The UKs #1 Data Protection Consultancy

Data Protection & Information Security Experts

Data Protection Made Easy.

GDPR Support Cyber Security Support
Join our extensive list of clients who have their data privacy under control

Accelerate Your Data Protection Compliance

Save Time, Save Money and Relax: You’re In Safe Hands

Discover the comprehensive range of data protection services at Data Protection People. Tailored to meet the unique needs of your organisation, our expert team has successfully handled every challenge imaginable. Whether you’re navigating compliance complexities or enhancing data security, trust DPP to be your partner in safeguarding information.

GDPR Training

Data Protection People have a wide range of training services catering for every need. Whether its general training for operational or admin staff or specific training for specialist roles, we have something for you. watch the short video below to meet the team and find out more about our training services.

Contact Us

Information Management Software

DataWise is the original privacy tech platform designed to simplify GDPR compliance management. Since its inception in 2011, DataWise has continuously evolved, solidifying its reputation as the pioneering "privacy tech" solution.

Contact Us

Data Protection Consultancy

Unlock Compliance Excellence with Our GDPR Consultancy Services. Navigating the intricate realm of data protection laws and standards demands expert guidance.

Contact Us

Outsourced DPO

A data protection officer doesn't have to be a full time employee and in many respects it's better to have a company like DPP take on the role. Watch the video below to find out more about our outsourced DPO and privacy officer services or reach out and get in touch with us.

Contact Us
View All

Need Help With Cyber Security Compliance?

We Have You Covered!

At Data Protection People, our cyber security services are designed to fortify your digital defences. With a proven track record spanning diverse sectors in the UK, our seasoned team brings a wealth of experience in handling a wide array of cybersecurity challenges. Reach out to us and explore how DPP can enhance your organisation’s cyber resilience.

External Attack Surface Management

Our experts can support you with Dark Web Monitoring - Data Protection People offer a free dark web scan for your organisation.

Contact Us

ISO 27001

Our tailored program, guided by industry-certified experts, supports your ISO 27001 compliance journey. Whether you need advice on certification scope, assistance with remediation work, or comprehensive ISO 27001 consultancy, we’re here to guide you every step of the way.

Contact Us

PCI DSS

A PCI assessment is an audit for validating compliance with the Payment Card Industry Data Security Standard (PCI DSS), a set of security standards for merchants who accept, process, store or transmit credit card information.

Contact Us

Cyber Security Support

Secure your organisation with Data Protection People's Cyber Security Support. Our expert team ensures cybersecurity excellence, offering tailored support for ISO27001, PCI DSS, Cyber Maturity, Cyber Essentials Plus, and more.

Contact Us
View All
Rofi Hendra Support Desk Data Protection People

Supporting DPOs

Flexible Support When You Need It

At Data Protection People, we recognise the dynamic challenges and unique responsibilities of the Data Protection Officer (DPO) role. Beyond offering standard support, we provide a comprehensive suite of services crafted to empower DPOs at every step.

Collaborative Community: Navigating the intricate landscape of data protection can be isolating. That’s why we’ve fostered a collaborative community of privacy professionals. As a DPO with us, you’re never alone. Our network serves as a forum for insightful discussions, sharing solutions, and building a sense of camaraderie.

Expert Guidance and Advice: The journey of a DPO is often filled with complex decisions. Our seasoned team of experts is your reliable resource, offering timely advice and strategic guidance. We’re not just a service provider; we’re your dedicated partners in overcoming challenges and making informed decisions.

Advanced Training for Continuous Growth: Stay ahead in your role with our advanced training programs. Tailored for DPOs, our courses delve into intricate aspects of data protection, providing you with a competitive edge. It’s not just about meeting the present challenges but ensuring your continuous growth and excellence in your role.

Audits, Assessments, and Document Reviews: Our services extend beyond conventional boundaries. From comprehensive audits and assessments to meticulous document reviews, we ensure that your data protection strategies are not only compliant but also optimised for efficiency.

Simplifying Complexity for Future Ease: Beyond addressing current challenges, our mission is to simplify the complexities inherent in data protection. By partnering with Data Protection People, you’re not just solving problems – you’re ensuring a smoother, more efficient role in the future. We streamline processes, making your responsibilities more manageable and your decisions more impactful.

Diverse Sector Experience

Access to a Team of Industry Experts

At Data Protection People, our expertise spans across diverse sectors, ensuring that businesses of all sizes and orientations receive tailored Data Protection and Cyber Security solutions. From the dynamic commercial sector and agile SMEs to the impactful third sector and expansive multi-nationals, we extend our services to fortify the digital defences of every business entity.

