Resources
Podcasts, Guides, Updates & More
Join our extensive list of clients who have their data privacy under control
Data Protection People Blogs
Data Privacy Learning & Guidance
Our mission is to make data protection easy: easy to understand and easy to do. Our weekly podcasts are available in our Resource Centre along with a collection of articles, white papers, useful guidance, templates, case law, and opinions – providing you with tools you can utilise in your workplace.
Top 5 Most Listened-to Episodes
The Top 5 Most Listened-to Episodes of the Data Protection Made Easy Podcast in 2024
2024 has been a monumental year for the Data Protection Made Easy Podcast. With 11,790 streams on Spotify, a growing community of over 1,381 subscribers, and consistent live attendance of 100+ listeners per session, the podcast continues to cement its status as the UK’s leading platform for data protection professionals.
This year has been full of exciting developments, including the honour of earning our IAPP accreditation, which has significantly boosted our visibility within the industry. Our episodes now regularly attract hundreds of listeners each week on Spotify alone, and the live discussions have become a must-attend event for privacy professionals.
As 2024 draws to a close, we’re taking a moment to reflect on our most popular episodes of the year. These episodes offer a snapshot of the topics that mattered most to data protection professionals, and they reveal some surprising trends. For the first time, Subject Access Requests (SARs) — historically our most popular topic — did not make the top 5. Instead, new and emerging themes have captured the attention of our listeners. Let’s explore the top 5 episodes and why we think they struck a chord with our audience.
1. DPIA Deep Dive – A Practical Guide on Data Protection Impact Assessments (24th July 2024)
Why it was popular: The topic of Data Protection Impact Assessments (DPIAs) remains a critical pain point for many organisations. With regulatory scrutiny increasing, understanding how to conduct a robust DPIA has become a priority for data protection officers (DPOs) and privacy teams. This episode stood out for its practical, step-by-step guidance on completing DPIAs effectively.
Our expert hosts shared actionable insights and tools that listeners could use immediately, making it one of the most replayed episodes of the year. It also provided clarity on common DPIA mistakes and how to avoid them, resonating strongly with both experienced and newly appointed DPOs.
2. AI and Its Potential Impact on Privacy (24th May 2024)
Why it was popular: It’s no surprise that this episode made it into the top 5. AI and privacy have dominated headlines and boardroom discussions throughout 2024. The general consensus across the data protection industry is one of caution. With tools like ChatGPT, Copilot, and generative AI transforming how businesses operate, privacy professionals are grappling with how to manage the associated risks.
This episode explored the regulatory landscape for AI, guidance from the ICO, and the challenges of ensuring fairness, transparency, and accountability in AI-driven decision-making. The episode’s popularity reflects a growing demand for practical advice on how to prepare for and respond to AI-related privacy risks.
3. Understanding the Role of a Data Protection Officer (DPO) (19th August 2024)
Why it was popular: With an increasing number of organisations appointing Data Protection Officers (DPOs), many privacy professionals are eager to understand the role, its responsibilities, and the skills required to succeed. This episode demystified the role of a DPO, providing clear definitions and outlining the competencies required for the job.
It also offered insights for those looking to become a DPO, which proved valuable for career development. By combining practical guidance with career advice, this episode engaged privacy professionals at all stages of their journey and sparked plenty of follow-up questions during the live Q&A.
4. Navigating the Complexities of International Data Transfers (13th September 2024)
Why it was popular: Cross-border data transfers continue to be a thorny issue for data protection teams, particularly in light of Schrems II and the ongoing discussions around Data Privacy Frameworks. This episode took a deep dive into how businesses can legally transfer personal data outside of the UK and EU, while remaining compliant with GDPR.
As regulatory guidance evolved in 2024, organisations were seeking clarity on what’s required to ensure lawful transfers. The episode’s focus on Standard Contractual Clauses (SCCs) and derogations gave listeners a solid foundation for managing their cross-border data flows.
5. RoPA Roundup – A Practical Workshop for DPOs (5th July 2024)
Why it was popular: Records of Processing Activities (RoPA) remain one of the most critical (and often misunderstood) obligations under GDPR. This episode offered a hands-on workshop where listeners could follow along and learn how to create, maintain, and review their RoPAs.
