Data Protection Made Easy

 In this week’s episode of the Data Protection Made Easy Podcast, hosts Caine Glancy and Catarina Santos unpack the latest GDPR news. The discussion centres on the ICO’s handling of the MOD breach and the difficult balance between national security, transparency, and accountability. The hosts also explore inconsistencies in ICO enforcement, what this means for public bodies compared to private organisations, and how emerging issues like AI and recent personal data breaches are shaping the compliance landscape. 

During this episode of the Data Protection Made Easy Podcast our host Caine Glancy was joined by special guest Gbenga Onojobi to discuss the most popular topic in our community ... Subject Access Requests (SARs). Data Protection People has experienced a huge influx in SAR related queries over this summer and its a concern shared by DPOs across the UK. As well as several episodes on SARs the Data Protection People team also offer in depth training and award winning SAR Support Services to streamline the management process. Listen to this episode or get in touch with DPP to find out how we can support you. 

Why Digital ID is the headline topic

Digital ID promises faster access to services and stronger fraud controls, yet it raises real questions for privacy, transparency, and accountability. In this session we break down what a UK Digital ID framework could look like, how identity attributes are shared, what lawful bases may apply, and the governance you need before adoption. You will leave with clear steps to trial, procure, and monitor Digital ID solutions without creating new risks for data subjects.

What we covered:

Digital ID, practical models in the UK context, attribute sharing, interoperability, retention, vendor due diligence, and assurance.

DPIAs, when you need one, how to scope it well, ownership, documentation, and how to keep it live.

SAR enforcement, the Bristol City Council case, common pitfalls, service levels, triage, and defensible redaction.

If you enjoyed this episode and would like to join future episodes of the Data Protection Made Easy Podcast, visit our website and register for and of the amazing events we have on the horizon. Upcoming Events.

 Catarina Santos is joined by Oluwagbenga Onojobi (Gbenga) and Holly Miller, with a brief cameo from Phil Brining, for a fast moving guide to cookies in 2025. We cover what cookies are and the key types, why recent CNIL fines, including the Google case, show enforcement is rising, how PECR and UK GDPR apply, and what the DUA Act reforms mean for low risk cookies, fines, and the ICO consultation. We compare UK and EU approaches, unpack consent or pay, and share practical tips, equal prominence for Reject All, no pre ticked boxes, clear policy links, and keeping consent records. Send us your favourite or worst cookie banners, we may review them on a future episode. Episodes are now 30 minutes, free to join live each week. View upcoming events.

This week on GDPR Radio, Philip Brining and Catarina Santos explored some of the biggest stories in data protection. From CCTV audits and employee monitoring, to the ICO’s scrutiny of police use of facial recognition, the discussion also touched on AI posture tracking as an alternative to biometric surveillance. They unpacked the recent CJEU ruling that pseudonymised data is not always personal data, debated whether personal opinions should appear in SAR responses, and reflected on multimillion-euro fines against Google and Shein for cookie non-compliance. With sessions now streamlined into 30 minutes, GDPR Radio delivers fast-paced insights and practical takeaways for data protection professionals.

 On this special episode of the Data Protection Made Easy podcast we were joined by Phil Brining, Catarina Santos, Caine Glancy, and returning host Joe Kirk to look back at the top ten episodes from the last five years of the show. Data Protection People were not only celebrating their 10-year anniversary, but also marking five years of the Data Protection Made Easy podcast. A huge thank you to all of our listeners and community members who have supported us along the way. If you would like to join our growing community and gain access to live weekly sessions, networking opportunities, and exclusive content, please visit our website and request to become a subscriber. 

 Recorded on Friday 29 August 2025, this live episode of Data Protection Made Easy brings together Catarina Santos, Caine Glancy and Philip Brining to explain what the latest Online Safety Act changes mean in practice. The team walk through how age verification works, why VPN downloads have surged in the UK, and the real impact on privacy, user experience and compliance. You will hear practical guidance on DPIAs, vendor selection, minimising data, handling appeals, and staff training, plus a balanced look at risks for organisations and rights for individuals. Clear, accessible and grounded in real world examples. 

 In this follow-up to our most popular session to date, Caine Glancy and Philip Brining return to continue the conversation on the Data (Use and Access) Act 2025. With over 200 Data Protection Officers joining us live, this episode dives deeper into what’s changing, what’s not yet in force, and how organisations should be preparing in the months ahead.  If you’re responsible for compliance, data strategy or supporting DPOs, this session will help you separate the facts from the fearmongering and focus on what really matters. If you would like to join us live on future episodes make sure to contact us and request to be a subscriber to the Data Protection Made Easy community. Contact us here.

In this landmark episode of Data Protection Made Easy, hosts Phil Brining and Caine Glancy explore the newly passed Data (Use and Access) Act with over 270 data protection practitioners and enthusiasts in attendance, making it our most popular session to date. Together, they break down the key changes introduced by the Act, how it evolved from the DPDI Bill, and what it means for both public and private sector organisations. Tune in to hear expert insights, practical takeaways, and the community’s live reactions to one of the most significant updates in UK data protection law since the GDPR. If you would like to join us upcoming episodes live, email [email protected] and request to join our community. 

Part Two – SARs from Employees & Ex-Employees: In this follow-up episode, we dive deeper into the complexities of handling Subject Access Requests from current and former employees. Our expert panel shares real-life examples, lessons from our recent in-person SAR workshop, and practical tips to help organisations navigate these often sensitive and challenging requests with confidence and compliance.