The Web Privacy Podcast Transistor (https://transistor.fm) https://feeds.transistor.fm/the-web-privacy-podcast Most companies trust their website. They shouldn't. The leaders who know better are rebuilding what it means to govern a website, and every week we sit down with privacy executives, compliance teams, and digital risk pros at the world's largest enterprises. We dive into stories with the ones who caught a broken consent tool before the regulator did, traced a six-figure loss back to a failed tracking pixel, and rebuilt their entire data governance approach from scratch. The rules of digital trust are being rewritten right now. This show is where you hear it first. Brought to you by ObservePoint, the web governance platform that helps the world's largest enterprises see exactly what their websites are doing, and prove it. https://www.observepoint.com/ © 2026 ObservePoint 6cbc8634-4a2b-54bd-ad7c-096bba4d829f yes en Thu, 06 Aug 2026 15:38:11 -0600 Thu, 06 Aug 2026 15:39:17 -0600 https://www.observepoint.com/ https://img.transistorcdn.com/jBiiNg1YNbrNBsaOVaDLWf7aqqPEZFplTj2MdPAm2Uc/rs:fill:0:0:1/w:1400/h:1400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS81MWZh/MzBiODVkMTA2OTE3/NmVlYWRlZDM1MWE1/MmUwZS5qcGc.jpg The Web Privacy Podcast https://www.observepoint.com/ episodic ObservePoint Most companies trust their website. They shouldn't. The leaders who know better are rebuilding what it means to govern a website, and every week we sit down with privacy executives, compliance teams, and digital risk pros at the world's largest enterprises. We dive into stories with the ones who caught a broken consent tool before the regulator did, traced a six-figure loss back to a failed tracking pixel, and rebuilt their entire data governance approach from scratch. The rules of digital trust are being rewritten right now. This show is where you hear it first. Brought to you by ObservePoint, the web governance platform that helps the world's largest enterprises see exactly what their websites are doing, and prove it. https://www.observepoint.com/ Most companies trust their website. web privacy,consent management,tag governance,website governance,data privacy,privacy compliance,GDPR,CCPA,cookie consent,tracking pixels,chief privacy officer,digital risk,data governance,privacy regulations Tanner Green tanner@executivemedianetwork.com No No The M&A Playbook from the Chief Privacy Officer at Synopsys Inc, Erin McCurdy 1 1 The M&A Playbook from the Chief Privacy Officer at Synopsys Inc, Erin McCurdy full 0d11815e-e441-4839-9c1d-468cd92454b5 https://share.transistor.fm/s/1e79e30c Summary
What does it take to share personal data during a merger or acquisition without creating regulatory liability before the deal even closes? Host Ethan Prete sits down with Erin McCurdy, Chief Privacy Officer and Data Protection Officer at Synopsys, who has managed privacy through three to five acquisitions a year at Ansys and then lived the sell side of the $32 billion Synopsys acquisition of Ansys. Erin breaks down the three non negotiables that must be in place before a single row of personal data moves, why aggregated data satisfies most buyer requests at the NDA stage, the difference between due diligence and integration after signing, and why a Legitimate Interest Assessment is the lawful basis that gets you to Day One. A must listen for privacy professionals, in house counsel, and anyone whose company might one day be on either side of a deal sheet.

Chapters
00:00 Introduction
02:15 Erin's path to chief privacy officer
05:30 Inside the Synopsys privacy team
08:45 Why a privacy notice is not a blanket pass
09:45 The three non negotiables before sharing data
12:45 Personal data under the NDA
14:45 The power of aggregated data
19:00 Diligence versus integration after signing
21:30 Day one readiness and the legitimate interest assessment
24:45 Web privacy audits and marketing consent
37:00 Preparing before the deal sheet hits
41:15 Know where your data is

Takeaways

  • Never share personal data at any deal stage without an executed data protection agreement in place
  • Keep due diligence and integration strictly separate, a signed agreement is not an all access pass
  • Default to aggregated or de identified data early, most buyer requests can be satisfied without individual records
  • Back every pre closing transfer with a documented legitimate interest assessment and a signed deletion clause in case the deal does not close
  • Know where your data is before the deal sheet arrives, data mapping and records of processing are the foundation of a defensible sale


Connect with the Guest
LinkedIn: https://www.linkedin.com/in/erin-e-mccurdy-11040017/
Website: https://www.synopsys.com


Sponsor
Brought to you by ObservePoint, the web governance platform that helps the world's largest enterprises see exactly what their websites are doing, and prove it.