The workshop-style format proved highly engaging, offering templates, step-by-step instructions, and real-world examples. For organisations seeking to streamline their approach to RoPAs, this episode became an indispensable resource, with many listeners returning to it multiple times for reference.
What’s Next for 2025?
This year’s lineup of episodes reflected the changing priorities in data protection. While SARs remained an important service for Data Protection People, the demand for content on AI, DPIAs, and DPO roles shows that privacy professionals are seeking clarity on emerging risks and new responsibilities.
But we’re not stopping here. In 2025, we’re taking the Data Protection Made Easy Podcast to the next level with:
- New guest speakers from leading organisations.
- Live in-person events starting with our first event in Leeds, Yorkshire.
- Fresh episode formats that bring you closer to the conversations that matter.
If you’d like to be part of our first-ever live event or have ideas for guest speakers and topics, we want to hear from you! Our goal is to make the Data Protection Made Easy community even more engaging and insightful.
Thank You for Listening
To our listeners, subscribers, guest speakers, and hosts, thank you for being part of this incredible year. We’re proud of the impact we’ve made together and are excited to continue growing the community in 2025.
The Data Protection Made Easy Podcast has become a trusted resource for privacy professionals worldwide, and with our IAPP accreditation under our belt, we’re ready to keep raising the bar. Here’s to more insights, lively discussions, and impactful episodes in 2025.
If you’re interested in attending our first live event or have suggestions for topics and speakers, please get in touch — we’d love to hear from you!
Spreading Festive Cheer Without Data Fear
Festive Data Protection Tips
The festive period is one of the busiest times of the year for businesses and consumers alike. Companies look to connect with customers through heartwarming messages, irresistible Christmas deals, and thoughtful gestures. It’s a chance to spread joy, build stronger customer relationships, and generate goodwill. But amidst all the festive cheer, it’s essential to stay mindful of data protection rules to avoid being on Santa’s naughty list.
To help you stay on the right side of the law, we’ve outlined key areas where businesses often slip up during the holiday season. From festive greetings to customer data collection, here’s everything you need to know.
1. Sending Christmas Cards and E-Greetings
Sending festive greetings to clients and contacts is a lovely tradition, but it’s also an area that’s ripe for data protection mishaps. Traditionally, physical cards were sent through the mail, but now, many companies opt for festive e-cards or email greetings. Some companies have even sent animated advent calendars or interactive digital cards via email. However, modern methods bring modern risks.
Watch out for malicious attachments
Be cautious of any email attachments you receive. Cybercriminals often disguise malware as festive files, so double-check before clicking on any attachments. If a message from a colleague says, “Here’s your Christmas surprise!”, think twice before opening it.
Data protection laws apply to festive greetings
When sending personal festive messages to friends and family, you’re free to do so under the General Data Protection Regulation (GDPR). But in a work setting, the rules are different. Businesses must ensure that customer data is handled responsibly. Here’s how:
- Use BCC (blind carbon copy) when sending bulk emails. Avoid exposing other recipients’ email addresses.
- Keep marketing separate from greetings. If your message could be interpreted as promotional, the Privacy and Electronic Communications Regulations (PECR) may apply.
2. Understanding the Privacy and Electronic Communications Regulations (PECR)
The PECR works alongside GDPR to regulate direct marketing communications, including email and SMS. If your festive message could be viewed as promotional, it’s essential to follow PECR guidelines. Here’s what you need to know:
- Unsolicited messages require consent. If your message promotes products, services, or commercial activity, it’s classified as marketing.
- What’s acceptable and what’s not? “Happy Holidays” is fine. “Happy Holidays — Here’s a 10% discount on your next purchase” is likely considered marketing.
- Check your consent. To send direct marketing, you need clear, informed consent. General marketing opt-ins may not be specific enough for Christmas promotions. Ensure you have explicit consent to avoid breaching the PECR.
- Corporate emails have different rules. If you’re sending to a corporate subscriber (like a business email address), you may not need the same level of consent as required for individual email addresses.
3. Collecting Customer Data During the Festive Season
The holiday season often brings a surge of new customers, making it a prime opportunity to build your database. But as you collect personal data from new customers, you need to be clear about how you plan to use it.
