April 8, 2026 • 17 mins
In this episode of NASCIO Voices, Amy is joined by NASCIO guest host Kalea Young-Gibson to break down NASCIO's latest report on the state Chief Privacy Officer (CPO) role. The report — based on responses from all 28 currently active state CPOs — reveals a role that's growing fast but still fighting for the resources it needs.
Amy and Kalea dig into the rapid expansion of CPOs across state government (from just 5 states in 2015 to 31 in 2026), the push toward formal privacy programs and frameworks, and how AI is reshaping — and sometimes overshadowing — the privacy function. Despite CPOs stepping into enterprise leadership roles, most still lack dedicated budgets, enforcement authority, and sufficient staffing.
The conversation also covers what CPOs say they need most: funding, CIO support, and a stronger seat at the table. Amy's key takeaway? CPOs know exactly what to do — they just need the authority and investment to do it.
Key topics covered:
- Growth of the state CPO role
- Privacy program maturity and the NIST framework
- CPO involvement in AI policy and risk
- Top challenges: funding, authority, and awareness
- What CPOs need to succeed in 2026 and beyond
- And what we're reading!
Listen
Watch
Mark as Played
Transcript
Episode Transcript
Available transcripts are automatically generated. Complete accuracy is not guaranteed.
Amy Glasscock (00:05):
Hi, and welcome to Nassio Voices, where we talk
all things state IT.
I'm Amy Glasscock in Lexington,Kentucky.
SPEAKER_01 (00:11):
And I'm Kalia Young Gibson in Charlotte, North
Carolina.
Alex is on vacation this week,so I'm stepping in to talk with
Amy about the new Nassio reporton the state privacy officer
role.
Amy Glasscock (00:22):
We recently surveyed 28 state chief privacy
officers to find out whatthey're doing, how their role
has evolved over the last twoyears, and what they need to do
their jobs most effectively.
Let's get into it.
SPEAKER_01 (00:33):
Alright, so Amy, give me the TLDR or the too long
didn't read for the uninitiated.
What's the key takeaway fromthis report?
Amy Glasscock (00:42):
I would say that the key takeaway is something
along the lines of state CPOshave more authority and
responsibility than they've everhad before.
They're having to do these bigjobs, and in many cases, doing
them without dedicated funding,without enough authority, and
they're seeking more supportfrom the top-down.
SPEAKER_01 (01:01):
That's a pretty good summary.
So give us a quick overview.
What is this report and whatdoes it cover?
Amy Glasscock (01:06):
Yeah.
So this is our fourth NASIOstate CPO survey.
We did the first one in 2019.
So we do them every two to threeyears.
It's closer to two years thesedays.
And it captures how the stateCPO role responsibilities and
programs are evolving.
And so this report covers thestructure and reporting of folks
(01:30):
in the role, you know, like whatorganization they're under and
how the privacy team isstructured, privacy program
maturity, their involvement inartificial intelligence, and
then the challenges and needs offolks in that role.
And the report is based onresponses from 28 state CPOs,
which is 100% of CPOs currentlyin the role.
(01:53):
We count 31 states with therole, but three of them had
vacant positions when we tookthe survey.
So pretty good response.
SPEAKER_01 (01:59):
Yeah, yeah.
That sounds like a greatresponse.
And I love how you brought uprole structuring and reporting.
As I continue to work withaccessibility officers, I'm also
seeing, you know, differences inthose structures like where the
AO might be housed, who theymight oversee.
So definitely some interestingdistinctions within the
organization for sure.
Amy Glasscock (02:17):
And and everybody wants to know how it looks in
other states.
Absolutely.
Questions we always get.
So it's important to track that.
SPEAKER_01 (02:22):
Yep.
So what did you find about howthe CPO role itself is evolving?
Amy Glasscock (02:28):
Yeah.
So as we see year over year,there continues to be rapid
growth in the role.
So in 2020, we counted 17 stateswith the CPO.
And like I said, it's 31 as wesit here in 2026.
Wow.
So that's a big jump.
Yeah.
We started counting in 2015, andthere were five back then.
So it's continues to grow.
(02:49):
43% of them are the first personto hold the role as it in its
current iteration in theirstate.
So still a lot of states thatthis role is new for.
And you know, also a lot ofstates where they're not the
first person.
So we're seeing some maturitythere too.
And then a bigger chunk than wehad realized in the past sit in
the CIO organization.
(03:11):
So 71%.
We used to just track like whodo you report to?
So, you know, maybe it was like29% report to the CIO, and then
others report to a CDO or a CISOor a deputy CIO.
