Data Protection Made Easy

This episode explores the growing uncertainty surrounding the EU-US Data Privacy Framework following the recent Trump v. Slaughter decision, what it could mean for international data transfers, and the potential impact on UK organisations. They also discuss political developments affecting privacy, Andy Burnham's proposed use of facial recognition technology, recent ICO enforcement activity, and o...

Records of Processing Activities (RoPAs) are often viewed as nothing more than a compliance requirement, but are organisations missing their true value? In this episode of the Data Protection Made Easy Podcast, Catarina Santos is joined by Data Protection Consultant Himanshi to discuss how RoPAs can become one of the most valuable tools in an organisation's privacy programme. Together, they explor...

In this week's GDPR Radio, Caine Glancy and Catarina Santos discuss some of the latest developments in data protection and privacy. The episode explores the rise in AI-generated Subject Access Requests (SARs), concerns around the ICO's approach to complaints and enforcement, the resignation of Information Commissioner John Edwards, and the UK Government's proposed social media restrictions for und...

When a personal data breach occurs, the clock starts ticking immediately. The decisions made in the first few hours can have a significant impact on the outcome, affecting regulatory obligations, reputational damage, customer trust, and the overall response effort. Yet many organisations are unsure what they should actually be doing when a breach first comes to light. This episode is hosted by Cai...

Last Friday, we hosted another episode of GDPR Radio, part of the Data Protection Made Easy podcast, with Caine Glancy and Catarina Santos. During the session, we explored some of the biggest stories and developments from across the data protection landscape, discussing key regulatory updates, enforcement activity, emerging trends, and the practical implications for organisations. The conversation...

Last Friday, Catarina Santos and Caine Glancy, discussed Training That Actually Changes Behaviour. Most organisations provide training... but how often does it genuinely change behaviour, improve decision-making, or create accountability? In this practical live discussion, we’ll explore what effective data protection training looks like in practice, why so much compliance training fails, and how o...

Join us for an episode of GDPR Radio, part of the Data Protection Made Easy podcast, hosted by Caine Glancy and Catarina Santos. Last week, we discussed the key trends, biggest talking points, and sharing expert insight into the latest developments from the last two weeks across the data protection industry.

In this live session, Katerina Douni and Catarina Santos will explore the most common issues uncovered during GDPR audits and why they continue to appear across organisations. They’ll break down recurring findings, explain the root causes behind them, and share practical insight on how to address gaps before they become regulatory problems.

Following the overwhelming response to our recent session on weaponised SARs, we hosted Part 2 on the Data Protection Made Easy podcast. We had over 180 attendees join us live and received a huge number of questions and scenarios throughout the session. Unfortunately, we weren’t able to cover everything on the day, so this session is dedicated to going deeper. In Part 2, we cover: Revisiting the t...

We’re back this Friday with another live episode of the Data Protection Made Easy podcast, and this is set to be a popular one. This week, Caine and Amber will be discussing AI and data protection, exploring how organisations can manage risk without killing innovation. AI tools are now part of everyday working life, but they bring real challenges when it comes to GDPR. In this session, we’ll look...

This week we return for an episode of GDPR Radio where our hosts Catarina Santos and Caine Glancy break down the latest news and developments in data protection, giving you clear, practical insight into what’s happening and what it means in practice. This session will focus on the news of the week, covering key updates, emerging trends, and the topics we think you should have on your radar.

Subject Access Requests are a fundamental right under the UK GDPR, designed to give individuals transparency over their personal data. However, across every sector we work with, we are seeing a clear shift in how these rights are being used. In this episode, we explore the rise of weaponised SARs. These are requests submitted not just to access data, but to apply pressure, support disputes, or dis...

Joining our hosts Catarina Santos and Caine Glancy is Paul Holland , CEO and Founder of Beyond Encryption, bringing over 40 years of experience in secure communications, identity verification, and fraud prevention. As safety and privacy regulations begin to overlap, organisations are facing a new challenge, how do you protect users while still complying with the UK GDPR? In this session, we’ll exp...

Join us for another episode of GDPR Radio, the news edition of the Data Protection Made Easy Podcast, where we explore the latest developments from across the data protection industry. Our regular host Caine Glancy will be joined by Holly Miller as they break down the biggest stories shaping the world of data protection and privacy. These sessions bring together professionals from across the commu...

Caine and Mark will discuss how organisations should approach restricted transfers, what the rules actually require in practice, and some of the common pitfalls businesses encounter when moving personal data across borders.

This week Catarina Santos is joined by Mark Farrell, who recently made his debut on the podcast and quickly became a favourite with our community. Mark brings valuable experience from his time at the ICO, and tomorrow’s session will explore recent updates around data protection complaints, alongside practical lessons and insights from a major project he and Catarina are currently working on.

In this session, Compliance Isn’t Culture: Fixing the Awareness Gap , special guest, Kathryn Brooks will join our hosts Caine Glancy and Catarina Santos to explore why policies and procedures alone are not enough to create a culture of data protection within an organisation. The discussion will focus on why awareness programmes often fail to influence behaviour, and what organisations can do to em...

 In this episode, Caine is joined by Mark, a former ICO professional and now data protection consultant, to discuss the complexities of defining and protecting personal data, recent legal cases, and why strong data protection practices are essential for building trust. They explore the growing cyber security risks facing small and medium sized businesses, the importance of certifications like Cybe...

 In this Valentine’s themed episode, Catarina Santos and Caine Glancy are joined by Katarina Douni to explore how to manage third party relationships in a GDPR compliant way. From on-boarding new suppliers to reviewing existing partnerships, we discuss the role of due diligence, accountability, and ongoing oversight when personal data is shared with external providers. If your organisation relies...

Our two hosts Catarina Santos and Caine Glancy unpack the latest data protection developments, sharing practical insights from the frontline, and answering your questions live on air.

DPIAs are one of the most powerful tools in data protection when done properly. But too often they become tick box exercises that fail to manage real risk. In this episode, we will be cutting through the theory to focus on what works in practice, including: What regulators actually expect to see Common mistakes that undermine DPIAs How to turn DPIAs into genuine risk management tools Practical exa...

Hosts Catarina Santos and Caine Glancy unpack early ICO enforcement activity around PECR breaches, debate whether meaningful consent is still realistic in today’s digital economy, and explore the growing push to protect children online through age assurance and the Online Safety Act. The conversation also turns to Grok and the wider role of AI on social platforms, including Elon Musk’s comments on...

In this special 2025 Wrapped edition of the Data Protection Made Easy podcast, Caine Glancy and Catarina Santos count down the top five most listened episodes of the year and unpack what they tell us about the real challenges facing DPOs and privacy teams. From the ethics of employee monitoring in an AI and hybrid working world, to what it really takes to stand out as a DPO, through to the Data Pr...

 Santa’s Naughty List, Lessons For Data Retention dives into one of the core challenges in data protection, deciding what to keep, what to archive, and when it is finally time to let go. In this festive live episode, Caine Glancy and Katarina Douni explore sensible retention periods, the risks of holding information for longer than necessary, and the practical steps organisations can take to manag...