Show Notes
DPIAs are one of the most powerful tools in data protection when done properly. But too often they become tick box exercises that fail to manage real risk. In this episode, we will be cutting through the theory to focus on what works in practice, including:
What regulators actually expect to see
Common mistakes that undermine DPIAs
How to turn DPIAs into genuine risk management tools
Practical examples that protect individuals and organisations alike
More from Data Protection Made Easy
The project is ready to launch. The supplier has been chosen. Then someone asks whether a Data Protection Impact Assessment has been completed. How much room is left to influence the decisions? In this episode of Data Protection Made Easy, Caine Glancy and Catarina Santos explore the timing of DPIAs and the practical challenge of involving data protection teams while projects are still taking shape. The conversation centres on a familiar issue for privacy professionals: how to make a DPIA a useful part of project planning rather than a last-minute request for sign-off. If you support projects, advise on data protection or regularly hear “can you just approve this?”, this episode is for you. Explore upcoming sessions: https://dataprotectionpeople.com/events/
What’s been happening in data protection this week? Catarina Santos and Caine Glancy return for S2 Ep39 of Data Protection Made Easy, bringing you another GDPR Radio catch-up on the latest news and what it means in practice. Expect a plain-English conversation about the week’s developments and the questions they raise for organisations and data protection professionals.
Your organisation wants to use AI. Before you get started, what do you need to understand about the tool and the information it will process? Caine Glancy and Catarina Santos explore the relationship between AI systems and data protection impact assessments (DPIAs), looking at both assessing AI tools and using AI to help prepare an assessment. They discuss purpose, lawful basis, supplier information, data flows and the importance of setting clear boundaries around how staff use AI. They also consider where AI can offer practical support, such as organising project information and suggesting questions, without replacing the judgement needed to assess the real risks. A completed document is only useful if it reflects what your organisation is actually doing. This conversation looks at how to keep that context, and human oversight, at the centre of the process.
What happens when FCA expectations and data protection responsibilities meet? In the first episode of our Sector Spotlight series, Mark Farrell from Data Protection People speaks with Phillip Garlick, CEO of our partners at Product Partnerships Limited (PPL). Together, they explore the practical questions DPOs face in regulated organisations, where UK GDPR needs to be considered alongside financial regulation. They discuss why data protection and compliance teams need to work together, and how to approach decisions when more than one set of regulatory expectations is involved. This episode is for DPOs, compliance and risk teams, and anyone responsible for how personal data is handled in an FCA-regulated organisation.
Caine Glancy and Catarina Santos are back for another GDPR Radio news round-up. They look at recent developments across data protection, privacy and information security, and talk through what they could mean for organisations in practice. Catch up with the discussion and hear the points worth keeping on your radar.