◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY ◆CISO since 2011 — JPMorgan Chase, IFF, NFL ◆2026 CSO Hall of Fame inductee ◆Independent director — Cylera ◆Cybersecurity, since 1997 ◆New York, NY
/
/writing

Ideas & Insights.

Long-form posts and short LinkedIn notes — Tomás's thinking on cybersecurity, AI governance, board-level risk, and leadership.

Data Sovereignty Awareness

Be mindful of data sovereignty when storing or processing personal data across borders. Different countries have varying data protection laws, and data transferred internationally…

#Privacy tip of the day – Data Sovereignty Awareness: “

#Privacy tip of the day - Data Sovereignty Awareness: " "Be mindful of data sovereignty when storing or processing personal data across borders. Different countries have varying data protection laws, and data transferred internationally may be subject to stricter regulations. Ensure that you understand where your data resides and how…

Regular Privacy Audits

Conduct privacy audits regularly, not just for compliance, but to identify emerging risks or outdated practices.

#Privacy tip of the day – Regular Privacy Audits:”

#Privacy tip of the day - Regular Privacy Audits:" "Conduct privacy audits regularly, not just for compliance, but to identify emerging risks or outdated practices. Privacy laws and technologies evolve, so proactive audits help ensure your company is not only meeting legal requirements but also minimizing privacy risks that could…

Privacy by Default

Make privacy the default setting for all data-related operations. This means that data should be processed with the highest level of privacy protection unless the individual…

#Privacy tip of the day – Privacy by Default:”

#Privacy tip of the day - Privacy by Default:" "Make privacy the default setting for all data-related operations. This means that data should be processed with the highest level of privacy protection unless the individual explicitly opts into data sharing. This "privacy by default" approach ensures compliance and builds trust…

Data Minimization by Design

Ensure your systems and processes are designed to collect only the data necessary for the specific purpose at hand.

#Privacy tip of the day – Data Minimization by Design:”

#Privacy tip of the day - Data Minimization by Design:" "Ensure your systems and processes are designed to collect only the data necessary for the specific purpose at hand. By minimizing the scope of personal data collected, you not only reduce the risk of data breaches but also make compliance…

#Privacy tip of the day – Data Processing Ecosystem Risk Management:”

#Privacy tip of the day - Data Processing Ecosystem Risk Management:" "When assessing privacy risks, don't just focus on your own data; consider the risks posed by third parties in your data processing ecosystem. Third-party service providers, contractors, and even partners can introduce unexpected vulnerabilities, especially when handling personal data…