Data Protection Made Easy

Caine Glancy and Catarina Santos are back with GDPR Radio, the Data Protection Made Easy podcast.In this episode, they discuss the week’s key data protection stories and share practical insight into what they could mean for organisations.Listen for clear, useful discussion on privacy, AI, cyber security, regulation and the issues data protection professionals should be watching.

How is AI changing the role of the Data Protection Officer in 2026?In this episode of Data Protection Made Easy, we explore how AI is reshaping the DPO role, the new challenges privacy professionals are facing and what organisations need to consider as AI becomes more embedded in everyday work.We discuss how the DPO role is evolving, where AI creates new governance and compliance pressures and what this could mean for data protection teams moving forward

The data protection landscape continues to change, with new stories creating practical questions for organisations and privacy professionals.In this episode of the Data Protection Made Easy podcast, Amber Sivill and Mark Farrell discuss recent data protection developments and explain why they matter.The discussion covers:🔹 Key stories from across the data protection sector🔹 The practical effect of recent developments🔹 Considerations for data protection professionals🔹 What organisations should continue to monitor

In this episode of the Data Protection Made Easy podcast, Caine Glancy and Amber Sivill discussed how organisations can move beyond tick-box data protection training and create learning that changes behaviour.They explored what makes training relevant, practical and easier for staff to apply in their everyday work. The discussion also considered how effective training can support better decisions and reduce data protection risk.

In this episode of GDPR Radio, Caine Glancy and Catarina Santos discuss the latest data protection news and key developments from across the industry.The episode looks at recent updates, current talking points and what they may mean for organisations responsible for handling personal data.This episode is part of the Data Protection Made Easy podcast by Data Protection People.

This episode of GDPR Radio, part of the Data Protection Made Easy podcast, was hosted by Caine Glancy and Catarina Santos.In this episode, they discussed the key trends, biggest talking points and shared expert insight into the latest developments from the last two weeks across the data protection industry.As always, listeners joined live, used the live chat function and had the opportunity to unmute, ask the hosts questions and be part of the discussion.

This episode explores the growing uncertainty surrounding the EU-US Data Privacy Framework following the recent Trump v. Slaughter decision, what it could mean for international data transfers, and the potential impact on UK organisations. They also discuss political developments affecting privacy, Andy Burnham's proposed use of facial recognition technology, recent ICO enforcement activity, and other key stories shaping the data protection landscape. 

Records of Processing Activities (RoPAs) are often viewed as nothing more than a compliance requirement, but are organisations missing their true value?In this episode of the Data Protection Made Easy Podcast, Catarina Santos is joined by Data Protection Consultant Himanshi to discuss how RoPAs can become one of the most valuable tools in an organisation's privacy programme.Together, they explore why so many organisations struggle with RoPAs, the common mistakes they see, and how a well-maintained RoPA can support risk management, DPIAs, Subject Access Requests, and day-to-day compliance.They also discuss ownership, practical implementation, and why a RoPA should be treated as a living document rather than a spreadsheet that's only updated during an audit.Whether you're building your first RoPA or looking to get more value from an existing one, this episode offers practical advice to help you turn compliance into strategy.

In this week's GDPR Radio, Caine Glancy and Catarina Santos discuss some of the latest developments in data protection and privacy.The episode explores the rise in AI-generated Subject Access Requests (SARs), concerns around the ICO's approach to complaints and enforcement, the resignation of Information Commissioner John Edwards, and the UK Government's proposed social media restrictions for under-16s.The discussion considers the practical implications of these developments for organisations, data protection professionals and individuals, alongside wider questions around online safety, accountability and the future of regulation.Topics covered include:• AI-generated Subject Access Requests (SARs)• ICO complaints and enforcement• John Edwards' resignation• Social media restrictions for under-16s• Platform accountability and online safetyGDPR Radio is part of the Data Protection Made Easy podcast, bringing you the latest news, insights and practical guidance from the world of data protection and cyber security.

When a personal data breach occurs, the clock starts ticking immediately.The decisions made in the first few hours can have a significant impact on the outcome, affecting regulatory obligations, reputational damage, customer trust, and the overall response effort. Yet many organisations are unsure what they should actually be doing when a breach first comes to light.This episode is hosted by Caine Glancy and Catarina Santos. Together, they walk through the critical steps organisations should take immediately following a breach, including: Containing the incident and limiting further risk Assessing what has happened and who may be affected Determining whether notification obligations apply Managing internal and external communications Avoiding common mistakes that can make a situation worse Lessons learned from real-world breach scenarios This session focuses on practical actions and decision-making, rather than theory, helping you understand what a proportionate and effective response looks like when every minute counts.

In this episode of the Data Protection Made Easy podcast, host Caine Glancy welcomed James Robson, former DPO for The Labour Party and Cybersecurity & GDPR Expert.James brings a unique background spanning cybersecurity, data protection consultancy, government-backed research, and national politics, placing him at the heart of some of the most complex and high-profile data environments in the UK.During the discussion, we covered:🔹 Voter data and campaign targeting🔹 AI in political communications🔹 Cybersecurity and democratic processes🔹 Governance, public trust, and privacy law🔹 The future of privacy in democracy

Last Friday, we hosted another episode of GDPR Radio, part of the Data Protection Made Easy podcast, with Caine Glancy and Catarina Santos.During the session, we explored some of the biggest stories and developments from across the data protection landscape, discussing key regulatory updates, enforcement activity, emerging trends, and the practical implications for organisations. The conversation provided attendees with valuable insight into what these developments mean in practice and how organisations can stay ahead of an ever-evolving compliance environment.

Last Friday, Catarina Santos and Caine Glancy, discussed Training That Actually Changes Behaviour.Most organisations provide training... but how often does it genuinely change behaviour, improve decision-making, or create accountability?In this practical live discussion, we’ll explore what effective data protection training looks like in practice, why so much compliance training fails, and how organisations can evidence that learning is actually making a difference.

Join us for an episode of GDPR Radio, part of the Data Protection Made Easy podcast, hosted by Caine Glancy and Catarina Santos.Last week, we discussed the key trends, biggest talking points, and sharing expert insight into the latest developments from the last two weeks across the data protection industry.

In this live session, Katerina Douni and Catarina Santos will explore the most common issues uncovered during GDPR audits and why they continue to appear across organisations.They’ll break down recurring findings, explain the root causes behind them, and share practical insight on how to address gaps before they become regulatory problems.

Following the overwhelming response to our recent session on weaponised SARs, we hosted Part 2 on the Data Protection Made Easy podcast.We had over 180 attendees join us live and received a huge number of questions and scenarios throughout the session. Unfortunately, we weren’t able to cover everything on the day, so this session is dedicated to going deeper.In Part 2, we cover:Revisiting the topic of weaponised SARsWork through unanswered questions from the live chatDiscuss real scenarios submitted by attendeesShare further practical guidance on how organisations can respond