Commercial Sector

Elevate your data protection and cybersecurity standards in the bustling landscape of the Commercial Sector. We offer tailored solutions designed to safeguard your sensitive information, ensuring compliance and resilience against evolving threats. Partner with us to fortify your digital assets and foster a secure environment for sustained growth.

SMEs

Small and Medium Enterprises (SMEs) form the backbone of innovation. Our data protection and cybersecurity services are crafted to match the agility of SMEs. Navigate the digital landscape securely, optimize your operations, and scale confidently with our tailored solutions that prioritize your unique business needs.

Third Sector

Third Sector

For organisations in the Third Sector driven by purpose, our data protection and cybersecurity expertise align with your mission. Safeguard sensitive data, build stakeholder trust, and amplify your positive impact. Let our solutions be the backbone of your technology infrastructure, ensuring that your focus remains on making a difference.

Multi Nationals

For the global footprint of Multi Nationals, our data protection and cybersecurity services provide a comprehensive shield. Navigate the complexities of international regulations with confidence. From compliance strategies to threat intelligence, we've got your data security needs covered, empowering your multinational endeavors with resilience.

Public Sector

In the Public Sector, trust and accountability are paramount. Our data protection and cybersecurity consultancy ensures that your operations align seamlessly with regulatory requirements. From confidential citizen data to streamlined governance, our solutions empower public entities to serve with integrity and technological excellence.

Why Use Our Outsourced DPO Services?

Save Time, Money and Guarantee Compliance

Navigating the intricate landscape of data protection demands more than just a DPO — it requires a dedicated team committed to excellence. Our Outsourced DPO Services extend beyond the traditional role, offering a comprehensive approach to legal compliance and pragmatic solutions.

Why Choose Outsourcing?

An outsourced DPO brings a wealth of experience, not just in the law but also in crafting workable solutions. Their impartiality is fortified by a team of privacy practitioners, ensuring that your organization benefits from a spectrum of expertise. Should the need arise, seamless coverage during absences is guaranteed, eliminating the vulnerability associated with a single in-house DPO.

Staying Headache-Free

Concerned about the disruption if your DPO moves on? With an outsourced model, transitions are smooth, and you won’t experience the sudden headache of a critical role vacancy. The continuity provided by a team ensures that your data protection responsibilities are seamlessly handled.

Compliance Tailored to You

Our Outsourced DPO Services align seamlessly with your legal obligations, whether you’re mandated to appoint a DPO or choose to do so voluntarily. We understand that compliance is not just about ticking boxes but about ensuring a robust, practical approach to data protection. Choose Data Protection People for a worry-free, compliance-driven outsourced DPO solution — because your data protection journey should be as smooth as it is secure.

“I cant recommend Data Protection People enough, they have helped me in so many different areas, no matter how complex the challenge or how large the obstacle, DPP always has the answer.

I can call the team at any time and have built an amazing relationship with them, in times of frustration they are here to calm me down and create a plan, they are a pleasure to work with.”

Mark Leete
Eastlight Community Homes

Data Protection People Blogs & Podcasts

Data Privacy Learning & Guidance

Data Protection People have the UK’s #1 Data Protection Podcast with over 150 episodes available across all audio streaming platforms, we also post regular content designed to simplify complex areas of data protection and cyber security, check out some of the podcasts and articles below and make data protection easy today.

Top 5 Most Listened-to Episodes

The Top 5 Most Listened-to Episodes of the Data Protection Made Easy Podcast in 2024

2024 has been a monumental year for the Data Protection Made Easy Podcast. With 11,790 streams on Spotify, a growing community of over 1,381 subscribers, and consistent live attendance of 100+ listeners per session, the podcast continues to cement its status as the UK’s leading platform for data protection professionals.

This year has been full of exciting developments, including the honour of earning our IAPP accreditation, which has significantly boosted our visibility within the industry. Our episodes now regularly attract hundreds of listeners each week on Spotify alone, and the live discussions have become a must-attend event for privacy professionals.

As 2024 draws to a close, we’re taking a moment to reflect on our most popular episodes of the year. These episodes offer a snapshot of the topics that mattered most to data protection professionals, and they reveal some surprising trends. For the first time, Subject Access Requests (SARs) — historically our most popular topic — did not make the top 5. Instead, new and emerging themes have captured the attention of our listeners. Let’s explore the top 5 episodes and why we think they struck a chord with our audience.