Right.
And this year we looked at,okay, well, how many of those
folks are in the CIOorganization?
And so it's actually bigger thanwe had kind of been talking
(03:33):
about before.
71% are in the CIO organization,which is not the case in the
private sector.
You tend to see CPOs in likecompliance or legal, but we're
seeing it under technology verycommonly in state government.
And then I would add that we'reseeing that increasingly the CPO
role in 2026, they're seen asenterprise leaders and not just
(03:57):
compliance people anymore.
And there's still a lot ofvariability in authority, what
they have authority over, whothey have authority over, their
reporting structure, and thenkind of the scope across
agencies and how they'reworking.
SPEAKER_01 (04:10):
Yeah, yeah.
That that all sounds very, veryinteresting, especially, you
know, looking at the growth.
It really seems like the CPOrole in some ways is also
following how emergingtechnologies are growing as
well.
And, you know, so that couldspeak to how some of these
emerging technologies especiallyare creating more privacy risk.
Very interesting.
(04:30):
And hopefully we can get to 50within the next few years.
Amy Glasscock (04:34):
Yeah, yeah, I think so.
SPEAKER_01 (04:35):
So, where are states today when it comes to building
an actual privacy program andhow mature are these programs
today?
Amy Glasscock (04:43):
Yes.
Well, I would say in this reportespecially, we're seeing
incredible movement towardprogram maturity.
So we learned that 29% haveestablished privacy programs,
54% have programs that are inprogress of being established,
and only 18% said that they haveno program, which is down
(05:04):
significantly from 34% that gavethat answer in 2024.
So, you know, most states aremoving toward establishing a
program if they don't alreadyhave one.
And the other major shift thatwe saw was toward using privacy
frameworks.
So 79% reported using the NISTprivacy framework.
And two years ago, only fourstates said they were using any
(05:26):
framework at all, and three ofthem using NIST.
So, you know, that that's huge.
And then some of the commonthings that they're doing around
actually putting the frameworkinto practice are creating
policies and guidance,establishing training programs,
creating data sharingagreements, and doing privacy
impact assessments.
So, but I would say, you know,overall using the framework is
(05:48):
one of the strongest indicatorsof progress in in this area.
SPEAKER_01 (05:51):
Yeah, that's amazing.
So, how are CPOs engaging withartificial intelligence or AI in
their states?
Amy Glasscock (05:57):
Yeah.
Obviously, AI is is changingeveryone's jobs.
SPEAKER_01 (06:02):
Oh, yeah.
Amy Glasscock (06:03):
So we learned this year that 90% are involved
in AI policy development.
I believe that number was 79 twoyears ago.
So continuing to be heavilyinvolved in AI, they are
creating AI risk assessments,doing procurement reviews for AI
products and services, andhelping with vendor due
diligence around AI products.
(06:23):
You know, collaboration with theCIO and CISO is still kind of
all over the place.
Only 22% said that collaborationis highly integrated with the
CIO and CISO on AI-relatedsecurity risks.
So, you know, still some work tobe done there.
And then we asked what the mostimpactful data points are when
communicating AI-related privacyrisks to CIOs and CISOs and
(06:46):
executive leadership.
And the number one answer wasthe type and sensitivity of
data.
So that seems to be what getspeople's attention the most.
And then I will say AI isdefinitely CPOs are saying that
it's elevating privacy in a lotof ways.
So folks are realizing, like,oh, there's a lot of privacy
implications when we're usingthese AI tools.
(07:08):
So we better bring in the chiefprivacy officer, we better hire
a chief privacy officer.
So that's great.
But then there's also kind of afear that AI could end up
overshadowing privacy in someways.
So it's like so big right nowthat sometimes they feel like in
some cases, people are like, ohyeah, privacy, we need you.
In other cases, like, oh,privacy who?
(07:28):
So, you know, kind of adouble-edged sword there
sometimes.
SPEAKER_01 (07:32):
Yeah, and so that that kind of gets into the next
question.
So, in addition to kind of thelooming, you know, A AI
elevating privacy, not exactlysure how it's gonna go just yet.
What are some of the other bigchallenges that CPOs are facing
right now?
Amy Glasscock (07:47):
We asked this question in every CPO survey,
and number one is always lack offunding.
SPEAKER_01 (07:52):
So I think that's uh you know, across the board at
this point.
Amy Glasscock (07:55):
Yeah, in government for sure.
This the second top challengewas lack of understanding of
privacy, and and we've seen thisbefore, I believe four years ago
was on the top of the list.
