Jake Bernardes - Will the USA ever truly care about privacy & its citizens' data?

## Privacy Theater Versus Substance

Jake Bernardes, VP Security and Compliance at Whistic, returns to SAINTCON with his recurring privacy keynote, asking whether the United States genuinely values citizen data protection or merely performs concern. A European expat who led GDPR programs at multiple companies, he brings comparative regulatory perspective to a predominantly American audience.

## A Decade of Transformation

Ten years ago, PII was obscure jargon; today privacy drives legislation, marketing, and vendor risk programs globally. Bernardes traces how breaches, GDPR's extraterritorial reach, and consumer awareness shifted board-level conversation—while questioning whether momentum produces equivalent U.S. federal standards.

## No Global Privacy Law

Bernardes polls the room on prospects for harmonized international data-protection law, finding skepticism—especially among U.S. attendees. State-level patchworks and sectoral rules (HIPAA, COPPA) create complexity multinational firms navigate while lobbying against comprehensive federal frameworks.

## Practitioner Imperatives

Despite political uncertainty, security leaders must operationalize privacy: vendor assessments, data minimization, breach readiness, and honest communication with customers. Bernardes argues gestures like privacy policies without nuclear-waste-level data handling fail to earn trust, echoing themes from European enforcement experience.