1. DPIA Deep Dive – A Practical Guide on Data Protection Impact Assessments (24th July 2024)

Why it was popular: The topic of Data Protection Impact Assessments (DPIAs) remains a critical pain point for many organisations. With regulatory scrutiny increasing, understanding how to conduct a robust DPIA has become a priority for data protection officers (DPOs) and privacy teams. This episode stood out for its practical, step-by-step guidance on completing DPIAs effectively.

Our expert hosts shared actionable insights and tools that listeners could use immediately, making it one of the most replayed episodes of the year. It also provided clarity on common DPIA mistakes and how to avoid them, resonating strongly with both experienced and newly appointed DPOs.


2. AI and Its Potential Impact on Privacy (24th May 2024)

Why it was popular: It’s no surprise that this episode made it into the top 5. AI and privacy have dominated headlines and boardroom discussions throughout 2024. The general consensus across the data protection industry is one of caution. With tools like ChatGPT, Copilot, and generative AI transforming how businesses operate, privacy professionals are grappling with how to manage the associated risks.

This episode explored the regulatory landscape for AI, guidance from the ICO, and the challenges of ensuring fairness, transparency, and accountability in AI-driven decision-making. The episode’s popularity reflects a growing demand for practical advice on how to prepare for and respond to AI-related privacy risks.


3. Understanding the Role of a Data Protection Officer (DPO) (19th August 2024)

Why it was popular: With an increasing number of organisations appointing Data Protection Officers (DPOs), many privacy professionals are eager to understand the role, its responsibilities, and the skills required to succeed. This episode demystified the role of a DPO, providing clear definitions and outlining the competencies required for the job.

It also offered insights for those looking to become a DPO, which proved valuable for career development. By combining practical guidance with career advice, this episode engaged privacy professionals at all stages of their journey and sparked plenty of follow-up questions during the live Q&A.


4. Navigating the Complexities of International Data Transfers (13th September 2024)

Why it was popular: Cross-border data transfers continue to be a thorny issue for data protection teams, particularly in light of Schrems II and the ongoing discussions around Data Privacy Frameworks. This episode took a deep dive into how businesses can legally transfer personal data outside of the UK and EU, while remaining compliant with GDPR.

As regulatory guidance evolved in 2024, organisations were seeking clarity on what’s required to ensure lawful transfers. The episode’s focus on Standard Contractual Clauses (SCCs) and derogations gave listeners a solid foundation for managing their cross-border data flows.


5. RoPA Roundup – A Practical Workshop for DPOs (5th July 2024)

Why it was popular: Records of Processing Activities (RoPA) remain one of the most critical (and often misunderstood) obligations under GDPR. This episode offered a hands-on workshop where listeners could follow along and learn how to create, maintain, and review their RoPAs.

The workshop-style format proved highly engaging, offering templates, step-by-step instructions, and real-world examples. For organisations seeking to streamline their approach to RoPAs, this episode became an indispensable resource, with many listeners returning to it multiple times for reference.


What’s Next for 2025?

This year’s lineup of episodes reflected the changing priorities in data protection. While SARs remained an important service for Data Protection People, the demand for content on AI, DPIAs, and DPO roles shows that privacy professionals are seeking clarity on emerging risks and new responsibilities.

But we’re not stopping here. In 2025, we’re taking the Data Protection Made Easy Podcast to the next level with:

  • New guest speakers from leading organisations.
  • Live in-person events starting with our first event in Leeds, Yorkshire.
  • Fresh episode formats that bring you closer to the conversations that matter.

If you’d like to be part of our first-ever live event or have ideas for guest speakers and topics, we want to hear from you! Our goal is to make the Data Protection Made Easy community even more engaging and insightful.


Thank You for Listening

To our listeners, subscribers, guest speakers, and hosts, thank you for being part of this incredible year. We’re proud of the impact we’ve made together and are excited to continue growing the community in 2025.

The Data Protection Made Easy Podcast has become a trusted resource for privacy professionals worldwide, and with our IAPP accreditation under our belt, we’re ready to keep raising the bar. Here’s to more insights, lively discussions, and impactful episodes in 2025.

If you’re interested in attending our first live event or have suggestions for topics and speakers, please get in touch — we’d love to hear from you!

 

Spreading Festive Cheer Without Data Fear

Festive Data Protection Tips

The festive period is one of the busiest times of the year for businesses and consumers alike. Companies look to connect with customers through heartwarming messages, irresistible Christmas deals, and thoughtful gestures. It’s a chance to spread joy, build stronger customer relationships, and generate goodwill. But amidst all the festive cheer, it’s essential to stay mindful of data protection rules to avoid being on Santa’s naughty list.

To help you stay on the right side of the law, we’ve outlined key areas where businesses often slip up during the holiday season. From festive greetings to customer data collection, here’s everything you need to know.