So still having trouble withfolks being confused at the
state level about what'sprivacy.
I thought that was just part ofsecurity.
SPEAKER_01 (08:12):
Yeah.
Amy Glasscock (08:13):
And then lack of authority, not being able to
actually make changes in youknow, across government that are
needed to be made.
So, you know, back to thefunding problem.
Only six states have a dedicatedprivacy budget that is growing,
but it's growing slowly.
And you know, we talk to 28people.
And then a lot of CPOs have alot of responsibility, but they
(08:34):
don't have enforcementauthority.
So that's that can be tough too.
So slightly different questionthat we also ask is okay, like
you've told us your challenges.
What do you need most to do yourjob effectively?
And so again, funding numberone, number two for the first
time, which we thought wasinteresting, was CIO support,
(08:54):
and then after that, supportfrom executive level folks.
So really seeking that upperlevel CIO and executive support
for the privacy program, andthen also staffing still needed.
A lot of a lot of CPOs do havesome staff now, but they need
more, and of course, it's achallenge to hire highly
(09:15):
qualified privacy professionalsthat want to work for government
rates, as we see across acrossour, you know, issue areas.
And then they need enforcementability, so actually having some
some teeth to go along withtheir suggestions and
recommendations.
So, you know, we're learningthat CPOs, they know what to do,
(09:36):
you know, they've got their armsaround privacy and creating
privacy programs, but they lackthe capacity and authority to be
able to do it consistently.
SPEAKER_01 (09:44):
Wow.
Okay.
So based on the report, andgiven everything you just said
as well, because I think it'svery important to, you know, or
I think what's sticking out tome is you're saying that CPOs
know what to do.
They just need more support todo it.
So, based on that, where do youthink the CPO role is headed
next?
And do you think that directionwill ultimately result in the
(10:05):
CPOs gaining the the supportthat they need?
Amy Glasscock (10:08):
To answer the first part of the question, you
know, if we're really seeingthis shift from the CPO role
being a compliance role intothis bigger data governance and
design discipline role.
We're seeing privacy movingupstream into systems and
architecture, and we're seeingAI being this huge driver of
(10:28):
change for the role.
And I think, you know, theirsuccess, as I've said a a couple
of times already on thispodcast, is depends on
authority, executive support,and sustained investment.
Yeah.
So funding.
And I guess I I do think thatthe role will continue to be
elevated and get some of thatsupport.
(10:49):
And I think us talking about itis important.
And absolutely, you know, sincewe are NASIO, sharing this this
need with the CIO community, Ithink is important too.
So yeah, I I think there willcontinue to be growth and
movement as we've prettyconsistently seen every survey
since 2019.
SPEAKER_01 (11:06):
Yeah.
Wow.
So this has been reallyinteresting and some super
timely insights.
The main thread that I'm hearingis growth, which is always good
and always positive.
So super excited for this fullreport to come out.
I've taken a peek at it, and asalways, anything you write, it's
amazing.
Oh, thank you.
So thank you for sharing thiswith us.
But you know, of course, wecannot call this a Nassio Voices
(11:30):
podcast without the lightninground.
Amy Glasscock (11:34):
Yes.
Let's do it.
SPEAKER_01 (11:36):
First question for you Do you have any fun trips
planned this spring?
Amy Glasscock (11:41):
Yes, when this podcast comes out, I will be on
a trip with my family for springbreak, and we are going to Zion
National Park in Utah and GrandCanyon in Arizona.
So, yeah, we're gonna be lookingat a lot of big red rocks and
hiking and things.
So really excited for that.
Beautiful.
Yeah.
SPEAKER_01 (11:59):
Yeah.
I think I'll be not, you know,going anywhere out of state per
se, but I'm super excited to goto Folly Beach, South Carolina.
Start off Folly.
Yes, it's my it's my favoritebeach as well.
Super excited to start off thebeach season.
So next up, what is a good bookthat you've read in the last
year?
Amy Glasscock (12:18):
So one book that I read last year, and I keep
talking about it, is called YourHidden Genius.
And it's a really interestingbook.
I heard about it, so then I hadto buy it.
And basically, if you buy thebook, it comes with this like
hour and a half long aptitudetest that you take online, and
it puts you through all theselike exercises and tests and
(12:39):
things, and tells you just likewhat you're good at and how it
categorizes you, and it's basedon a lot of science, so you
know, I don't you know, peoplehave different feelings about
these like tests that put you incategories, but I thought it was
it was very validating for mebecause you're always worried
that you're gonna take thesethings, and it's like you should
have been an astronaut, youknow, and it's like, well, that
ship has sailed.
