S3.E4. Data Protection Essentials for Procurement Professionals

Send us Fan Mail

Ever wonder how much personal data passes through your contracts, emails, and supplier handshakes? We sat down with Sara, a compliance lead who lives at the intersection of data protection, information security, and business continuity, to translate privacy law into buyer-friendly moves you can deploy today. No jargon. No scare tactics. Just clear guidance on where risk hides and how procurement can control it.

We break down what “personal data” really means, why work email addresses qualify, and how to choose and document the correct lawful basis without painting yourself into a corner later. Sara clarifies controllers vs processors, when you need a data sharing agreement versus a data processing agreement, and why robust clauses on purpose, retention, breach reporting, and international transfers are non-negotiable. You’ll learn how to handle supplier due diligence, flow down obligations to subcontractors, and raise the bar when special category or children’s data is involved.

We also tackle AI head-on: automated decision-making rights, the need for human review, and how to think about model training data, ethics, and transparency without freezing innovation. Plus, we unpack real-world fines and breaches from British Airways to healthcare ransomware to show what goes wrong when integrity and confidentiality are an afterthought. You’ll leave with practical steps for DSAR readiness, building a living ROPA, and SME-friendly resources that cut through noise.

If you touch contracts, vendors, or data, this conversation will sharpen your instincts and your documents. Subscribe, share with a colleague who owns vendor onboarding, and leave a review to tell us your biggest data protection challenge so we can answer it next time.

Support the show

Please get in touch as we love to hear from you listeners! You can use the "text" function above or drop us on email: [email protected] or visit our website www.letstalkprocurement.co.uk

It would also mean the world if you can drop us a cheeky 5* rating on your platform of choice, 

Cya Later