1. Sending Christmas Cards and E-Greetings

Sending festive greetings to clients and contacts is a lovely tradition, but it’s also an area that’s ripe for data protection mishaps. Traditionally, physical cards were sent through the mail, but now, many companies opt for festive e-cards or email greetings. Some companies have even sent animated advent calendars or interactive digital cards via email. However, modern methods bring modern risks.

Watch out for malicious attachments

Be cautious of any email attachments you receive. Cybercriminals often disguise malware as festive files, so double-check before clicking on any attachments. If a message from a colleague says, “Here’s your Christmas surprise!”, think twice before opening it.

Data protection laws apply to festive greetings

When sending personal festive messages to friends and family, you’re free to do so under the General Data Protection Regulation (GDPR). But in a work setting, the rules are different. Businesses must ensure that customer data is handled responsibly. Here’s how:

  • Use BCC (blind carbon copy) when sending bulk emails. Avoid exposing other recipients’ email addresses.
  • Keep marketing separate from greetings. If your message could be interpreted as promotional, the Privacy and Electronic Communications Regulations (PECR) may apply.
2. Understanding the Privacy and Electronic Communications Regulations (PECR)

The PECR works alongside GDPR to regulate direct marketing communications, including email and SMS. If your festive message could be viewed as promotional, it’s essential to follow PECR guidelines. Here’s what you need to know:

  • Unsolicited messages require consent. If your message promotes products, services, or commercial activity, it’s classified as marketing.
  • What’s acceptable and what’s not? “Happy Holidays” is fine. “Happy Holidays — Here’s a 10% discount on your next purchase” is likely considered marketing.
  • Check your consent. To send direct marketing, you need clear, informed consent. General marketing opt-ins may not be specific enough for Christmas promotions. Ensure you have explicit consent to avoid breaching the PECR.
  • Corporate emails have different rules. If you’re sending to a corporate subscriber (like a business email address), you may not need the same level of consent as required for individual email addresses.
3. Collecting Customer Data During the Festive Season

The holiday season often brings a surge of new customers, making it a prime opportunity to build your database. But as you collect personal data from new customers, you need to be clear about how you plan to use it.

  • Be transparent. Provide clear privacy information explaining how you intend to use customer data. If you’re collecting data for a specific Christmas promotion, you’ll need to state that clearly. Avoid drafting privacy notices that are too restrictive, as they could prevent you from using the data for future marketing purposes.
  • Check your privacy notices. If you say the data will “only be used for the Christmas prize draw,” you’ll be limited to that use. Ensure your privacy notice reflects the broader ways you may want to use the data.
4. Preparing for Data Breaches Over the Holiday Period

With increased business activity and reduced staffing, the Christmas period can leave organisations more vulnerable to data breaches. Handling a data breach during the holidays requires extra planning to ensure that issues can be dealt with swiftly and effectively.

  • Plan for reduced staffing. If your Data Protection Officer (DPO) is on holiday, make sure there’s someone else trained to respond to data breaches. GDPR requires that breaches posing a risk to individuals’ rights be reported to the Information Commissioner’s Office (ICO) within 72 hours.
  • Test your incident response plan. Ensure your breach response plan is fit for purpose, even with skeleton staffing.
  • Maintain breach reporting awareness. Make sure staff know how to report potential data breaches, even when senior staff are away.
5. How to Stay Off Santa’s Naughty List

Here’s a quick summary of best practices to avoid festive data protection mishaps:

  • Be cautious with e-card attachments — they may contain malware.
  • BCC email recipients to avoid accidental data breaches.
  • Check your marketing consents when sending promotional festive messages.
  • Don’t over-restrict your privacy notices when collecting customer data.
  • Prepare for data breaches during the holiday period, even with reduced staffing.

Sending festive greetings and running Christmas campaigns is a fantastic way to strengthen customer relationships. However, being mindful of GDPR, PECR, and data protection best practices will ensure you’re not caught off guard. Stay vigilant, stay compliant, and keep spreading the festive cheer — without the data fear!

Listen to the Data Protection Made Easy podcast and learn about more top tips for Data Protection.

 

Work With Data Protection People

Data Protection Consultant

Location: Hybrid role based at our Head Office near Leeds City Centre
Salary: £28,000 – £50,000 (DOE)
Contract: Full-time, 37 hours per week, Monday to Friday
Benefits: Up to 38 holidays per year (including Bank Holidays), Free Parking, Company Pension


About Us

Data Protection People (DPP) is one of the UK’s leading Data Protection Consultancies, supporting hundreds of clients across a wide range of sectors. Our work is diverse, and no two days are the same. If you’re looking for a role with variety, opportunity, and exposure to multiple industries, this could be the opportunity for you. You’ll be joining a collaborative operations team made up of some of the brightest and most supportive minds in the industry.