- Be transparent. Provide clear privacy information explaining how you intend to use customer data. If you’re collecting data for a specific Christmas promotion, you’ll need to state that clearly. Avoid drafting privacy notices that are too restrictive, as they could prevent you from using the data for future marketing purposes.
- Check your privacy notices. If you say the data will “only be used for the Christmas prize draw,” you’ll be limited to that use. Ensure your privacy notice reflects the broader ways you may want to use the data.
4. Preparing for Data Breaches Over the Holiday Period
With increased business activity and reduced staffing, the Christmas period can leave organisations more vulnerable to data breaches. Handling a data breach during the holidays requires extra planning to ensure that issues can be dealt with swiftly and effectively.
- Plan for reduced staffing. If your Data Protection Officer (DPO) is on holiday, make sure there’s someone else trained to respond to data breaches. GDPR requires that breaches posing a risk to individuals’ rights be reported to the Information Commissioner’s Office (ICO) within 72 hours.
- Test your incident response plan. Ensure your breach response plan is fit for purpose, even with skeleton staffing.
- Maintain breach reporting awareness. Make sure staff know how to report potential data breaches, even when senior staff are away.
5. How to Stay Off Santa’s Naughty List
Here’s a quick summary of best practices to avoid festive data protection mishaps:
- Be cautious with e-card attachments — they may contain malware.
- BCC email recipients to avoid accidental data breaches.
- Check your marketing consents when sending promotional festive messages.
- Don’t over-restrict your privacy notices when collecting customer data.
- Prepare for data breaches during the holiday period, even with reduced staffing.
Sending festive greetings and running Christmas campaigns is a fantastic way to strengthen customer relationships. However, being mindful of GDPR, PECR, and data protection best practices will ensure you’re not caught off guard. Stay vigilant, stay compliant, and keep spreading the festive cheer — without the data fear!
Listen to the Data Protection Made Easy podcast and learn about more top tips for Data Protection.
Work With Data Protection People
Data Protection Consultant
Location: Hybrid role based at our Head Office near Leeds City Centre
Salary: £28,000 – £50,000 (DOE)
Contract: Full-time, 37 hours per week, Monday to Friday
Benefits: Up to 38 holidays per year (including Bank Holidays), Free Parking, Company Pension
About Us
Data Protection People (DPP) is one of the UK’s leading Data Protection Consultancies, supporting hundreds of clients across a wide range of sectors. Our work is diverse, and no two days are the same. If you’re looking for a role with variety, opportunity, and exposure to multiple industries, this could be the opportunity for you. You’ll be joining a collaborative operations team made up of some of the brightest and most supportive minds in the industry.
We are currently recruiting for two Data Protection Consultant positions. One role will focus on managing our Data Protection Support Desk, while the other will focus on delivering data protection consultancy services to our clients. Both roles require similar skills and experience, and during the recruitment process, we will assess where candidates fit best. If you’re experienced in data protection and ready for a challenge, we’d love to hear from you.
Your Responsibilities
Depending on your placement within the role (Consultancy or Support Desk), your key responsibilities may include:
Support Desk Manager Role
- Lead and develop our Data Protection Support Desk to ensure it operates effectively, efficiently, and at scale.
- Take responsibility for the continual development and growth of the Support Desk Services.
- Ensure operating procedures are documented, maintained, and adhered to.
- Deliver high levels of technical competence and quality across all client communications, reports, and project feedback.
- Develop and maintain a robust set of KPIs to monitor performance and ensure continuous improvement.
- Collaborate with sales and marketing to raise awareness of support services, contribute to blogs, and participate in our GDPR podcast series.
- Manage and develop a support team into subject matter experts, including recruitment, training, and performance management.
- Oversee support desk administration, including usage reports, setting up jobs, reviewing the resource library, and producing template documents.
- Work with other consultants to manage the reference library and support internal knowledge-sharing initiatives.
Data Protection Consultant Role
- Provide consultancy services to clients on all matters of data protection, including audits, advisory services, and compliance reviews.
- Manage client projects and deliver expert advice on data protection issues, including SARs (Subject Access Requests) and FOI (Freedom of Information) requests.
