The project is ready to launch. The supplier has been chosen. Then someone asks whether a Data Protection Impact Assessment has been completed.

How much room is left to influence the decisions?

In this episode of Data Protection Made Easy, Caine Glancy and Catarina Santos explore the timing of DPIAs and the practical challenge of involving data protection teams while projects are still taking shape.

The conversation centres on a familiar issue for privacy professionals: how to make a DPIA a useful part of project planning rather than a last-minute request for sign-off.

If you support projects, advise on data protection or regularly hear “can you just approve this?”, this episode is for you.

Explore upcoming sessions:
https://dataprotectionpeople.com/events/

What’s been happening in data protection this week?

Catarina Santos and Caine Glancy return for S2 Ep39 of Data Protection Made Easy, bringing you another GDPR Radio catch-up on the latest news and what it means in practice.

Expect a plain-English conversation about the week’s developments and the questions they raise for organisations and data protection professionals.

Your organisation wants to use AI. Before you get started, what do you need to understand about the tool and the information it will process?

Caine Glancy and Catarina Santos explore the relationship between AI systems and data protection impact assessments (DPIAs), looking at both assessing AI tools and using AI to help prepare an assessment.

They discuss purpose, lawful basis, supplier information, data flows and the importance of setting clear boundaries around how staff use AI.

They also consider where AI can offer practical support, such as organising project information and suggesting questions, without replacing the judgement needed to assess the real risks.

A completed document is only useful if it reflects what your organisation is actually doing. This conversation looks at how to keep that context, and human oversight, at the centre of the process.

What happens when FCA expectations and data protection responsibilities meet?

In the first episode of our Sector Spotlight series, Mark Farrell from Data Protection People speaks with Phillip Garlick, CEO of our partners at Product Partnerships Limited (PPL). Together, they explore the practical questions DPOs face in regulated organisations, where UK GDPR needs to be considered alongside financial regulation.

They discuss why data protection and compliance teams need to work together, and how to approach decisions when more than one set of regulatory expectations is involved.

This episode is for DPOs, compliance and risk teams, and anyone responsible for how personal data is handled in an FCA-regulated organisation.

Caine Glancy and Catarina Santos are back for another GDPR Radio news round-up. They look at recent developments across data protection, privacy and information security, and talk through what they could mean for organisations in practice.

Catch up with the discussion and hear the points worth keeping on your radar.

AI can help speed up the work involved in responding to subject access requests, but how confident can you be in what it leaves behind?

In this episode of Data Protection Made Easy, Amber Sivill and Katerina Douni explore AI redaction tools and the mistakes that can slip through when organisations rely on automated systems to prepare SAR responses.

The conversation looks at where technology can support the process, why human review still matters and the importance of checking information carefully before it is shared.

Join an upcoming live session:
https://dataprotectionpeople.com/events/

There’s been plenty to talk about in data protection. In this episode of GDPR Radio, Caine Glancy and Catarina Santos catch up on the latest news and share their thoughts on what it means for organisations and the people handling personal data every day.

Expect a mix of news, discussion and practical perspectives from the Data Protection Made Easy community.

In this episode of the Data Protection Made Easy podcast, Amber Sivill and Mark Farrell continue their discussion about weaponised subject access requests.

They explore what happens when a SAR becomes part of a wider dispute, the challenges this can create for organisations and how teams can respond without losing sight of their legal responsibilities.

This is part three of our Weaponised SARs series, with practical insight to help organisations manage difficult requests fairly and confidently.