We are currently recruiting for two Data Protection Consultant positions. One role will focus on managing our Data Protection Support Desk, while the other will focus on delivering data protection consultancy services to our clients. Both roles require similar skills and experience, and during the recruitment process, we will assess where candidates fit best. If you’re experienced in data protection and ready for a challenge, we’d love to hear from you.


Your Responsibilities

Depending on your placement within the role (Consultancy or Support Desk), your key responsibilities may include:

Support Desk Manager Role

  • Lead and develop our Data Protection Support Desk to ensure it operates effectively, efficiently, and at scale.
  • Take responsibility for the continual development and growth of the Support Desk Services.
  • Ensure operating procedures are documented, maintained, and adhered to.
  • Deliver high levels of technical competence and quality across all client communications, reports, and project feedback.
  • Develop and maintain a robust set of KPIs to monitor performance and ensure continuous improvement.
  • Collaborate with sales and marketing to raise awareness of support services, contribute to blogs, and participate in our GDPR podcast series.
  • Manage and develop a support team into subject matter experts, including recruitment, training, and performance management.
  • Oversee support desk administration, including usage reports, setting up jobs, reviewing the resource library, and producing template documents.
  • Work with other consultants to manage the reference library and support internal knowledge-sharing initiatives.

Data Protection Consultant Role

  • Provide consultancy services to clients on all matters of data protection, including audits, advisory services, and compliance reviews.
  • Manage client projects and deliver expert advice on data protection issues, including SARs (Subject Access Requests) and FOI (Freedom of Information) requests.
  • Collaborate with the Support Desk and other consultants to ensure consistent standards and share knowledge and best practices.
  • Support clients with ad-hoc data protection queries and provide guidance on regulatory updates.
  • Contribute to internal development, including maintaining our reference library, toolkits, and operational processes.

What We’re Looking For

We’re looking for passionate, driven individuals who can demonstrate a high level of competence in data protection. We value flexibility, collaboration, and initiative. While we have two distinct roles available, both require a similar core set of skills and experience.

Essential Requirements

  • Experience in data protection (GDPR, UK DPA 2018, FOI, etc.)
  • Strong management and leadership skills – able to guide, support, and develop a team.
  • Recognised Data Protection Practitioner qualification (e.g., CIPP/E, CIPM, or similar).
  • The ability to manage and develop a team into subject matter experts.
  • Strong experience in handling SARs (Subject Access Requests) and FOI (Freedom of Information) requests.
  • A proactive, problem-solving mindset with the ability to manage competing priorities.

Desirable Requirements

  • Previous experience working with support desk services or client support teams.
  • An ability to communicate technical issues clearly and concisely to a variety of audiences.
  • Experience contributing to blogs, webinars, and podcasts is a bonus.

Why Join Us?

At Data Protection People, we offer an environment where you can thrive, develop, and be part of a collaborative team that supports each other. We believe in continuous learning and development, which is why we provide clear career pathways, support for qualifications, and opportunities to work on a range of diverse projects with clients from multiple sectors.

Benefits include:

  • Competitive salary of up to £50,000 (depending on experience)
  • Up to 38 days of holiday (including bank holidays)
  • Free parking at our head office near Leeds city centre
  • Company pension scheme

The Latest Data Protection & Cyber Security News – November 2024

In November, our hosts, Joe, Phil, and Jasmine covered the latest updates in data protection, the challenges between controller and processor relationships, and the recently revealed DUA Bill. 

Find out what’s discussed in each episode below. 

Data Protection Made Easy: November’s Recap 

Episode 193: GDPR Radio – The Ripple Effect

In our first GDPR radio session, hosts Joe and Phil invited Catarine Santos, our data protection consultant, to discuss the latest industry news. They discussed how a single industry change can create a ripple effect across businesses of all sizes.

Take data breaches, for example. Usually, there is a guilty party (the controller and/or processor) and a victim—the data subject. This breach affects more than these parties, impacting the wider supplier chain that has ties to the business. The same goes for regulatory changes – particularly the proposed DUA Bill, which we discuss in episode 196

The Data Protection Made Easy podcast is a community resource that helps DPOs and professionals stay updated on industry changes and their potential impact. Listen to episode 193 to find out what you missed

Episode 194: Understanding Data Protection Relationships

Under the UK GDPR, your business has varying obligations depending on your role in handling personal data. You may be a data controller, joint controller or processor. 