- Collaborate with the Support Desk and other consultants to ensure consistent standards and share knowledge and best practices.
- Support clients with ad-hoc data protection queries and provide guidance on regulatory updates.
- Contribute to internal development, including maintaining our reference library, toolkits, and operational processes.
What We’re Looking For
We’re looking for passionate, driven individuals who can demonstrate a high level of competence in data protection. We value flexibility, collaboration, and initiative. While we have two distinct roles available, both require a similar core set of skills and experience.
Essential Requirements
- Experience in data protection (GDPR, UK DPA 2018, FOI, etc.)
- Strong management and leadership skills – able to guide, support, and develop a team.
- Recognised Data Protection Practitioner qualification (e.g., CIPP/E, CIPM, or similar).
- The ability to manage and develop a team into subject matter experts.
- Strong experience in handling SARs (Subject Access Requests) and FOI (Freedom of Information) requests.
- A proactive, problem-solving mindset with the ability to manage competing priorities.
Desirable Requirements
- Previous experience working with support desk services or client support teams.
- An ability to communicate technical issues clearly and concisely to a variety of audiences.
- Experience contributing to blogs, webinars, and podcasts is a bonus.
Why Join Us?
At Data Protection People, we offer an environment where you can thrive, develop, and be part of a collaborative team that supports each other. We believe in continuous learning and development, which is why we provide clear career pathways, support for qualifications, and opportunities to work on a range of diverse projects with clients from multiple sectors.
Benefits include:
- Competitive salary of up to £50,000 (depending on experience)
- Up to 38 days of holiday (including bank holidays)
- Free parking at our head office near Leeds city centre
- Company pension scheme
The Latest Data Protection & Cyber Security News – November 2024
In November, our hosts, Joe, Phil, and Jasmine covered the latest updates in data protection, the challenges between controller and processor relationships, and the recently revealed DUA Bill.
Find out what’s discussed in each episode below.
Data Protection Made Easy: November’s Recap
Episode 193: GDPR Radio – The Ripple Effect
In our first GDPR radio session, hosts Joe and Phil invited Catarine Santos, our data protection consultant, to discuss the latest industry news. They discussed how a single industry change can create a ripple effect across businesses of all sizes.
Take data breaches, for example. Usually, there is a guilty party (the controller and/or processor) and a victim—the data subject. This breach affects more than these parties, impacting the wider supplier chain that has ties to the business. The same goes for regulatory changes – particularly the proposed DUA Bill, which we discuss in episode 196.
The Data Protection Made Easy podcast is a community resource that helps DPOs and professionals stay updated on industry changes and their potential impact. Listen to episode 193 to find out what you missed.
Episode 194: Understanding Data Protection Relationships
Under the UK GDPR, your business has varying obligations depending on your role in handling personal data. You may be a data controller, joint controller or processor.
A data controller decides the purpose and means of processing personal data. In comparison, a data processor handles data on behalf of the controller. If multiple controllers share control of the data for the same reason, they’re considered joint controllers.
Episode 194 uncovers the legal obligations tied to these roles and the complex relationship between data controllers and processors. Our hosts also discuss ways to ensure compliance across both parties, including filling out a DPIA and formalising partnerships in a written agreement.
Want to learn more? Listen to episode 194 on demand.
Episode 195: GDPR Radio – Data Breaches, Blunders & Big Tech
Our second GDPR radio session focused on the latest news in data protection and real-life cases from our host’s day-to-day work.
Jasmine shared her experience working on a data breach that led to 400 letters being sent to the wrong addresses. Our hosts assessed how these breaches happen and the legal rights data subjects can enforce when affected.
Later in the podcast, Joe and Catarina discussed several other cases, including the Farley v Paymaster court appeal and the ICO doubling down on big tech organisations. Listen to episode 195 for more expert insight.
Episode 196: SARs and the Data (Use & Access) Bill
In October 2024, the government published the Data (Use & Access) (DUA) Bill, the newest revision of the conservative parties’ failed DPDI Bill. While the DUA Bill drops several controversial reforms in the DPDI Bill, it appears to change how organisations handle subject access requests (SARs).
