In this episode of The Privacy Impact Shop, hosts Ben and Shaab dive into the ever-evolving world of privacy, regulation, and the value of data. From their recent travels and training sessions to the latest ICO actions on cookie compliance, the conversation explores how organisations are managing consent, regulation, and reputation in a fast-moving digital landscape.

They tackle hot topics including:

• The ICO’s expanded review of the UK’s top 1,000 websites for cookie banner compliance
• The rise of “consent or pay” models and what they mean for consumers and businesses
• The growing commercialisation of personal data and what your data might really be worth
• Profiling tools, safety applications, and the ethical boundaries of data-driven decision-making

Lively, insightful, and often humorous, Ben and Shaab unpack how privacy, technology, and commerce continue to collide and what it means for organisations navigating compliance.

In this episode of the Privacy Impact Shop brought to you by blackfootuk.com and gdpr.ie, Ben and Shaab are joined by PR technology expert Samantha Deeks to explore a fundamental challenge emerging at the intersection of AI and privacy law. The conversation centres around Samantha's revealing experiment with Claude AI, where she discovered the large language model had incorrect information about her company's co-founder—and more troubling still, admitted it couldn't "unlearn" this misinformation even when corrected.

This discovery exposes a core architectural problem: neural networks, designed to replicate human thought processes, cannot selectively forget information the way traditional databases can delete records. This creates what may be an insurmountable compliance challenge with GDPR's right to rectification and erasure. The discussion examines how this "whisper campaign" effect—where AI provides personalised, unverifiable information in private conversations—could fundamentally change how reputational management works.

Ben, Shaab, and Samantha explore the broader implications for the regulatory landscape, comparing the EU AI Act's use-case focused approach with traditional data protection frameworks. They discuss whether privacy laws will need to adapt to accommodate AI's technical limitations, or if AI regulation will need to become more prescriptive. The conversation also delves into the philosophical implications of AI regulation—how it's forcing us to redefine human values and what behaviours we consider fundamentally unacceptable, regardless of legal compliance. The episode concludes with practical advice for PR professionals and business leaders about understanding AI's reputational risks, the importance of organisations proactively auditing what AI systems know about them, and why governance frameworks may be more critical than regulatory compliance in managing AI-related harms.

Perfect for privacy professionals, PR practitioners, business leaders implementing AI strategies, and anyone grappling with how artificial intelligence is reshaping our relationship with information, truth, and personal data rights.

In this episode of Privacy Impact Shop, Ben and Shaab dive into the evolving complexity of global privacy regulations and what it means for businesses operating across multiple jurisdictions.

They discuss how we've moved from the post-GDPR era of regulatory harmonisation to a new reality where major economic blocks—the US, EU, Brazil, Singapore, and China—are taking increasingly divergent approaches to AI and data protection. This shift is forcing businesses to reconsider their global privacy strategies, sometimes choosing to compartmentalise operations rather than apply universal standards.

The conversation also reveals insights into what's driving demand in the privacy market, from AI governance frameworks like NIST RMF and ISO 42001, to the growing need for technical implementation expertise.

Ben shares how their privacy practice has grown rapidly by combining consultancy with training, explaining why being able to teach something demonstrates you truly understand it.

Perfect for privacy professionals, business leaders, and anyone trying to navigate the increasingly complex world of global data protection regulations in an AI-driven economy.