Show Notes
When a personal data breach occurs, the clock starts ticking immediately.
The decisions made in the first few hours can have a significant impact on the outcome, affecting regulatory obligations, reputational damage, customer trust, and the overall response effort. Yet many organisations are unsure what they should actually be doing when a breach first comes to light.
This episode is hosted by Caine Glancy and Catarina Santos. Together, they walk through the critical steps organisations should take immediately following a breach, including:
Containing the incident and limiting further risk
Assessing what has happened and who may be affected
Determining whether notification obligations apply
Managing internal and external communications
Avoiding common mistakes that can make a situation worse
Lessons learned from real-world breach scenarios
This session focuses on practical actions and decision-making, rather than theory, helping you understand what a proportionate and effective response looks like when every minute counts.
More from Data Protection Made Easy
The project is ready to launch. The supplier has been chosen. Then someone asks whether a Data Protection Impact Assessment has been completed. How much room is left to influence the decisions? In this episode of Data Protection Made Easy, Caine Glancy and Catarina Santos explore the timing of DPIAs and the practical challenge of involving data protection teams while projects are still taking shape. The conversation centres on a familiar issue for privacy professionals: how to make a DPIA a useful part of project planning rather than a last-minute request for sign-off. If you support projects, advise on data protection or regularly hear “can you just approve this?”, this episode is for you. Explore upcoming sessions: https://dataprotectionpeople.com/events/
What’s been happening in data protection this week? Catarina Santos and Caine Glancy return for S2 Ep39 of Data Protection Made Easy, bringing you another GDPR Radio catch-up on the latest news and what it means in practice. Expect a plain-English conversation about the week’s developments and the questions they raise for organisations and data protection professionals.
Your organisation wants to use AI. Before you get started, what do you need to understand about the tool and the information it will process? Caine Glancy and Catarina Santos explore the relationship between AI systems and data protection impact assessments (DPIAs), looking at both assessing AI tools and using AI to help prepare an assessment. They discuss purpose, lawful basis, supplier information, data flows and the importance of setting clear boundaries around how staff use AI. They also consider where AI can offer practical support, such as organising project information and suggesting questions, without replacing the judgement needed to assess the real risks. A completed document is only useful if it reflects what your organisation is actually doing. This conversation looks at how to keep that context, and human oversight, at the centre of the process.
What happens when FCA expectations and data protection responsibilities meet? In the first episode of our Sector Spotlight series, Mark Farrell from Data Protection People speaks with Phillip Garlick, CEO of our partners at Product Partnerships Limited (PPL). Together, they explore the practical questions DPOs face in regulated organisations, where UK GDPR needs to be considered alongside financial regulation. They discuss why data protection and compliance teams need to work together, and how to approach decisions when more than one set of regulatory expectations is involved. This episode is for DPOs, compliance and risk teams, and anyone responsible for how personal data is handled in an FCA-regulated organisation.
Caine Glancy and Catarina Santos are back for another GDPR Radio news round-up. They look at recent developments across data protection, privacy and information security, and talk through what they could mean for organisations in practice. Catch up with the discussion and hear the points worth keeping on your radar.