(13:00):
But it kind of it told me thatkind of like what I excel at
should be studying data and thengoing and talking to people
about it.
SPEAKER_01 (13:09):
Uh well, it looks like you found your calling.
Amy Glasscock (13:12):
Yes.
So and then and then sort of onthe other side, it was like
you're also good at like spatialanalysis, so you might be like a
good interior designer.
That's what I do on the side.
SPEAKER_01 (13:21):
Hey, listen, you know yourself.
Amy Glasscock (13:24):
But the funny thing is, it was like your
ultimate career would beprofessor of architecture.
SPEAKER_01 (13:30):
You know, I could honestly see that for you.
Amy Glasscock (13:32):
I could too.
SPEAKER_01 (13:32):
I think you'd be a really good teacher.
I'd take the code.
Amy Glasscock (13:34):
I was like, I do think I would like that,
actually.
I'm probably not gonna go backto school for all of that, but I
will take the win as in like I'mpretty much doing the right
things right now.
So highly recommend it foranybody who's maybe interested
in what their career might looklike if they were doing their
best work, and even if you'regetting ready to retire, because
in a lot of cases, you know, thebook talked about how maybe
(13:56):
you're doing this other career,but you can like pick up hobbies
that fulfill your aptitudes andfeel pretty satisfied in that
way too.
SPEAKER_01 (14:04):
Absolutely.
I'm definitely gonna have tocheck that out.
You said it's called The HiddenGenius.
Amy Glasscock (14:08):
Your hidden genius.
SPEAKER_01 (14:09):
Your hidden genius.
Okay.
I think a good book that I'veread the last year, it's a
reread.
I reread or started to reread asong of ice and fire, which is
um George R.
Martin's, you know, the Game ofThrones books.
Yeah.
So I really enjoyed rereading AClash of Kings, which is the
first one.
Um not only because I mean he'sjust a brilliant writer, I can't
(14:30):
believe this entire world justlives in his head.
But I also think it's the mostaccurate with what you see in
the first couple of seasons ofthe show.
And so having that vivid imageryof probably the only time in the
show where Game of Thrones wasclosely accurate to the book
while you're reading that.
It's just like a movie playingin my head, except I'm the
(14:52):
narrator.
So yeah, that was fun.
Right now, I'm halfway throughFire and Blood.
That one's a little slowerbecause it's written to be like
a history book and not like anactual fantasy novel.
But we're gonna get there.
We're gonna get there.
Yeah, awesome.
And so, how do you unwind aftera busy day?
Amy Glasscock (15:11):
What my family has been doing the last several
weeks is we are watching Lost.
SPEAKER_01 (15:16):
Okay.
Amy Glasscock (15:17):
Uh show that came out over, oh gosh, early 2000s,
I think, maybe like 2005 orsomething.
I've seen it, yeah.
Yeah, and my husband and I hadseen it years ago, like watched
the last few seasons as theywere trickling out on TV, you
know, renting the DVDs and allthat.
But we decided our daughter wasold enough to watch it with us.
So we're re-watching it withher.
I apparently remember nothingfrom watching it the first time,
(15:38):
so it's like a brand new show tome.
But it's been really fun justwatching uh trying to just watch
one every night before gettingready for bed.
SPEAKER_01 (15:46):
Yeah.
Oh yeah, yeah, that sounds nice.
So for for us, it's been it'sbeen getting warmer outside in
the Carolinas.
So making a cup of tea and we'llgo outside, sit on the porch for
a bit, obviously, depending onthe pollen count more so than
the temperature.
But you know, if too much pollenoutside, we'll just kind of
crack the windows a little, playwith the cats, have some tea,
(16:08):
and then we've been watching alot of reality TV lately.
Um, so the current shows areSurvivor and House of Villains.
Ooh.
Um, yeah, it's been or just youknow, anything that is not
thinking, just taking a mentalbreak.
Yeah, just being.
Amy Glasscock (16:25):
Exactly.
Little escape from the day.
Oh, yeah.
All right, Kalia.
Well, thank you so much forco-hosting with me today and
asking me about the CPO report.
I appreciate it.
SPEAKER_01 (16:34):
Absolutely.
Amy Glasscock (16:36):
Thanks again for listening to NASIO Voices.
NASIO Voices is a production ofthe National Association of
State Chief InformationOfficers.
Learn more at NASIO.org.
SPEAKER_01 (16:46):
Alex and Emily will join A next time for a Meteor
Conference in Philadelphia.
Amy Glasscock (16:52):
See you there.
