Data Protection Made Easy

Data Protection Made Easy

By Data Protection PeopleNewsTechnologyBusiness News
Download on the App Store

Data Protection Made Easy episodes

  • S2 Ep23: Spreadsheet to Strategy: Making RoPAs Work for You

    Records of Processing Activities (RoPAs) are often viewed as nothing more than a compliance requirement, but are organisations missing their true value?

    In this episode of the Data Protection Made Easy Podcast, Catarina Santos is joined by Data Protection Consultant Himanshi to discuss how RoPAs can become one of the most valuable tools in an organisation's privacy programme.

    Together, they explore why so many organisations struggle with RoPAs, the common mistakes they see, and how a well-maintained RoPA can support risk management, DPIAs, Subject Access Requests, and day-to-day compliance.

    They also discuss ownership, practical implementation, and why a RoPA should be treated as a living document rather than a spreadsheet that's only updated during an audit.

    Whether you're building your first RoPA or looking to get more value from an existing one, this episode offers practical advice to help you turn compliance into strategy.

    46 min
  • S2 Ep22: GDPR Radio: Data Protection News Of The Week

    In this week's GDPR Radio, Caine Glancy and Catarina Santos discuss some of the latest developments in data protection and privacy.

    The episode explores the rise in AI-generated Subject Access Requests (SARs), concerns around the ICO's approach to complaints and enforcement, the resignation of Information Commissioner John Edwards, and the UK Government's proposed social media restrictions for under-16s.

    The discussion considers the practical implications of these developments for organisations, data protection professionals and individuals, alongside wider questions around online safety, accountability and the future of regulation.

    Topics covered include:

    • AI-generated Subject Access Requests (SARs)
    • ICO complaints and enforcement
    • John Edwards' resignation
    • Social media restrictions for under-16s
    • Platform accountability and online safety

    GDPR Radio is part of the Data Protection Made Easy podcast, bringing you the latest news, insights and practical guidance from the world of data protection and cyber security.

    45 min
  • S2 Ep21: The First 72 Hours After A Data Breach
    When a personal data breach occurs, the clock starts ticking immediately.
    The decisions made in the first few hours can have a significant impact on the outcome, affecting regulatory obligations, reputational damage, customer trust, and the overall response effort. Yet many organisations are unsure what they should actually be doing when a breach first comes to light.
    This episode is hosted by Caine Glancy and Catarina Santos. Together, they walk through the critical steps organisations should take immediately following a breach, including:
    • Containing the incident and limiting further risk
    • Assessing what has happened and who may be affected
    • Determining whether notification obligations apply
    • Managing internal and external communications
    • Avoiding common mistakes that can make a situation worse
    • Lessons learned from real-world breach scenarios

      • This session focuses on practical actions and decision-making, rather than theory, helping you understand what a proportionate and effective response looks like when every minute counts.
      42 min
    • S2 Ep20: Data Protection in the Next Election - Live with James Robson

      In this episode of the Data Protection Made Easy podcast, host Caine Glancy welcomed James Robson, former DPO for The Labour Party and Cybersecurity & GDPR Expert.

      James brings a unique background spanning cybersecurity, data protection consultancy, government-backed research, and national politics, placing him at the heart of some of the most complex and high-profile data environments in the UK.

      During the discussion, we covered:

      🔹 Voter data and campaign targeting
      🔹 AI in political communications
      🔹 Cybersecurity and democratic processes
      🔹 Governance, public trust, and privacy law
      🔹 The future of privacy in democracy

      50 min
    • S2 Ep19: GDPR Radio - Data Protection News of the Week

      Last Friday, we hosted another episode of GDPR Radio, part of the Data Protection Made Easy podcast, with Caine Glancy and Catarina Santos.

      During the session, we explored some of the biggest stories and developments from across the data protection landscape, discussing key regulatory updates, enforcement activity, emerging trends, and the practical implications for organisations. The conversation provided attendees with valuable insight into what these developments mean in practice and how organisations can stay ahead of an ever-evolving compliance environment.

      44 min
    • S2 Ep18: Training That Actually Changes Behaviour

      Last Friday, Catarina Santos and Caine Glancy, discussed Training That Actually Changes Behaviour.

      Most organisations provide training... but how often does it genuinely change behaviour, improve decision-making, or create accountability?

      In this practical live discussion, we’ll explore what effective data protection training looks like in practice, why so much compliance training fails, and how organisations can evidence that learning is actually making a difference.

      44 min
    • S2 Ep17: GDPR Radio- News of the week

      Join us for an episode of GDPR Radio, part of the Data Protection Made Easy podcast, hosted by Caine Glancy and Catarina Santos.

      Last week, we discussed the key trends, biggest talking points, and sharing expert insight into the latest developments from the last two weeks across the data protection industry.

      48 min
    • S2 Ep16: What Auditors Always Find (And Why)

      In this live session, Katerina Douni and Catarina Santos will explore the most common issues uncovered during GDPR audits and why they continue to appear across organisations.

      They’ll break down recurring findings, explain the root causes behind them, and share practical insight on how to address gaps before they become regulatory problems.

      48 min
    • S2 Ep15: Weaponised SARs Part 2 - Live Discussion & Q&A

      Following the overwhelming response to our recent session on weaponised SARs, we hosted Part 2 on the Data Protection Made Easy podcast.

      We had over 180 attendees join us live and received a huge number of questions and scenarios throughout the session. Unfortunately, we weren’t able to cover everything on the day, so this session is dedicated to going deeper.

      In Part 2, we cover:
      Revisiting the topic of weaponised SARs
      Work through unanswered questions from the live chat
      Discuss real scenarios submitted by attendees
      Share further practical guidance on how organisations can respond

      45 min
    • S2 Ep14: AI and Data Protection: Managing Risk Without Killing Innovation
      We’re back this Friday with another live episode of the Data Protection Made Easy podcast, and this is set to be a popular one.
      This week, Caine and Amber will be discussing AI and data protection, exploring how organisations can manage risk without killing innovation.
      AI tools are now part of everyday working life, but they bring real challenges when it comes to GDPR. In this session, we’ll look at how to use AI responsibly, what good governance looks like, and the practical steps organisations can take to stay compliant while still moving forward.
      51 min

    About Data Protection Made Easy

    From the publisher's feed

    A weekly podcast hosted by our experts at Data Protection People covering a wide range of data protection and cyber security topics. We also join together to discuss the news of the week and recent…