A data controller decides the purpose and means of processing personal data. In comparison, a data processor handles data on behalf of the controller. If multiple controllers share control of the data for the same reason, they’re considered joint controllers.  

Episode 194 uncovers the legal obligations tied to these roles and the complex relationship between data controllers and processors. Our hosts also discuss ways to ensure compliance across both parties, including filling out a DPIA and formalising partnerships in a written agreement. 

Want to learn more? Listen to episode 194 on demand.  

Episode 195: GDPR Radio – Data Breaches, Blunders & Big Tech

Our second GDPR radio session focused on the latest news in data protection and real-life cases from our host’s day-to-day work.

Jasmine shared her experience working on a data breach that led to 400 letters being sent to the wrong addresses. Our hosts assessed how these breaches happen and the legal rights data subjects can enforce when affected. 

Later in the podcast, Joe and Catarina discussed several other cases, including the Farley v Paymaster court appeal and the ICO doubling down on big tech organisations. Listen to episode 195 for more expert insight

Episode 196: SARs and the Data (Use & Access) Bill 

In October 2024, the government published the Data (Use & Access) (DUA) Bill, the newest revision of the conservative parties’ failed DPDI Bill. While the DUA Bill drops several controversial reforms in the DPDI Bill, it appears to change how organisations handle subject access requests (SARs). 

Our hosts break down the Bill’s key components, including ways to handle SARs in accordance with these changes. Learn more about the DUA Bill in episode 196 and subscribe to the podcast for further insight as the Bill develops through parliament. 

Subscribe to Our Award-winning Podcast Today!

The Data Protection Made Easy podcast is a go-to resource for over 1,300 industry professionals. By joining our community, you’ll gain CPE credits for every episode and have exclusive access to live sessions.

Looking for hands-on data protection support? Contact our team today!  

Breaches, Blunders, and Big Tech Battles

Episode 195: Real-World Cases in Data Protection – A Look at News and Practical Challenges

In last week’s episode of the Data Protection Made Easy Podcast, we delved into some fascinating real-world cases, discussing not only the latest news in data protection but also hands-on insights from our hosts’ day-to-day work. This lively session shed light on the challenges organisations face when it comes to compliance and data management, as well as the innovative ways our experts help solve these issues.


What We Covered

Our discussion brought together a mix of current events, complex cases, and practical advice for data protection professionals. Here’s what was on the agenda:

Jasmine Harrison’s Case: A Data Breach Leading to Legal Action

Jasmine shared her experience handling a case involving over 400 letters sent to the wrong addresses—a severe data breach that led to a legal claim. This discussion explored how such breaches happen, their potential consequences, and the legal avenues available for affected individuals.

Joe Kirk’s Insightful Cases: Data Accuracy and Negligence

Joe highlighted two intriguing cases:

  • Farley v Paymaster: A case emphasising the critical importance of maintaining accurate personal data.
  • A Customer Data Case: Joe discussed an instance where poor data accuracy led to significant complications, underscoring the legal and operational need to keep information up-to-date.

Catarina Santos’ NHS Cases: Sensitive Data and the ICO’s Focus on Big Tech

Catarina brought two NHS-related cases to the table:

  • The Use of WhatsApp: Discussing how sharing sensitive information on informal channels like WhatsApp can lead to compliance issues, even in life-or-death scenarios.
  • Data Sharing Problems in the NHS: Exploring the challenges of securely sharing sensitive information and the critical need for robust systems.
    Her favourite discussion revolved around the ICO doubling down on fines for big tech organisations and questioning whether the NHS Data Security and Protection Toolkit effectively helps organisations meet legal requirements.

Why You Should Listen

This episode offers a unique opportunity to learn from real-world cases and the practical challenges data protection professionals face every day. Whether you’re a seasoned DPO or new to the world of compliance, you’ll gain insights into:

  • Handling complex data breaches
  • Ensuring data accuracy and its importance under GDPR
  • Navigating the pitfalls of informal data-sharing methods
  • Understanding the ICO’s enforcement priorities and the role of regulatory toolkits

Meet Our Hosts

Our expert panel brought their wealth of experience to the discussion:

  • Jasmine Harrison shared her extensive legal knowledge and experience in managing compliance challenges.
  • Joe Kirk provided invaluable insights into the operational side of data protection and maintaining GDPR compliance.
  • Catarina Santos added her perspective on NHS-related cases and regulatory enforcement trends.

Listen Now

Missed the live session? You can catch up on Episode 195: Real-World Cases in Data Protection on all major podcast platforms, including Spotify and Audible.