Learn more about your website here

]]> Summary
What does it take to share personal data during a merger or acquisition without creating regulatory liability before the deal even closes? Host Ethan Prete sits down with Erin McCurdy, Chief Privacy Officer and Data Protection Officer at Synopsys, who has managed privacy through three to five acquisitions a year at Ansys and then lived the sell side of the $32 billion Synopsys acquisition of Ansys. Erin breaks down the three non negotiables that must be in place before a single row of personal data moves, why aggregated data satisfies most buyer requests at the NDA stage, the difference between due diligence and integration after signing, and why a Legitimate Interest Assessment is the lawful basis that gets you to Day One. A must listen for privacy professionals, in house counsel, and anyone whose company might one day be on either side of a deal sheet.

Chapters
00:00 Introduction
02:15 Erin's path to chief privacy officer
05:30 Inside the Synopsys privacy team
08:45 Why a privacy notice is not a blanket pass
09:45 The three non negotiables before sharing data
12:45 Personal data under the NDA
14:45 The power of aggregated data
19:00 Diligence versus integration after signing
21:30 Day one readiness and the legitimate interest assessment
24:45 Web privacy audits and marketing consent
37:00 Preparing before the deal sheet hits
41:15 Know where your data is

Takeaways

  • Never share personal data at any deal stage without an executed data protection agreement in place
  • Keep due diligence and integration strictly separate, a signed agreement is not an all access pass
  • Default to aggregated or de identified data early, most buyer requests can be satisfied without individual records
  • Back every pre closing transfer with a documented legitimate interest assessment and a signed deletion clause in case the deal does not close
  • Know where your data is before the deal sheet arrives, data mapping and records of processing are the foundation of a defensible sale


Connect with the Guest
LinkedIn: https://www.linkedin.com/in/erin-e-mccurdy-11040017/
Website: https://www.synopsys.com


Sponsor
Brought to you by ObservePoint, the web governance platform that helps the world's largest enterprises see exactly what their websites are doing, and prove it.

Learn more about your website here

]]> Thu, 06 Aug 2026 10:35:38 -0600 ObservePoint ObservePoint 2548 Summary
What does it take to share personal data during a merger or acquisition without creating regulatory liability before the deal even closes? Host Ethan Prete sits down with Erin McCurdy, Chief Privacy Officer and Data Protection Officer at Synopsys, who has managed privacy through three to five acquisitions a year at Ansys and then lived the sell side of the $32 billion Synopsys acquisition of Ansys. Erin breaks down the three non negotiables that must be in place before a single row of personal data moves, why aggregated data satisfies most buyer requests at the NDA stage, the difference between due diligence and integration after signing, and why a Legitimate Interest Assessment is the lawful basis that gets you to Day One. A must listen for privacy professionals, in house counsel, and anyone whose company might one day be on either side of a deal sheet.

Chapters
00:00 Introduction
02:15 Erin's path to chief privacy officer
05:30 Inside the Synopsys privacy team
08:45 Why a privacy notice is not a blanket pass
09:45 The three non negotiables before sharing data
12:45 Personal data under the NDA
14:45 The power of aggregated data
19:00 Diligence versus integration after signing
21:30 Day one readiness and the legitimate interest assessment
24:45 Web privacy audits and marketing consent
37:00 Preparing before the deal sheet hits
41:15 Know where your data is

Takeaways

  • Never share personal data at any deal stage without an executed data protection agreement in place
  • Keep due diligence and integration strictly separate, a signed agreement is not an all access pass
  • Default to aggregated or de identified data early, most buyer requests can be satisfied without individual records
  • Back every pre closing transfer with a documented legitimate interest assessment and a signed deletion clause in case the deal does not close
  • Know where your data is before the deal sheet arrives, data mapping and records of processing are the foundation of a defensible sale


Connect with the Guest
LinkedIn: https://www.linkedin.com/in/erin-e-mccurdy-11040017/
Website: https://www.synopsys.com


Sponsor
Brought to you by ObservePoint, the web governance platform that helps the world's largest enterprises see exactly what their websites are doing, and prove it.

Learn more about your website here

]]> m&a data privacy,personal data in mergers and acquisitions,data protection agreement,m&a due diligence,chief privacy officer,privacy in m&a deals,gdpr m&a compliance,legitimate interest assessment,day one readiness,data sharing in acquisitions,privacy due diligence checklist,marketing consent transfer,consent management platform,m&a integration privacy,data mapping,records of processing activities,privacy notice m&a clause,sell side data protection,aggregated data due diligence,web privacy compliance No