James Flowers

Head of Privacy — CIPP/US, CIPT

I build and run privacy programs.

Setting the strategy, writing the policy, and being accountable for what happens underneath it.

Now
Rent the Runway — Head of Privacy
Running the entire privacy program. Strategy, execution, and everything in between.
Before
Comcast — Principal Privacy Engineer
80+ privacy threat model reviews across consumer apps, AI systems, HR platforms, and internal infrastructure. Kept the findings pipeline honest across dozens of product teams at once, chased down the ones that stalled, and didn't take "we're compliant" at face value. Made people prove it.
Apple — 11 years, most of it as a privacy lead
Consumer privacy, workforce privacy, CCPA, GDPR, and HIPAA across products used by hundreds of millions of people.
Most of the work lives in US privacy law: state, local, and federal, from CCPA and its growing family of state laws to sector rules like HIPAA. The newer layer is AI governance, where the gap is obvious: the AI people haven't read the privacy law, and the privacy lawyers have never shipped a product. I've spent my career doing both.