👉 Listen Here


Join the Discussion

The Data Protection Made Easy Podcast is your go-to resource for staying informed on the latest trends, regulations, and real-world cases in data protection. With over 1,300 subscribers and a thriving community, it’s free to join and provides the perfect platform to ask questions and share insights.

Be part of our next session – sign up via the events section of our website and join hundreds of like-minded professionals every Friday!

GDPR Radio – Episode 189

GDPR Radio – Episode 189 – Data Protection News of the Week

Welcome to Episode 189 of GDPR Radio! Last week’s live session was another fantastic discussion with over 100 community members tuning in to keep up to date with the latest news in the world of data protection. GDPR Radio is our bi-weekly series designed to provide fresh insights and cover the latest in GDPR developments, data protection trends, and regulatory updates.

What You Missed in Episode 189

Our hosts took a deep dive into the pressing issues affecting data protection this month. Each episode of GDPR Radio is carefully structured to highlight recent changes in legislation, cover high-profile data breaches, and provide updates on data privacy initiatives both in the UK and across the EU. For Episode 189, we focused on a mix of timely topics, covering both the latest legal changes and practical tips to help organisations stay compliant in today’s fast-evolving privacy landscape.

Joining Our GDPR Radio Community

The GDPR Radio series isn’t just a podcast—it’s an interactive platform where data protection professionals, enthusiasts, and anyone curious about data privacy can connect, ask questions, and share insights. If you’re keen to join our next live session, becoming part of our community is easy. By joining, you’ll gain access to exclusive content, networking opportunities, and direct communication with industry experts. Sessions are held every other week, giving our listeners an ongoing touchpoint with all things GDPR.

Why Tune In?

Each GDPR Radio episode is packed with practical information to help organisations navigate the challenges of data compliance and stay up to date on the most important data protection news. With over 1,300 subscribers and a thriving community, it’s a trusted source for reliable, timely information on the issues shaping data privacy today. Missed an episode? No worries! You can catch up on all past episodes, including Episode 189, on Spotify, Audible, and other major streaming platforms.

Stay connected, stay compliant, and join us on GDPR Radio for expert analysis, in-depth discussions, and a look ahead at what’s next in the world of data protection.

Using Artificial Intelligence In The Workplace

Using Artificial Intelligence In The Workplace: Data Protection Made Easy Podcast, Episode 192

On Friday, we hosted an engaging episode of the Data Protection Made Easy podcast on Using Artificial Intelligence In The Workplace. Joined by a live audience of over 150 data protection professionals, our hosts Jasmine Harrison, Joe Kirk, and Philip Brining brought their data protection expertise to a lively discussion on the potential risks and challenges that AI presents in today’s workplace.

While none of our hosts claim to be AI experts, they explored the practical implications of integrating AI responsibly, covering key legislation, new tools, and global standards. With a balanced perspective, they offered insights without scare tactics, engaging with an audience eager to better understand AI’s evolving role.

Highlights from Episode 192

News of the Week

Before diving into AI, our hosts kicked things off with their popular “news of the week” segment, where they discussed recent developments in data protection, cybersecurity, and compliance. From regulatory updates to emerging best practices, this segment set the stage for a thought-provoking main discussion.

Exploring AI’s Role in the Workplace

After covering current news, Jasmine, Joe, and Philip transitioned into the AI discussion, addressing some of the latest and most critical elements impacting AI’s role in data protection. Here’s a closer look at the three main topics they covered:

  1. The EU AI Act
    The EU AI Act is a first-of-its-kind attempt at regulating AI across the European Union, aiming to ensure that AI development aligns with human rights and data protection principles. Our hosts unpacked how this legislation, although still in its draft stages, will place restrictions on high-risk AI applications, particularly those that involve personal data. They discussed the potential compliance challenges businesses might face, such as navigating AI bias and ensuring AI decisions remain fair and transparent. Although new and complex, the EU AI Act is shaping up to become a major milestone in global AI governance.
  2. Microsoft Co-Pilot and Google Notebook
    AI tools like Microsoft Co-Pilot and Google Notebook have found their way into daily operations, streamlining processes from drafting content to assisting with administrative tasks. However, these tools bring data privacy challenges that data protection teams must address. The hosts highlighted how such AI-driven platforms collect, store, and process data, which could lead to unintended data exposure. With AI tools rapidly becoming workplace staples, Jasmine, Joe, and Philip explored practical ways organisations can limit data risk, maintain transparency, and respect user privacy without stifling innovation.
  3. ISO/IEC 42001: AI Governance Standards
    The conversation then turned to ISO/IEC 42001, a proposed global standard for governing AI management systems, expected to offer a framework for responsible AI deployment. This standard aims to provide a set of best practices for ensuring AI is deployed with privacy, security, and ethical guidelines in mind. For organisations adopting AI technologies, ISO/IEC 42001 could serve as a valuable tool to implement data governance practices that are both ethical and compliant.

