Listen to our podcast with

Ben Martin - Director of Privacy at Trustpilot

Andrew Phillips - CTO at Skyscanner

Hosted by Ross McNairn Wordsmith's CEO.

We discuss the contract between privacy and engineering teams. Looking for insights and lessons to help ensure you maximize your output from this overlap.

Topics include:

• When should you consider outsourcing your identity platform?

• How to stop legal creating an allergic reaction when they speak to engineers about privacy?

• How do you shift legal into leading the discussion rather than reacting?

For those with only a 5 minutes, some take-aways!

1. Start with Clear, Practical Solutions

Quote: "Legal teams bring problems without saying, 'these are what we think the solutions can be.'" — Ben Martin

Legal teams should not just identify compliance issues but also suggest practical solutions that align with the business’s goals. Understanding the product deeply and anticipating engineering challenges can prevent legal advice from becoming a roadblock.

2. Understand the Hidden Costs of Compliance

Quote: "If you keep piling things on top of each other that aren't done very well, the whole system is going to be really problematic." — Ben Martin

Ben discussed the concept of "debt" that accumulates when companies don't address privacy and compliance properly from the start. This isn't just legal debt, but also technical debt that can make systems inefficient and costly to manage.

3. Leverage Third-Party Expertise Wisely

Quote: "For the non-core IP stuff, I think you're pretty hard-pressed to say building is the right thing." — Andrew Phillips

Andrew explained that for aspects like privacy compliance and security, which are not a company's core IP, it often makes sense to use third-party vendors. These vendors have specialized expertise and can adapt more quickly to regulatory changes than an internal team might.

4. Use Data Privacy as a Strategic Advantage

Quote: "It’s about being part of the solution...being able to work really collaboratively." — Andrew Phillips

Data privacy shouldn’t just be about compliance; it can also be a strategic advantage. Andrew emphasized how aligning privacy initiatives with business goals can foster a culture of trust and collaboration, ultimately benefiting both the brand and its customers.

5. Treat Legal Comms as a Form of PR

Quote: "As data becomes a first class asset, how your company communicates your policies with it will be under increased scrutiny. You need to ensure that you clearly communicate to your users and considered it a form or PR" — Ross

Ross pointed out the importance of staying adaptable in both legal and engineering practices. As regulations and consumer expectations change, companies must be ready to adjust their strategies quickly to maintain compliance and trust.