Bye.
Bye.
Hi, and welcome to Nassio Voices, where we talk
all things state IT.
I'm Amy Glasscock in Lexington,Kentucky.
SPEAKER_01 (00:11):
And I'm Kalia Young Gibson in Charlotte, North
Carolina.
Alex is on vacation this week,so I'm stepping in to talk with
Amy about the new Nassio reporton the state privacy officer
role.
Amy Glasscock (00:22):
We recently surveyed 28 state chief privacy
officers to find out whatthey're doing, how their role
has evolved over the last twoyears, and what they need to do
their jobs most effectively.
Let's get into it.
SPEAKER_01 (00:33):
Alright, so Amy, give me the TLDR or the too long
didn't read for the uninitiated.
What's the key takeaway fromthis report?
Amy Glasscock (00:42):
I would say that the key takeaway is something
along the lines of state CPOshave more authority and
responsibility than they've everhad before.
They're having to do these bigjobs, and in many cases, doing
them without dedicated funding,without enough authority, and
they're seeking more supportfrom the top-down.
SPEAKER_01 (01:01):
That's a pretty good summary.
So give us a quick overview.
What is this report and whatdoes it cover?
Amy Glasscock (01:06):
Yeah.
So this is our fourth NASIOstate CPO survey.
We did the first one in 2019.
So we do them every two to threeyears.
It's closer to two years thesedays.
And it captures how the stateCPO role responsibilities and
programs are evolving.
And so this report covers thestructure and reporting of folks
(01:30):
in the role, you know, like whatorganization they're under and
how the privacy team isstructured, privacy program
maturity, their involvement inartificial intelligence, and
then the challenges and needs offolks in that role.
And the report is based onresponses from 28 state CPOs,
which is 100% of CPOs currentlyin the role.
(01:53):
We count 31 states with therole, but three of them had
vacant positions when we tookthe survey.
So pretty good response.
SPEAKER_01 (01:59):
Yeah, yeah.
That sounds like a greatresponse.
And I love how you brought uprole structuring and reporting.
As I continue to work withaccessibility officers, I'm also
seeing, you know, differences inthose structures like where the
AO might be housed, who theymight oversee.
So definitely some interestingdistinctions within the
organization for sure.
Amy Glasscock (02:17):
And and everybody wants to know how it looks in
other states.
Absolutely.
Questions we always get.
So it's important to track that.
SPEAKER_01 (02:22):
Yep.
So what did you find about howthe CPO role itself is evolving?
Amy Glasscock (02:28):
Yeah.
So as we see year over year,there continues to be rapid
growth in the role.
So in 2020, we counted 17 stateswith the CPO.
And like I said, it's 31 as wesit here in 2026.
Wow.
So that's a big jump.
Yeah.
We started counting in 2015, andthere were five back then.
So it's continues to grow.
(02:49):
43% of them are the first personto hold the role as it in its
current iteration in theirstate.
So still a lot of states thatthis role is new for.
And you know, also a lot ofstates where they're not the
first person.
So we're seeing some maturitythere too.
And then a bigger chunk than wehad realized in the past sit in
the CIO organization.
(03:11):
So 71%.
We used to just track like whodo you report to?
So, you know, maybe it was like29% report to the CIO, and then
others report to a CDO or a CISOor a deputy CIO.
Right.
And this year we looked at,okay, well, how many of those
folks are in the CIOorganization?
And so it's actually bigger thanwe had kind of been talking
(03:33):
about before.
71% are in the CIO organization,which is not the case in the
private sector.
You tend to see CPOs in likecompliance or legal, but we're
seeing it under technology verycommonly in state government.
And then I would add that we'reseeing that increasingly the CPO
role in 2026, they're seen asenterprise leaders and not just
(03:57):
compliance people anymore.
And there's still a lot ofvariability in authority, what
they have authority over, whothey have authority over, their
reporting structure, and thenkind of the scope across
agencies and how they'reworking.
SPEAKER_01 (04:10):
Yeah, yeah.
That that all sounds very, veryinteresting, especially, you
know, looking at the growth.
It really seems like the CPOrole in some ways is also
following how emergingtechnologies are growing as
well.
And, you know, so that couldspeak to how some of these
emerging technologies especiallyare creating more privacy risk.
Very interesting.
(04:30):
And hopefully we can get to 50within the next few years.
Amy Glasscock (04:34):
Yeah, yeah, I think so.
SPEAKER_01 (04:35):
So, where are states today when it comes to building
an actual privacy program andhow mature are these programs
today?