Our hosts break down the Bill’s key components, including ways to handle SARs in accordance with these changes. Learn more about the DUA Bill in episode 196 and subscribe to the podcast for further insight as the Bill develops through parliament.
Subscribe to Our Award-winning Podcast Today!
The Data Protection Made Easy podcast is a go-to resource for over 1,300 industry professionals. By joining our community, you’ll gain CPE credits for every episode and have exclusive access to live sessions.
Looking for hands-on data protection support? Contact our team today!
Data Protection People Podcasts
Data Privacy Learning & Guidance
Breaches, Blunders, and Big Tech Battles
Episode 195: Real-World Cases in Data Protection – A Look at News and Practical Challenges
In last week’s episode of the Data Protection Made Easy Podcast, we delved into some fascinating real-world cases, discussing not only the latest news in data protection but also hands-on insights from our hosts’ day-to-day work. This lively session shed light on the challenges organisations face when it comes to compliance and data management, as well as the innovative ways our experts help solve these issues.
What We Covered
Our discussion brought together a mix of current events, complex cases, and practical advice for data protection professionals. Here’s what was on the agenda:
Jasmine Harrison’s Case: A Data Breach Leading to Legal Action
Jasmine shared her experience handling a case involving over 400 letters sent to the wrong addresses—a severe data breach that led to a legal claim. This discussion explored how such breaches happen, their potential consequences, and the legal avenues available for affected individuals.
Joe Kirk’s Insightful Cases: Data Accuracy and Negligence
Joe highlighted two intriguing cases:
- Farley v Paymaster: A case emphasising the critical importance of maintaining accurate personal data.
- A Customer Data Case: Joe discussed an instance where poor data accuracy led to significant complications, underscoring the legal and operational need to keep information up-to-date.
Catarina Santos’ NHS Cases: Sensitive Data and the ICO’s Focus on Big Tech
Catarina brought two NHS-related cases to the table:
- The Use of WhatsApp: Discussing how sharing sensitive information on informal channels like WhatsApp can lead to compliance issues, even in life-or-death scenarios.
- Data Sharing Problems in the NHS: Exploring the challenges of securely sharing sensitive information and the critical need for robust systems.
Her favourite discussion revolved around the ICO doubling down on fines for big tech organisations and questioning whether the NHS Data Security and Protection Toolkit effectively helps organisations meet legal requirements.
Why You Should Listen
This episode offers a unique opportunity to learn from real-world cases and the practical challenges data protection professionals face every day. Whether you’re a seasoned DPO or new to the world of compliance, you’ll gain insights into:
- Handling complex data breaches
- Ensuring data accuracy and its importance under GDPR
- Navigating the pitfalls of informal data-sharing methods
- Understanding the ICO’s enforcement priorities and the role of regulatory toolkits
Meet Our Hosts
Our expert panel brought their wealth of experience to the discussion:
- Jasmine Harrison shared her extensive legal knowledge and experience in managing compliance challenges.
- Joe Kirk provided invaluable insights into the operational side of data protection and maintaining GDPR compliance.
- Catarina Santos added her perspective on NHS-related cases and regulatory enforcement trends.
Listen Now
Missed the live session? You can catch up on Episode 195: Real-World Cases in Data Protection on all major podcast platforms, including Spotify and Audible.
Join the Discussion
The Data Protection Made Easy Podcast is your go-to resource for staying informed on the latest trends, regulations, and real-world cases in data protection. With over 1,300 subscribers and a thriving community, it’s free to join and provides the perfect platform to ask questions and share insights.
Be part of our next session – sign up via the events section of our website and join hundreds of like-minded professionals every Friday!
GDPR Radio – Episode 189
GDPR Radio – Episode 189 – Data Protection News of the Week
Welcome to Episode 189 of GDPR Radio! Last week’s live session was another fantastic discussion with over 100 community members tuning in to keep up to date with the latest news in the world of data protection. GDPR Radio is our bi-weekly series designed to provide fresh insights and cover the latest in GDPR developments, data protection trends, and regulatory updates.
