In this episode of the FIT4Privacy Podcast, we speak with Tom Kemp, Executive Director of the California Privacy Protection Agency (CalPrivacy), about why California continues to set the direction for privacy regulation in the United States.
KEY MOMENTS
00:00 – California Privacy Protection Agency
03:25 – State of US Privacy
05:02 – Why California Leads
08:30 – Mandate in CalPrivacy and how it works
15:12 – How does AI impacts privacy laws? Will we see new legislation?
20:40 – U.S. vs EU vs UK AI Regulation Models
23:30 – Measuring the Impact (Drop System)
28:45 – Opt Out vs Opt In
35:27 – Business Feedback and Innovation
39:20 – Closing and final message to audience
Tom explains how California became the first jurisdiction to establish a comprehensive privacy framework through a public vote, how CalPrivacy operates as an independent regulator, and how it balances innovation, AI development, and consumer protection in one of the world’s largest economies.
They explore California’s approach to AI and automated decision‑making, the upcoming rights taking effect in 2027, the Delete Act and one‑click data broker deletion, opt‑out versus opt‑in models, and how CalPrivacy measures real‑world impact beyond legal compliance.
A must‑listen for privacy professionals, policymakers, business leaders, and anyone interested in the future of privacy and AI governance.
⸻
ABOUT THE GUEST
Tom Kemp is the Executive Director of the CalPrivacy. Before his role at the CalPrivacy, Tom was a Silicon Valley-based tech entrepreneur, co-founder, and CEO. Tom was a full-time volunteer on the 2020 campaign to pass the California Privacy Rights Act and has since advised on significant tech policy legislation across the country, including the Delete Act (SB 362), the AI Transparency Act (SB 942), and bills in Texas, Nebraska, Vermont, and Washington. He has been recognized for his policy contributions by both the California and Texas State Senates. Tom is the author of Containing Big Tech: How to Protect Civil Rights, Economy, and Democracy. Tom holds a bachelor’s degree in computer science and history from the University of Michigan.
ABOUT THE HOST
Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.
⸻
Resources & Links
Guest Links
Tom Kemp https://www.linkedin.com/in/tomkemp/ , https://privacy.ca.gov/
GrowSkills (Privacy Courses & Insights)
• Courses: https://growskills.store/courses/
• Insights: https://growskills.store/insights/
• Website: https://growskills.store/
FIT4Privacy
• Website: https://www.fit4privacy.com
• Podcast: https://www.fit4privacy.com/podcast
• Blog: https://www.fit4privacy.com/blog
• YouTube: http://youtube.com/fit4privacy
Punit Bhatia
• Website: https://www.punitbhatia.com
Books
• Be Ready for GDPR
• AI & Privacy – How to Find Balance
• Intro to GDPR
• Be an Effective DPO