Amy Glasscock (04:43):
Yes.
Well, I would say in this reportespecially, we're seeing
incredible movement towardprogram maturity.
So we learned that 29% haveestablished privacy programs,
54% have programs that are inprogress of being established,
and only 18% said that they haveno program, which is down
(05:04):
significantly from 34% that gavethat answer in 2024.
So, you know, most states aremoving toward establishing a
program if they don't alreadyhave one.
And the other major shift thatwe saw was toward using privacy
frameworks.
So 79% reported using the NISTprivacy framework.
And two years ago, only fourstates said they were using any
(05:26):
framework at all, and three ofthem using NIST.
So, you know, that that's huge.
And then some of the commonthings that they're doing around
actually putting the frameworkinto practice are creating
policies and guidance,establishing training programs,
creating data sharingagreements, and doing privacy
impact assessments.
So, but I would say, you know,overall using the framework is
(05:48):
one of the strongest indicatorsof progress in in this area.
SPEAKER_01 (05:51):
Yeah, that's amazing.
So, how are CPOs engaging withartificial intelligence or AI in
their states?
Amy Glasscock (05:57):
Yeah.
Obviously, AI is is changingeveryone's jobs.
SPEAKER_01 (06:02):
Oh, yeah.
Amy Glasscock (06:03):
So we learned this year that 90% are involved
in AI policy development.
I believe that number was 79 twoyears ago.
So continuing to be heavilyinvolved in AI, they are
creating AI risk assessments,doing procurement reviews for AI
products and services, andhelping with vendor due
diligence around AI products.
(06:23):
You know, collaboration with theCIO and CISO is still kind of
all over the place.
Only 22% said that collaborationis highly integrated with the
CIO and CISO on AI-relatedsecurity risks.
So, you know, still some work tobe done there.
And then we asked what the mostimpactful data points are when
communicating AI-related privacyrisks to CIOs and CISOs and
(06:46):
executive leadership.
And the number one answer wasthe type and sensitivity of
data.
So that seems to be what getspeople's attention the most.
And then I will say AI isdefinitely CPOs are saying that
it's elevating privacy in a lotof ways.
So folks are realizing, like,oh, there's a lot of privacy
implications when we're usingthese AI tools.
(07:08):
So we better bring in the chiefprivacy officer, we better hire
a chief privacy officer.
So that's great.
But then there's also kind of afear that AI could end up
overshadowing privacy in someways.
So it's like so big right nowthat sometimes they feel like in
some cases, people are like, ohyeah, privacy, we need you.
In other cases, like, oh,privacy who?
(07:28):
So, you know, kind of adouble-edged sword there
sometimes.
SPEAKER_01 (07:32):
Yeah, and so that that kind of gets into the next
question.
So, in addition to kind of thelooming, you know, A AI
elevating privacy, not exactlysure how it's gonna go just yet.
What are some of the other bigchallenges that CPOs are facing
right now?
Amy Glasscock (07:47):
We asked this question in every CPO survey,
and number one is always lack offunding.
SPEAKER_01 (07:52):
So I think that's uh you know, across the board at
this point.
Amy Glasscock (07:55):
Yeah, in government for sure.
This the second top challengewas lack of understanding of
privacy, and and we've seen thisbefore, I believe four years ago
was on the top of the list.
So still having trouble withfolks being confused at the
state level about what'sprivacy.
I thought that was just part ofsecurity.
SPEAKER_01 (08:12):
Yeah.
Amy Glasscock (08:13):
And then lack of authority, not being able to
actually make changes in youknow, across government that are
needed to be made.
So, you know, back to thefunding problem.
Only six states have a dedicatedprivacy budget that is growing,
but it's growing slowly.
And you know, we talk to 28people.
And then a lot of CPOs have alot of responsibility, but they
(08:34):
don't have enforcementauthority.
So that's that can be tough too.
So slightly different questionthat we also ask is okay, like
you've told us your challenges.
What do you need most to do yourjob effectively?
And so again, funding numberone, number two for the first
time, which we thought wasinteresting, was CIO support,
(08:54):
and then after that, supportfrom executive level folks.
So really seeking that upperlevel CIO and executive support
for the privacy program, andthen also staffing still needed.
A lot of a lot of CPOs do havesome staff now, but they need
more, and of course, it's achallenge to hire highly
(09:15):
qualified privacy professionalsthat want to work for government
rates, as we see across acrossour, you know, issue areas.
And then they need enforcementability, so actually having some
some teeth to go along withtheir suggestions and
recommendations.
