topics around privacy red teams and privacy testing! 💡 During the session, Rebecca explained what a privacy red team is, how it conducts privacy testing, and emphasized the importance of using qualitative metrics and monitoring for privacy assurance. 🔍 We also discussed the decision-making process for investing in a privacy red team and clarified the distinction between privacy and security concerns. Rebecca shed light on the role of nation-state adversaries in privacy attacks and the likelihood of such incidents occurring. 🤖 Towards the end, we explored the challenges in AI governance, including fairness tradeoffs, insights from the NIST Open Call, and the emergence of AI red teams. https://lnkd.in/dPJrYXXf It was a truly enlightening conversation full of valuable insights! 00:00 - Intro 04:25 - What is a Privacy Red Team? 06:05 - Privacy Testing 07:20 - Qualitative Metrics 08:50 - Privacy Metrics Monitoring & Assurance 11:48 - When to invest in a Privacy Red Team? 12:19 - Privacy Adversaries 13:24 - Privacy vs. Security 14:18 - Nation State Adversaries 17:29 - Likelihood of Privacy Attacks 22:29 - AI Red Teams 23:59 NIST Open Call 27:20 - Challenges in AI Governance 28:43 - Fairness Tradeoffs 30:20 - Closing Remarks #privacyengineering

It’s been a while since the PQ Village Festival, a hub of creativity, privacy insights, and inspiring fireside chats. Let’s take a trip down memory lane with one of the standout moments—a quest walkthrough session accompanied by Kim Wuyts, where she took us on a deep dive into privacy threat modeling! Whether you missed it or want to relive the highlights, here’s your chance to jump back into the session. Enjoy! ⚔️ Main Quest: Privacy Threat Modeling Walkthrough Session with Kim Wuyts Join us for a puzzle walkthrough session on the Compliance Detective platform with Kim Wuyts, exploring privacy threat modeling in a fun-filled session in PQ Village. Both factions will learn the fundamental concepts behind threat modeling through a high-paced, cyberpunk-themed quest aimed at protecting cyborg rights activists in the CD Universe! 00:00 Intro 01:30 Kim Wuyts Background 05:10 Privacy Quest Platform 06:18 Privacy Threat Modeling Quest 07:45 Understanding the System Puzzle 11:03 Threat Actors Puzzle 15:47 Attack Trees Puzzle 17:44 Risk Mitigation Puzzle 19:00 Residual Risk Puzzle 21:15 Privacy Risk and Harms Puzzle I 22:23 Privacy Risk and Harms Puzzle II 24:03 LINDDUN Privacy Threat Modeling Puzzle 27:35 Risk Mitigation with PETs 29:55 Closing Remarks https://lnkd.in/d_5Aw9pA #creativecompliance #creativeprivacy #gamifiedcompliance

Greetings, PQ Villagers! 🎉 I’m excited to share some recent updates, including a brand-new simulator in addition to our existing Privacy CTF content and quests! I’ve also put together a mini devlog detailing what we’ve built so far. I can’t wait to hear your feedback and continue improving the game together. Thank you so much for your support, and stay tuned for early access!

Over this past weekend I joined fellow Privacy Professionals for an exciting experience, where we got an opportunity to network, learn and compete against each other, in teams, in a fun and engaging way. The highlight for me was my team winning in the digital Privacy Escape Room challenge; which had challenges on various real privacy issues organizations face, such as on Data Mapping, Data De-identification and Privacy Threat Modelling. The Data Protection and Privacy space is growing at an incredible pace and events such as these not only help equip professionals in this space with skills to tackle real life scenarios but also encourages and fosters cooperation between the players; especially lawyers and techies. I wish to thank the organisers, Cyber in Africa, Cephas J., and the team from Turkey, Compliance Detective and Mert Can Boyar, for an invaluable experience and developing such an awesome platform. Doesn't this platform look so cool? #DataPrivacy #DataProtectionKenya

𝐉𝐨𝐢𝐧 𝐭𝐡𝐞 𝐇𝐮𝐧𝐭! 𝐘𝐨𝐮, 𝐲𝐞𝐬 𝐲𝐨𝐮! 😎 𝐅𝐨𝐫 𝐭𝐡𝐨𝐬𝐞 𝐚𝐛𝐥𝐞 𝐭𝐨 𝐚𝐭𝐭𝐞𝐧𝐝 𝐩𝐡𝐲𝐬𝐢𝐜𝐚𝐥𝐥𝐲 𝐢𝐧 𝐍𝐚𝐢𝐫𝐨𝐛𝐢. Privacy Escape Room (PER) 2.0, is an immersive, teams-based, fun, and interactive privacy learning challenge that brings teams together in epic plot-based scenarios that has them go on missions and solving puzzles together while learning about useful technical privacy concepts. Experience time-boxed quests and riddles built into the "escape room”, where friendly competition and teamwork prevail for high value learning, while ‘capturing flags’ and garnering points towards victory. 𝐍𝐎𝐓𝐄: 🛑 𝐎𝐧𝐥𝐲 𝐟𝐨𝐫 𝐭𝐡𝐨𝐬𝐞 𝐚𝐛𝐥𝐞 𝐭𝐨 𝐚𝐭𝐭𝐞𝐧𝐝 𝐩𝐡𝐲𝐬𝐢𝐜𝐚𝐥𝐥𝐲 𝐢𝐧 𝐍𝐚𝐢𝐫𝐨𝐛𝐢 🛑 Open to both technical and non-technical persons. SIGN UP HERE: https://lu.ma/z5qb95i1 𝐎𝐧𝐥𝐲 20 𝐬𝐥𝐨𝐭𝐬 𝐚𝐯𝐚𝐢𝐥𝐚𝐛𝐥𝐞! Orchestrated by Cephas Joseph at Cyber In Africa and Mert Can Boyar of Compliance Detective. Hosted by American Spaces Nairobi #dataprivacy #dataprotection #privacyengineering #privacythreatmodelling #privacybydesign #technicalprivacy

I'm excited to celebrate the success of a fantastic #PrivacyCTF event, brilliantly organized by Cyber In Africa! This thrilling competition drew participants from two continents, where five teams tackled challenges like #DataMapping, #PrivacyThreatModeling, and #DeIdentification, all on the newly launched Privacy Quest 2.0 platform. A huge shout-out to Cephas J. for orchestrating this landmark event. This was the first community-driven event highlighting the crucial global importance of gamified privacy engineering initiatives and the power of international collaboration in our industry. 💪

📚 Want to find useful news and materials about #privacyengineering 👨💻 ❓ I've compiled a list of resources to help you do that ⬇ Download the document and follow the links inside 🔗 Please like 👍, save 📨 , and repost 🔁 if you find it helpful 🙏 ______ I'm Dmitrii Filatov Click my name + follow + 🔔 ______ 🔗 Pages and people mentioned in the carousel: IAPP - International Association of Privacy Professionals Ann Cavoukian, Ph.D. Stuart Shapiro R. Jason Cronk MITRE Nishant Bhajaria Katharine Jarmul Data Protocol Privacy Quest Privado.ai #privacy #dataprotection