From Compliance to Connection: Reimagining Privacy at OSUF-Session One Recording: From Compliance to Trust: How OSU Foundation Built Buy-In for a Privacy-First Future

Session One Recording: From Compliance to Trust: How OSU Foundation Built Buy-In for a Privacy-First Future

Video Transcription

Video Summary

In this webinar, Meg Natter welcomes participants to a discussion on data privacy compliance, focusing on nonprofit foundations, particularly Oregon State University Foundation (OSUF). Mark Koenig, OSUF's Chief Innovation Officer, and Annalise Walnut, a nonprofit data privacy consultant, share insights on navigating emerging privacy laws like the Oregon Consumer Privacy Act (OCPA). They highlight the growing patchwork of U.S. state privacy laws, emphasizing that many states are increasingly including nonprofits under these regulations. OSUF adopted a proactive, donor-trust-centered privacy approach beyond mere legal compliance, creating an internal "Team Privacy" to oversee data practices and vendor compliance, minimizing data collected and enhancing transparency. They developed a Privacy and Preference Portal allowing donors to manage their data preferences online, reducing organizational risk. Key lessons include the importance of building organizational buy-in, continuous policy updates, cross-department collaboration, and specially training fundraising staff on privacy handling. The team also addressed challenges such as managing sensitive data categories, integrating AI thoughtfully, and preparing for evolving legal landscapes. They advocate for privacy as a strategic priority offering competitive advantage and urge institutions to start privacy readiness now rather than wait for laws to mandate action. The session underscores privacy as an ongoing journey requiring enterprise-wide commitment to maintain donor trust and mitigate risks.

Keywords

data privacy compliance

nonprofit foundations

Oregon State University Foundation

Oregon Consumer Privacy Act

U.S. state privacy laws

Team Privacy

Privacy and Preference Portal

donor data management

privacy as strategic priority