Talking Data Protection

Tom Hughes and Harvey Pare explain how to manage the full lifecycle of appointing a supplier to process personal data, from confirming whether it is a processor, through risk-based due diligence and an Article 28-compliant contract, to ongoing oversight and a practical exit plan. They also discuss sub-processors, international transfers, security, data subject requests, breach reporting and AI-related uses of data.

In this episode, we're returning to data subject access requests — or DSARs. This time, we're looking at what steps to take before a DSAR comes across your desk.

In this episode of Talking Data Protection, we break down the new rules on data protection complaints coming into force this month. Our hosts look at real life scenarios, and how they'd be handled in theory.

In this month's episode of Talking Data Protection, we're taking a closer look at the complex world of international data transfers. With some help from a familiar friend of the podcast, we look at six real world examples of possible concerns and issues that come from international data transfers, and explain how to deal with the issues before they come bigger problems.

In this episode of Talking Data Protection, our hosts look at the uses of agentic AI. Though often described as helpful, there are risks associated with the use of this type of AI, from small inconviences to bigger risks to data privacy.

In this episode our hosts are joined by Natalie Reed, a colleague in our dispute resolution team. Together they discuss what happens when data protection breaches occur and an individual or group take an organisation to court.

Direct marketing comes in three main forms: electronic mail marketing, telephone marketing and postal marketing. While a lot of businesses will use some form of direct marketing, most complaints made to the ICO are due to non-compliance with the rules and regulations for contacting potential customers and clients. In this episode of Talking Data Protection, our experts look at how to ensure you and your business are compliant, avoiding investigations and possible fines.

In this episode of Talking Data Protection, our hosts talk through how you and your business can ensure you're compliant with GDPR.

In our very special Christmas episode of Talking Data Protection, our hosts welcome some questions from our loyal listeners. From Holly's privacy notice concerns, to the Yule Lads records being translated in the UK, our experts break down why our listeners may be getting coal in their stockings, and how to rectify any data protection mishaps.

On 1st September, the new failure to prevent fraud offence came into effect under the Economic Crime and Corporate Transparency Act 2023. This duty may lead to more businesses utilising employee monitoring to prevent fraud. In this podcast episode, our hosts are joined by Sadie Rice, a member of our regulatory team. Sadie talks us through the new legal duty, while Tom Hughes and Lucy Collins discuss what to bear in mind when it comes to monitoring employees in a lawful and fair way.