Reflecting on the Risks and Rewards of AI

In wrapping up, our hosts emphasised that AI in the workplace presents significant potential alongside its risks. They touched on a range of data protection considerations, from safeguarding personal data to maintaining accountability when using automated tools. Rather than instilling fear, Jasmine, Joe, and Philip encouraged the audience to look at AI as an opportunity for growth—provided it’s used with a strong commitment to data protection and ethical standards.

Listen to the Episode

Couldn’t make it to the live session? No problem! Listen to Episode 192 of Data Protection Made Easy on Spotify, Audible, or any major podcast platform. You’ll gain valuable insights and hear from fellow data protection enthusiasts as they share their views on AI’s impact on the workplace.

Subscribe and Join the Conversation

With AI evolving rapidly, we’re committed to keeping our audience informed. Tune into Data Protection Made Easy every Friday for the latest on data protection trends, regulatory updates, and expert discussions. Don’t miss the opportunity to be part of our thriving community of data protection professionals!

GDPR Radio – Episode 191

GDPR Radio – Episode 191 A Deep Dive into Data Protection News

In Episode 191 of GDPR Radio, the Data Protection Made Easy Podcast takes a critical look at the latest updates and developments in the world of data protection, with a special focus on the ethics and implications of tracking and profiling technologies. Hosted by industry experts Phil Brining, Catarina Santos, and Jasmine Harrison, this episode delivers in-depth conversations around pressing topics that influence the landscape of privacy and security.

Topics Discussed:

  1. Meta’s AI-Enhanced Ray-Ban Glasses: Our hosts examine the ethical challenges surrounding Meta’s latest product, which raises privacy concerns around data collection and surveillance. Are current frameworks like GDPR enough to regulate such innovations?
  2. Updates from the ICO and EDPB: Get the latest news from the Information Commissioner’s Office and the European Data Protection Board, with a spotlight on issues like fingerprint scanning of children in schools and the broader implications for digital consent.
  3. Ransomware Threats and the Casio Incident: Learn more about the rising threats of ransomware, particularly through high-profile cases like the Casio incident. The episode emphasises the crucial role Chief Information Security Officers (CISOs) play in addressing these challenges, stressing that the human element and workplace culture are key defences in cybersecurity.
  4. Deep Fake Technology: Our hosts dive into the social engineering risks posed by deep fake technology, urging organisations and individuals to balance innovation with privacy safeguards to avoid exploitation.

Meet Our Hosts:

  • Phil Brining: Phil brings sharp insights and practical knowledge to the discussion.
  • Catarina Santos: Catarina provides a legal perspective on current events.
  • Jasmine Harrison: Jasmine delves into the societal implications of emerging data technologies.

Join the Data Protection Community

When you join the Data Protection Made Easy community, you get access to a wealth of resources, including:

  • Regular updates on the latest data protection news and regulations.
  • In-depth discussions on GDPR, privacy laws, and emerging technologies.
  • Networking opportunities with professionals from various industries.

Why join?

  • Stay Informed: Be the first to know about the latest trends and regulatory updates in data protection.
  • Expand Your Network: Connect with like-minded professionals and industry experts.
  • Exclusive Content: Enjoy early access to podcasts, webinars, and expert insights.

How to Join:

Joining our community is simple! Just click here to sign up and become part of the conversation. Whether you’re a professional or just starting in the world of data protection, our community has something for everyone.

Listen to GDPR Radio – Episode 191 A Deep Dive into Data Protection News

Our Events & Webinars

Industry Leading Discussions

We host events on a weekly basis for the community of data protection practitioners and have built up a network of over 1200 subscribers, who tune in each week to listen to discussions about the hot topics from the fast-paced and evolving world of data protection and cyber security. Check out our upcoming events and become part of our growing community.

View All
Final Data Protection Made Easy Podcast of 2024
20 December 24 12:30 - 1:30 pm

Final Data Protection Made Easy Podcast of 2024

Festive Data Protection Made Easy Podcast
13 December 24 12:30 - 1:30 pm

Festive Data Protection Made Easy Podcast

Get Support With Data Protection And Cyber Security

Our mission is to make data protection and cyber security easy: easy to understand and easy to do. We do that through the mantra of benchmark, improve, maintain.

This field is hidden when viewing the form
This field is hidden when viewing the form
This field is for validation purposes and should be left unchanged.