So, you know, we're learningthat CPOs, they know what to do,
(09:36):
you know, they've got their armsaround privacy and creating
privacy programs, but they lackthe capacity and authority to be
able to do it consistently.
SPEAKER_01 (09:44):
Wow.
Okay.
So based on the report, andgiven everything you just said
as well, because I think it'svery important to, you know, or
I think what's sticking out tome is you're saying that CPOs
know what to do.
They just need more support todo it.
So, based on that, where do youthink the CPO role is headed
next?
And do you think that directionwill ultimately result in the
(10:05):
CPOs gaining the the supportthat they need?
Amy Glasscock (10:08):
To answer the first part of the question, you
know, if we're really seeingthis shift from the CPO role
being a compliance role intothis bigger data governance and
design discipline role.
We're seeing privacy movingupstream into systems and
architecture, and we're seeingAI being this huge driver of
(10:28):
change for the role.
And I think, you know, theirsuccess, as I've said a a couple
of times already on thispodcast, is depends on
authority, executive support,and sustained investment.
Yeah.
So funding.
And I guess I I do think thatthe role will continue to be
elevated and get some of thatsupport.
(10:49):
And I think us talking about itis important.
And absolutely, you know, sincewe are NASIO, sharing this this
need with the CIO community, Ithink is important too.
So yeah, I I think there willcontinue to be growth and
movement as we've prettyconsistently seen every survey
since 2019.
SPEAKER_01 (11:06):
Yeah.
Wow.
So this has been reallyinteresting and some super
timely insights.
The main thread that I'm hearingis growth, which is always good
and always positive.
So super excited for this fullreport to come out.
I've taken a peek at it, and asalways, anything you write, it's
amazing.
Oh, thank you.
So thank you for sharing thiswith us.
But you know, of course, wecannot call this a Nassio Voices
(11:30):
podcast without the lightninground.
Amy Glasscock (11:34):
Yes.
Let's do it.
SPEAKER_01 (11:36):
First question for you Do you have any fun trips
planned this spring?
Amy Glasscock (11:41):
Yes, when this podcast comes out, I will be on
a trip with my family for springbreak, and we are going to Zion
National Park in Utah and GrandCanyon in Arizona.
So, yeah, we're gonna be lookingat a lot of big red rocks and
hiking and things.
So really excited for that.
Beautiful.
Yeah.
SPEAKER_01 (11:59):
Yeah.
I think I'll be not, you know,going anywhere out of state per
se, but I'm super excited to goto Folly Beach, South Carolina.
Start off Folly.
Yes, it's my it's my favoritebeach as well.
Super excited to start off thebeach season.
So next up, what is a good bookthat you've read in the last
year?
Amy Glasscock (12:18):
So one book that I read last year, and I keep
talking about it, is called YourHidden Genius.
And it's a really interestingbook.
I heard about it, so then I hadto buy it.
And basically, if you buy thebook, it comes with this like
hour and a half long aptitudetest that you take online, and
it puts you through all theselike exercises and tests and
(12:39):
things, and tells you just likewhat you're good at and how it
categorizes you, and it's basedon a lot of science, so you
know, I don't you know, peoplehave different feelings about
these like tests that put you incategories, but I thought it was
it was very validating for mebecause you're always worried
that you're gonna take thesethings, and it's like you should
have been an astronaut, youknow, and it's like, well, that
ship has sailed.
(13:00):
But it kind of it told me thatkind of like what I excel at
should be studying data and thengoing and talking to people
about it.
SPEAKER_01 (13:09):
Uh well, it looks like you found your calling.
Amy Glasscock (13:12):
Yes.
So and then and then sort of onthe other side, it was like
you're also good at like spatialanalysis, so you might be like a
good interior designer.
That's what I do on the side.
SPEAKER_01 (13:21):
Hey, listen, you know yourself.
Amy Glasscock (13:24):
But the funny thing is, it was like your
ultimate career would beprofessor of architecture.
SPEAKER_01 (13:30):
You know, I could honestly see that for you.
Amy Glasscock (13:32):
I could too.
SPEAKER_01 (13:32):
I think you'd be a really good teacher.
I'd take the code.
Amy Glasscock (13:34):
I was like, I do think I would like that,
actually.
I'm probably not gonna go backto school for all of that, but I
will take the win as in like I'mpretty much doing the right
things right now.
So highly recommend it foranybody who's maybe interested
in what their career might looklike if they were doing their
best work, and even if you'regetting ready to retire, because
in a lot of cases, you know, thebook talked about how maybe
(13:56):
you're doing this other career,but you can like pick up hobbies
that fulfill your aptitudes andfeel pretty satisfied in that
way too.
