The Formiti Deep Dive: Your Weekly Global Data & Compliance Briefing

Join Annie Garcia and Rob Healey of Formiti Data International as they take a deep dive into UK GDPR EU Representative obligations For international organizations with no physical presence in the United Kingdom, the post-Brexit data landscape has shifted from a static set of rules to a diverging legal framework. As we approach 2026, the challenge is twofold: meeting the foundational requirement of...

In this episode, Annie Garcia and Rob Healey break down the "Accountability Crisis" facing UK Financial Services in 2026. As the FCA moves from principles to aggressive enforcement, Annie and Rob explore why "the AI did it" is no longer a legal defense. They dive deep into Agentic AI governance , SM&CR personal liability , and how firms are using Formiti’s "Zero-Gap" audits to stay ahead of th...

In 2026, the primary risk to your organization isn't just a rogue AI—it’s the AI you don’t know you’re using. With regulations now spanning over 120 jurisdictions, the era of "Shadow AI" must end. This first step in our series focuses on creating a Global AI Inventory using an AI Bill of Materials (AI-BOM). By cataloging every model, third-party API, and dataset across your global footprint, you s...

Join Annie Garcia and Rob Healey as they discuss Data privacy in Manufacturing. Episode 24 explores the digital evolution of the West Midlands manufacturing sector, specifically focusing on how the Silicon Canal and Industry 4.0 are driving the adoption of smart technologies. The author highlights that as factories integrate AI and the Internet of Things, they must navigate a complex dual transfor...

Join Annie Garcia and Rob Healey from Formiti as they take a deep dive and discuss privacy compliance evolving from a business debt to a business enabler In the early 2020s, data privacy was often treated as a "legal tax"—a series of checkboxes to satisfy auditors and avoid the dreaded GDPR fines. But as we move through 2025, the landscape has shifted fundamentally. Privacy is no longer a static t...

Join Annie Garcia and Rob Healey Formiti Data International as they take a deep dive into Privacy 2025 and the Outlook for 2026. 2025 ended with a regulatory earthquake. While the EU and India solidified their strict enforcement regimes, the United States reversed course in December with a massive move toward deregulation and federal preemption. 2026 will be the year of "Conflict and Fragmentation...

In 2024, With the enforcement of the EU’s Digital Markets Act (DMA) and the subsequent rollout of Google Consent Mode v2 (GCMv2), privacy compliance ceased to be just a legal issue. It became a critical dependency for marketing revenue. For businesses operating in or targeting the European Economic Area (EEA), ignoring GCMv2 is no longer just a compliance risk; it is a direct threat to digital adv...

Join Annie Garcia and Rob Healey Formiti Data International as they take a deep dive to building a structured, step-by-step approach to managing a data breach, built on the principle of Preparation, Detection, Containment, Assessment, Notification, and Remediation (PDCNAR) . Effective data breach management is a testament to an organization's commitment to data privacy and security

Join Annie Garcia and Rob Healey Formiti Data International as they discuss the topic of , the decision to appoint a Data Protection Officer (DPO) starts as a compliance necessity—a legal box that must be ticked under GDPR. However, forward-thinking leaders are realizing that the traditional model of hiring a single, internal DPO is becoming operationally inefficient and financially risky. As data...

Join Annie Garcia and Rob Healey of Formiti Data International as they take a deep dive into the latest privacy and AI law changes. December 11, 2025, President Donald Trump signed a sweeping Executive Order (EO) designed to consolidate AI regulation at the federal level, effectively effectively aiming to block individual states from enforcing their own AI and data safety laws. This move marks a s...

In this deep dive episode Annie Garcia and Rob Healey of Formiti Data International Under GDPR Article 37, a DPO is mandatory if you are a public authority, your core activities involve large-scale monitoring of individuals, or you process special categories of sensitive data on a large scale.

The impact of AI on GDPR centers on the tension between AI's need for massive datasets and GDPR's principles of data minimization and purpose limitation. Key compliance risks include automated decision-making (Article 22), lack of explainability (Black Box algorithms), and the difficulty of ensuring the 'Right to be Forgotten' within trained machine learning models."

Listen to the concluding podcast episode on Hospitality Personal; Data Journey. Annie Garcia and Rob healey take a deep dive into data procesing challenges in health spa's The Latest topic addresses the highest-risk environment in the industry: Health Resorts, Spas, and Wellness Retreats. In this sector, the data collected isn't just about preferences; it is about physiology, mental health, and me...

