This episode explores the complex division in state mandates between general consumer privacy laws and specific children’s design codes, which often function as separate acts or amendments. We break down how compliance is determined either by broad, quantitative thresholds like annual gross revenue and high data volume, or by the specific service's intention or likelihood of being accessed by minors. Crucially, we contrast the age ranges, noting that while general consumer laws often apply up to age 15 or 17, specific design codes and app store regulations increasingly mandate protections for users up to Under 18

www.compliancehub.wiki/beyond-coppa-the-surprising-legal-maze-of-u-s-childrens-data-privacy

Sponsors:

https://childrenprivacylaws.com

https://www.compliancehub.wiki

https://www.myprivacy.blog

Australia faces a heightened global cyber threat environment driven by geopolitical tensions, with malicious actors continuing to target organizations of all types and sizes, which has led to rising cybercrime costs and serious data breaches. Drawing on guidance from the Australian Signals Directorate (ASD) and the Australian Institute of Company Directors (AICD), this episode details why boards must operate with a mindset of ‘assume compromise’ and oversee the defense of their organization’s most critical assets. We explore the four critical technical and governance areas for 2025-26: implementing better practice event logging, replacing legacy IT, managing third-party risks through the supply chain, and preparing for the post-quantum cryptography transition.

www.securitycareers.help/australian-cyber-board-priorities-2025-26-a-strategic-guide-with-actionable-tools

Sponsors:

https://cyberboard.cisomarketplace.com

www.cisomarketplace.com

www.cisomarketplace.services

This episode explores the transformative challenge of modern security, focusing on how organizations must adapt their strategies to both secure generative AI applications and leverage AI to strengthen existing defenses. We dive into the critical concepts of securing functionally non-deterministic AI systems by implementing external security boundaries, defense-in-depth strategies, and utilizing Automated Reasoning (formal verification) to verify the correctness of outputs. Finally, we discuss key action items, including the necessity of upskilling security teams and establishing robust governance frameworks to balance AI automation with essential human oversight in high-impact decisions.

Sponsors:

https://cloudassess.vibehack.dev

https://vibehack.dev

https://airiskassess.com

https://compliance.airiskassess.com