James Flowers

I build and run privacy programs. That means setting the strategy, writing the policy, and being accountable for what happens underneath it.

I spent 11 years at Apple, most of it as a privacy lead, then two more at Comcast as Principal Privacy Engineer, running 80+ privacy threat model reviews across consumer apps, AI systems, HR platforms, and internal infrastructure. I kept the findings pipeline honest across dozens of product teams at once, chased down the ones that stalled, and didn't take 'we're compliant' at face value. I made people prove it.

The work covers consumer privacy, workforce privacy, CCPA, GDPR, HIPAA, and now AI governance under the EU AI Act, which is where the real gap is. Most people who understand AI don't understand privacy law, and most people who understand privacy law have never shipped a product. I've done both.

Currently at Rent the Runway, where I run the entire privacy program: strategy, execution, and everything in between.