Listen to our latest podcast unwrapping the personal data journey of diners in our restaurants and takeaways. Annie Garcia and Rob Healey of Formiti Data International take a deep dive into the risks of non compliance in an industry that extensively processes personal data on a huge scale.

In our first episode on data privacy in hospitality Annie Garcia and Rob Healey Formiti Data International unwrap the following .I n the modern hotel, hospitality is no longer just about a warm welcome and a clean room; it is about the "customized experience." However, customization requires data. From the moment a guest browses a room to the post-stay survey, they leave a trail of digital footpri...

Join Annie Garcia Head of Legal and Privacy and Rob Healey CEO Formiti Data International as they take a deep dive into the growing question on everyones agenda With Artificial Intelligence (AI) moving from a niche experiment to a core operational engine, the "set it and forget it" approach to compliance is obsolete. Organizations are now facing a critical structural question: Do we stretch our cu...

Join Annie Garcia Head of Privacy and Legal and Rob Healey CEO Formiti Data International UK as they do a deep dive on the effects of the NIS 2 Directive and the Cyber Resilience Act (CRA). on Gaming Studios across the EU . Covering 1: The Core Challenge: The Data & The Latency 2: Action Plan: A Strategic Roadmap and a comprehensive Q & A Session

Join Annie Garcia Head of Legal and Privacy and Rob Healey CEO of Formiti Data International discuss and unravel the significant move to streamline the European Union's complex digital regulatory landscape, the European Commission released the "Digital Omnibus" package in late November 2025. Prompted by the findings of the 2024 Draghi Report on European competitiveness, this legislative package ai...

In todays podcast Annie Garcia Head of Privacy and Legal and Rob Healey CEO at Formiti Data International discuss how AI procurement is changing the landscape of procurement. Traditional software procurement is binary: it works or it doesn't. AI procurement is probabilistic: it may work 95% of the time, hallucinate 4% of the time, and be biased 1% of the time. This playbook provides a structured f...

For the last three years, we have been warned that the "AI Regulation Wave" was coming. In late 2025, it is no longer coming—it has crashed over us. For global organizations, the comfortable silos of the past are gone. The Chief Privacy Officer (CPO) can no longer just look at personal data; they must now look at fundamental rights. The Chief Technology Officer (CTO) can no longer just ship code;...

Join Annie Garcia and Rob Healey as they take a deeo dive into the latest update to Malaysia's PDPA Privacy Law. Following the full implementation of the PDPA Amendment Act 2024 in June 2025, Malaysia has aligned itself with global data protection standards. For international organizations operating in Kuala Lumpur or processing Malaysian data offshore, the regulatory risk profile has shifted sign...

Annie Garcia Head of Legal and Privacy and Rob healey CEO discuss and take you on a deep dive on the subject of Navigating the Evolving UK Regulatory Landscape for AI in Healthcare. The UK does not yet have a single, AI‑specific health statute; instead, AI in healthcare is governed by a patchwork of existing laws, regulators, and guidance spanning healthcare services, medical devices, data protect...

Welcome to another episode of the Formiti Privacy Pulse Deep Dive with your hosts Annie Garcia and Rob Healey where we break down the biggest shifts shaping India’s digital future. Today, we dive into an historic milestone—the enactment of the Digital Personal Data Protection (DPDP) Rules 2025. On November 14th, India ushered in a new era for digital privacy. The DPDP Rules set a strong, rights-ba...

The Core Challenge: Post-Market Surveillance (PMS) vs. Privacy The regulatory landscape for medical devices in Great Britain has just been fundamentally reshaped. Effective June 16, 2025, the Medical Devices (Post-market Surveillance Requirements) (Amendment) (Great Britain) Regulations 2024 introduce a mandate for manufacturers to intensify their monitoring efforts once devices are on the market....

The era of "one-size-fits-all" data compliance in the Middle East is over. Many organizations operating in key markets like Saudi Arabia (KSA) and Egypt are falling into a critical compliance gap by focusing only on the national data laws (KSA PDPL, Egypt DPL) and ignoring stricter, sector-specific regulations. In this essential episode, your hosts Annie Garcia and Rob Healey introduce the concept...