What You Missed in Episode 189
Our hosts took a deep dive into the pressing issues affecting data protection this month. Each episode of GDPR Radio is carefully structured to highlight recent changes in legislation, cover high-profile data breaches, and provide updates on data privacy initiatives both in the UK and across the EU. For Episode 189, we focused on a mix of timely topics, covering both the latest legal changes and practical tips to help organisations stay compliant in today’s fast-evolving privacy landscape.
Joining Our GDPR Radio Community
The GDPR Radio series isn’t just a podcast—it’s an interactive platform where data protection professionals, enthusiasts, and anyone curious about data privacy can connect, ask questions, and share insights. If you’re keen to join our next live session, becoming part of our community is easy. By joining, you’ll gain access to exclusive content, networking opportunities, and direct communication with industry experts. Sessions are held every other week, giving our listeners an ongoing touchpoint with all things GDPR.
Why Tune In?
Each GDPR Radio episode is packed with practical information to help organisations navigate the challenges of data compliance and stay up to date on the most important data protection news. With over 1,300 subscribers and a thriving community, it’s a trusted source for reliable, timely information on the issues shaping data privacy today. Missed an episode? No worries! You can catch up on all past episodes, including Episode 189, on Spotify, Audible, and other major streaming platforms.
Stay connected, stay compliant, and join us on GDPR Radio for expert analysis, in-depth discussions, and a look ahead at what’s next in the world of data protection.
Using Artificial Intelligence In The Workplace
Using Artificial Intelligence In The Workplace: Data Protection Made Easy Podcast, Episode 192
On Friday, we hosted an engaging episode of the Data Protection Made Easy podcast on Using Artificial Intelligence In The Workplace. Joined by a live audience of over 150 data protection professionals, our hosts Jasmine Harrison, Joe Kirk, and Philip Brining brought their data protection expertise to a lively discussion on the potential risks and challenges that AI presents in today’s workplace.
While none of our hosts claim to be AI experts, they explored the practical implications of integrating AI responsibly, covering key legislation, new tools, and global standards. With a balanced perspective, they offered insights without scare tactics, engaging with an audience eager to better understand AI’s evolving role.
Highlights from Episode 192
News of the Week
Before diving into AI, our hosts kicked things off with their popular “news of the week” segment, where they discussed recent developments in data protection, cybersecurity, and compliance. From regulatory updates to emerging best practices, this segment set the stage for a thought-provoking main discussion.
Exploring AI’s Role in the Workplace
After covering current news, Jasmine, Joe, and Philip transitioned into the AI discussion, addressing some of the latest and most critical elements impacting AI’s role in data protection. Here’s a closer look at the three main topics they covered:
- The EU AI Act
The EU AI Act is a first-of-its-kind attempt at regulating AI across the European Union, aiming to ensure that AI development aligns with human rights and data protection principles. Our hosts unpacked how this legislation, although still in its draft stages, will place restrictions on high-risk AI applications, particularly those that involve personal data. They discussed the potential compliance challenges businesses might face, such as navigating AI bias and ensuring AI decisions remain fair and transparent. Although new and complex, the EU AI Act is shaping up to become a major milestone in global AI governance. - Microsoft Co-Pilot and Google Notebook
AI tools like Microsoft Co-Pilot and Google Notebook have found their way into daily operations, streamlining processes from drafting content to assisting with administrative tasks. However, these tools bring data privacy challenges that data protection teams must address. The hosts highlighted how such AI-driven platforms collect, store, and process data, which could lead to unintended data exposure. With AI tools rapidly becoming workplace staples, Jasmine, Joe, and Philip explored practical ways organisations can limit data risk, maintain transparency, and respect user privacy without stifling innovation. - ISO/IEC 42001: AI Governance Standards
The conversation then turned to ISO/IEC 42001, a proposed global standard for governing AI management systems, expected to offer a framework for responsible AI deployment. This standard aims to provide a set of best practices for ensuring AI is deployed with privacy, security, and ethical guidelines in mind. For organisations adopting AI technologies, ISO/IEC 42001 could serve as a valuable tool to implement data governance practices that are both ethical and compliant.
Reflecting on the Risks and Rewards of AI
In wrapping up, our hosts emphasised that AI in the workplace presents significant potential alongside its risks. They touched on a range of data protection considerations, from safeguarding personal data to maintaining accountability when using automated tools. Rather than instilling fear, Jasmine, Joe, and Philip encouraged the audience to look at AI as an opportunity for growth—provided it’s used with a strong commitment to data protection and ethical standards.