SPEAKER_01 (14:04):
Absolutely.
I'm definitely gonna have tocheck that out.
You said it's called The HiddenGenius.
Amy Glasscock (14:08):
Your hidden genius.
SPEAKER_01 (14:09):
Your hidden genius.
Okay.
I think a good book that I'veread the last year, it's a
reread.
I reread or started to reread asong of ice and fire, which is
um George R.
Martin's, you know, the Game ofThrones books.
Yeah.
So I really enjoyed rereading AClash of Kings, which is the
first one.
Um not only because I mean he'sjust a brilliant writer, I can't
(14:30):
believe this entire world justlives in his head.
But I also think it's the mostaccurate with what you see in
the first couple of seasons ofthe show.
And so having that vivid imageryof probably the only time in the
show where Game of Thrones wasclosely accurate to the book
while you're reading that.
It's just like a movie playingin my head, except I'm the
(14:52):
narrator.
So yeah, that was fun.
Right now, I'm halfway throughFire and Blood.
That one's a little slowerbecause it's written to be like
a history book and not like anactual fantasy novel.
But we're gonna get there.
We're gonna get there.
Yeah, awesome.
And so, how do you unwind aftera busy day?
Amy Glasscock (15:11):
What my family has been doing the last several
weeks is we are watching Lost.
SPEAKER_01 (15:16):
Okay.
Amy Glasscock (15:17):
Uh show that came out over, oh gosh, early 2000s,
I think, maybe like 2005 orsomething.
I've seen it, yeah.
Yeah, and my husband and I hadseen it years ago, like watched
the last few seasons as theywere trickling out on TV, you
know, renting the DVDs and allthat.
But we decided our daughter wasold enough to watch it with us.
So we're re-watching it withher.
I apparently remember nothingfrom watching it the first time,
(15:38):
so it's like a brand new show tome.
But it's been really fun justwatching uh trying to just watch
one every night before gettingready for bed.
SPEAKER_01 (15:46):
Yeah.
Oh yeah, yeah, that sounds nice.
So for for us, it's been it'sbeen getting warmer outside in
the Carolinas.
So making a cup of tea and we'llgo outside, sit on the porch for
a bit, obviously, depending onthe pollen count more so than
the temperature.
But you know, if too much pollenoutside, we'll just kind of
crack the windows a little, playwith the cats, have some tea,
(16:08):
and then we've been watching alot of reality TV lately.
Um, so the current shows areSurvivor and House of Villains.
Ooh.
Um, yeah, it's been or just youknow, anything that is not
thinking, just taking a mentalbreak.
Yeah, just being.
Amy Glasscock (16:25):
Exactly.
Little escape from the day.
Oh, yeah.
All right, Kalia.
Well, thank you so much forco-hosting with me today and
asking me about the CPO report.
I appreciate it.
SPEAKER_01 (16:34):
Absolutely.
Amy Glasscock (16:36):
Thanks again for listening to NASIO Voices.
NASIO Voices is a production ofthe National Association of
State Chief InformationOfficers.
Learn more at NASIO.org.
SPEAKER_01 (16:46):
Alex and Emily will join A next time for a Meteor
Conference in Philadelphia.
Amy Glasscock (16:52):
See you there.
Bye.
Bye.
Popular Podcasts
Stuff You Should Know
If you've ever wanted to know about champagne, satanism, the Stonewall Uprising, chaos theory, LSD, El Nino, true crime and Rosa Parks, then look no further. Josh and Chuck have you covered.
Dateline NBC
Current and classic episodes, featuring compelling true-crime mysteries, powerful documentaries and in-depth investigations. Follow now to get the latest episodes of Dateline NBC completely free, or subscribe to Dateline Premium for ad-free listening and exclusive bonus content: DatelinePremium.com
Crime Junkie
Does hearing about a true crime case always leave you scouring the internet for the truth behind the story? Dive into your next mystery with Crime Junkie. Every Monday, join your host Ashley Flowers as she unravels all the details of infamous and underreported true crime cases with her best friend Brit Prawat. From cold cases to missing persons and heroes in our community who seek justice, Crime Junkie is your destination for theories and stories you won’t hear anywhere else. Whether you're a seasoned true crime enthusiast or new to the genre, you'll find yourself on the edge of your seat awaiting a new episode every Monday. If you can never get enough true crime... Congratulations, you’ve found your people. Follow to join a community of Crime Junkies! Crime Junkie is presented by Audiochuck Media Company.