Legitimately Interesting

Organisations across the board are reporting a massive uptick in GDPR-related complaints, many of which seem AI-generated. Jamie Drucker & Hannah Crowther discuss how to manage these complaints, and the new UK DUAA obligations on complaints-handling.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, Jamie Drucker and Hannah Crowther discuss some of the biggest pitfalls which arise when relying on consent and offer some practical tips on how to avoid them.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, Jamie Drucker and Hannah Crowther discuss the broad scope of the special category data regime, its specific challenges in the age of AI and why it gives rise to some unanticipated consequences.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this Christmas episode of Legitimately Interesting, Jamie and Marc pick out a few highlights from the year in data protection and make their predictions for 2026.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, Jamie Drucker and Mark Watts review the EU's proposed reforms to the GDPR, consider their practical implications and assess whether they meet the EU's stated objectives.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

The European Data Protection Board (EDPB) held its plenary meeting on 16 October, announcing its next coordinated enforcement action: transparency compliance. In this episode, Jamie Drucker and Mark Watts unpack what this means in practice, exploring the key themes organisations should consider when reviewing their privacy notices.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting Jamie Drucker and Mark Watts discuss how to engage with data protection authorities, from responding to informal requests for information to detailed notices of intent.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode Jamie Drucker and Mark Watts discuss data breaches and give some practical tips on how to handle breach notification issues.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, Jamie Drucker and Hannah Crowther tackle the topic of Agentic AI. What is it and why does it give rise to new data protection risks which do not arise for generative AI.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

Jamie Drucker and Hannah Crowther discuss the adoption of Privacy Enhancing Technologies, and the evolving regulatory landscape for PETs.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

Hannah Crowther and Mac Macmillan discuss the often over-looked GDPR requirement that personal data must be processed fairly, and what this means in practice.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

Faye Harrison and Jamie Drucker discuss the current status of the OSA, practical steps service providers should be taking now to get ready for compliance deadlines, the potential enforcement risk if duties are not complied with, and further changes we can expect to see over the coming months.Check out our brand-new online safety resource hub here.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode, Hannah Crowther and Jamie Drucker deep dive on the EDPB’s recent opinion on AI models, looking at what it covered, its implications and (crucially) what it missed.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

As it’s Christmas, Hannah Crowther and Jamie Drucker have each chosen 3 highlights/interesting titbits/gripes from the world of data protection in 2024. Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on X and LinkedIn to find more interesting content like this.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode, Hannah and Jamie break down what you need to know about the UK’s new data protection law – the Data (Use and Access) Bill.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode, Hannah Crowther and Mac Macmillan discuss anonymisation. We cover the latest case law and guidance, and consider how to make that critical assessment of ‘identifiability’.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

With the ICO announcing a very unusual intent to fine a data processor, in this episode of Legitimately Interesting, Hannah Crowther and Jamie Drucker talk more about the exposure of data processors under the GDPR – not just fines, but directly to the controller, and to data subjects – and how best to manage those risks.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, Jamie Drucker, Marc Dautlich and Mac Macmillan discuss what the GDPR has to say about scientific research, the divergent approaches of the EU and UK in this area, the feasibility of anonymising data, and the role of consent when doing research.To hear more like this from our experts, visit our dedicated page here.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, Hannah Crowther and Jamie Drucker discuss (and occasionally gripe!) about joint controllership. They assess the case law and guidance and ask the question: does joint controllership really make any difference?Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, Jamie Drucker and Mac Macmillan cover the thorny topic of data retention and deletion. They discuss some of the challenges organisations face in implementing retention policies, look at recent regulatory decisions and give a few practical best practice tips. Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, Hannah Crowther and Jamie Drucker discuss the CJEU's judgment in the IAB TCF case, including considering its impact on questions of joint control and identifiability as well as the ramifications for the Adtech industry.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, Hannah Crowther and Jamie Drucker discuss the fascinating topic of automated decision making (Art 22 GDPR), including analysing the CJEU’s recent “SCHUFA” judgment.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, Hannah Crowther and William White discuss the recent EDPB guidance on Article 5(3) of the ePrivacy Directive, and the impact it has on technologies far beyond cookies.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, Mark Watts and Hannah Crowther discuss best practices and regulatory guidance when processing personal data about children.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, Hannah Crowther and Jamie Drucker discuss the UK’s brand new Online Safety Act. They review the background to the legislation, who it applies to, the range of obligations and the Act’s enforcement regime.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, our data protection experts Hannah Crowther and Jamie Drucker talk biometrics, unpacking the GDPR’s legal requirements whilst offering practical advice on using biometric technologies.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In this episode of Legitimately Interesting, data protection experts Hannah Crowther and Jamie Drucker identify six tips for managing employee DSARs. We recommend a pragmatic, risk-based approach – and don’t let perfect be the enemy of the good.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.

In the very first episode of Legitimately Interesting, data protection experts Hannah Crowther, Faye Harrison and Jamie Drucker look at the data protection issues surrounding the adoption of Generative AI. They offer practical advice when first deciding on a solution and then implementing it in your business, as well as assessing the regulatory landscape for Generative AI.Note: All information was correct at the time of recording.Find all the episodes as we release them here, and don’t forget to subscribe! Follow us on LinkedIn to find more interesting content like this.