AI Tools & GDPR: What You Need to Know
Data Protection Made Easy Podcast
As AI tools like ChatGPT become part of everyday business, how do they align with GDPR? In this episode, Caine Glancy, Catarina Santos, and Philip Brining explore the privacy risks, regulatory challenges, and practical steps organisations must consider when using AI responsibly. Tune in for real-world insight, clear guidance, and a look at what’s coming next.

Data Protection Made Easy – Episode 215 – AI Tools & GDPR: What You Need to Know
As AI tools like ChatGPT, Gemini, and Copilot become embedded in the workplace, organisations are racing to understand how these technologies fit within existing data protection frameworks. In this episode of Data Protection Made Easy, we explore what it really means to use AI responsibly under UK GDPR.
Join Caine Glancy, Catarina Santos, and Philip Brining for a practical, thought-provoking session where we examine the privacy implications of generative AI, the risks of using publicly available tools, and the emerging expectations around lawful and ethical AI use.
This isn’t about fear or hype—it’s about helping data protection professionals make confident, compliant decisions in a fast-changing landscape.
What We’ll Discuss:
- How tools like ChatGPT handle personal data behind the scenes
- Key GDPR principles at play: transparency, purpose limitation, data minimisation, and lawful basis
- The challenges of using AI tools in regulated environments (including shadow IT risks)
- Real-world scenarios and common mistakes organisations make with AI
- The evolving regulatory picture and how to stay ahead of enforcement and best practice
Who Should Attend:
This episode is designed for:
- DPOs and compliance officers navigating AI risk
- IT and data teams assessing new tools
- Legal, HR, and operational teams using AI to streamline processes
- Anyone with a stake in responsible innovation
Whether you’re already using AI or still exploring its potential, you’ll leave this session with practical insights and a clearer understanding of your organisation’s responsibilities.
About Data Protection People:
At Data Protection People, we help organisations simplify compliance, build trust, and reduce risk. With over a decade of experience supporting clients across multiple sectors, our team of expert consultants deliver practical solutions across data protection, information security, and cyber resilience.
We offer a range of services to support organisations using AI responsibly—including AI risk assessments, GDPR gap analysis, and AI-specific audits. As AI adoption grows, we’re committed to keeping our ear to the ground, interpreting regulatory developments, and sharing what matters most with our community.
About the Podcast:
Data Protection Made Easy is the UK’s leading podcast for data protection professionals. With over 180 episodes and more than 1,300 regular subscribers, the podcast has become a trusted space for learning, discussion, and support.
Hosted every Friday lunchtime, our sessions bring together DPOs, consultants, tech leaders, and curious professionals to explore real-world data protection challenges and solutions in a relaxed, accessible format.
It’s free to join, and attendees are encouraged to take part in the discussion, ask questions, and learn from one another.