Data Protection Made Easy

Subject Access Requests are a fundamental right under the UK GDPR, designed to give individuals transparency over their personal data. However, across every sector we work with, we are seeing a clear shift in how these rights are being used.

In this episode, we explore the rise of weaponised SARs. These are requests submitted not just to access data, but to apply pressure, support disputes, or disrupt organisations.

Hosted by Catarina Santos and Caine Glancy, this session will break down what is happening in practice, why this trend is accelerating, and how organisations can respond with confidence.

Weaponised Subject Access Requests are rising, and they are becoming a real challenge for organisations.

In this episode of the Data Protection Made Easy podcast, Catarina Santos and Caine Glancy explore how SARs are increasingly being used strategically in disputes, complaints, and legal positioning.

This session dives into what organisations are actually seeing on the ground. From the rise of AI-generated requests to pressure from solicitors and increasingly complex, broad submissions, this is a practical discussion based on real scenarios.

Every episode of the Data Protection Made Easy podcast is hosted Infront of a live audience, it free to join and anyone is welcome, click here to register.

Joining our hosts Catarina Santos and Caine Glancy is Paul Holland, CEO and Founder of Beyond Encryption, bringing over 40 years of experience in secure communications, identity verification, and fraud prevention.

As safety and privacy regulations begin to overlap, organisations are facing a new challenge, how do you protect users while still complying with the UK GDPR?

In this session, we’ll explore:

This week Catarina Santos is joined by Mark Farrell, who recently made his debut on the podcast and quickly became a favourite with our community.

Mark brings valuable experience from his time at the ICO, and tomorrow’s session will explore recent updates around data protection complaints, alongside practical lessons and insights from a major project he and Catarina are currently working on.

In this session, Compliance Isn’t Culture: Fixing the Awareness Gap, special guest, Kathryn Brooks will join our hosts Caine Glancy and Catarina Santos to explore why policies and procedures alone are not enough to create a culture of data protection within an organisation.

The discussion will focus on why awareness programmes often fail to influence behaviour, and what organisations can do to embed data protection into everyday working practices rather than relying solely on annual training exercises.