Listen to the Episode
Couldn’t make it to the live session? No problem! Listen to Episode 192 of Data Protection Made Easy on Spotify, Audible, or any major podcast platform. You’ll gain valuable insights and hear from fellow data protection enthusiasts as they share their views on AI’s impact on the workplace.
Subscribe and Join the Conversation
With AI evolving rapidly, we’re committed to keeping our audience informed. Tune into Data Protection Made Easy every Friday for the latest on data protection trends, regulatory updates, and expert discussions. Don’t miss the opportunity to be part of our thriving community of data protection professionals!
GDPR Radio – Episode 191
GDPR Radio – Episode 191 A Deep Dive into Data Protection News
In Episode 191 of GDPR Radio, the Data Protection Made Easy Podcast takes a critical look at the latest updates and developments in the world of data protection, with a special focus on the ethics and implications of tracking and profiling technologies. Hosted by industry experts Phil Brining, Catarina Santos, and Jasmine Harrison, this episode delivers in-depth conversations around pressing topics that influence the landscape of privacy and security.
Topics Discussed:
- Meta’s AI-Enhanced Ray-Ban Glasses: Our hosts examine the ethical challenges surrounding Meta’s latest product, which raises privacy concerns around data collection and surveillance. Are current frameworks like GDPR enough to regulate such innovations?
- Updates from the ICO and EDPB: Get the latest news from the Information Commissioner’s Office and the European Data Protection Board, with a spotlight on issues like fingerprint scanning of children in schools and the broader implications for digital consent.
- Ransomware Threats and the Casio Incident: Learn more about the rising threats of ransomware, particularly through high-profile cases like the Casio incident. The episode emphasises the crucial role Chief Information Security Officers (CISOs) play in addressing these challenges, stressing that the human element and workplace culture are key defences in cybersecurity.
- Deep Fake Technology: Our hosts dive into the social engineering risks posed by deep fake technology, urging organisations and individuals to balance innovation with privacy safeguards to avoid exploitation.
Meet Our Hosts:
- Phil Brining: Phil brings sharp insights and practical knowledge to the discussion.
- Catarina Santos: Catarina provides a legal perspective on current events.
- Jasmine Harrison: Jasmine delves into the societal implications of emerging data technologies.
Join the Data Protection Community
When you join the Data Protection Made Easy community, you get access to a wealth of resources, including:
- Regular updates on the latest data protection news and regulations.
- In-depth discussions on GDPR, privacy laws, and emerging technologies.
- Networking opportunities with professionals from various industries.
Why join?
- Stay Informed: Be the first to know about the latest trends and regulatory updates in data protection.
- Expand Your Network: Connect with like-minded professionals and industry experts.
- Exclusive Content: Enjoy early access to podcasts, webinars, and expert insights.
How to Join:
Joining our community is simple! Just click here to sign up and become part of the conversation. Whether you’re a professional or just starting in the world of data protection, our community has something for everyone.
Listen to GDPR Radio – Episode 191 A Deep Dive into Data Protection News
Data Protection People Whitepapers
Data Privacy Learning & Guidance
How to Respond to a Data Subject Access Request (DSAR)
Read about how to properly handle a Data Subject Access Request (DSAR) as a data controller at an organisation who has received a request.
Do I need to do a DPIA?
Learn about Data Protection Impact Assessments (DPIAs) and how to manage them.
Data within Education
Data within Education Having joined Data Protection People as a graduate fresh from finishing Leeds Beckett University, my knowledge of GDPR and data protection was virtually non-existent, I was well and truly thrown in the deep end. You could say it was like learning how to run before I could walk. Luckily alongside having to…
Outsourced Consultant Versus In-House?
Do I need to do a DPIA? Whenever you implement a new processing activity, system, or process, you should consider whether a DPIA is needed. This should be done as early as possible in the process to allow time for the implementation of risk mitigation. Step One: is a DPIA legally required? The first thing…
Join our community
Our mission is to make data protection easy: easy to understand and easy to do. We do that through the mantra of benchmark, improve, maintain.