Privacy Impact Shop

Cookies, Compliance & The Value of Data | S2 E1

In this episode of The Privacy Impact Shop, hosts Ben and Shaab dive into the ever-evolving world of privacy, regulation, and the value of data. From their recent travels and training sessions to the latest ICO actions on cookie compliance, the conversation explores how organisations are managing consent, regulation, and reputation in a fast-moving digital landscape. They tackle hot topics including: * The ICO’s expanded review of the UK’s top 1,000 websites for cookie banner compliance * The rise of “consent or pay” models and what they mean for consumers and businesses * The growing commercialisation of personal data and what your data might really be worth * Profiling tools, safety applications, and the ethical boundaries of data-driven decision-making Lively, insightful, and often humorous, Ben and Shaab unpack how privacy, technology, and commerce continue to collide and what it means for organisations navigating compliance.

Why AI Can't Forget: The GDPR Problem with Large Language Models | S1 E8

In this episode of the Privacy Impact Shop brought to you by blackfootuk.com [http://blackfootuk.com] and gdpr.ie [http://gdpr.ie], Ben and Shaab are joined by PR technology expert Samantha Deeks to explore a fundamental challenge emerging at the intersection of AI and privacy law. The conversation centres around Samantha's revealing experiment with Claude AI, where she discovered the large language model had incorrect information about her company's co-founder—and more troubling still, admitted it couldn't "unlearn" this misinformation even when corrected. This discovery exposes a core architectural problem: neural networks, designed to replicate human thought processes, cannot selectively forget information the way traditional databases can delete records. This creates what may be an insurmountable compliance challenge with GDPR's right to rectification and erasure. The discussion examines how this "whisper campaign" effect—where AI provides personalised, unverifiable information in private conversations—could fundamentally change how reputational management works. Ben, Shaab, and Samantha explore the broader implications for the regulatory landscape, comparing the EU AI Act's use-case focused approach with traditional data protection frameworks. They discuss whether privacy laws will need to adapt to accommodate AI's technical limitations, or if AI regulation will need to become more prescriptive. The conversation also delves into the philosophical implications of AI regulation—how it's forcing us to redefine human values and what behaviours we consider fundamentally unacceptable, regardless of legal compliance. The episode concludes with practical advice for PR professionals and business leaders about understanding AI's reputational risks, the importance of organisations proactively auditing what AI systems know about them, and why governance frameworks may be more critical than regulatory compliance in managing AI-related harms. Perfect for privacy professionals, PR practitioners, business leaders implementing AI strategies, and anyone grappling with how artificial intelligence is reshaping our relationship with information, truth, and personal data rights.

From Global Harmony to Regional Reality: Navigating the Latest Privacy Landscape | S1 E7

In this episode of Privacy Impact Shop, Ben and Shaab dive into the evolving complexity of global privacy regulations and what it means for businesses operating across multiple jurisdictions. They discuss how we've moved from the post-GDPR era of regulatory harmonisation to a new reality where major economic blocks—the US, EU, Brazil, Singapore, and China—are taking increasingly divergent approaches to AI and data protection. This shift is forcing businesses to reconsider their global privacy strategies, sometimes choosing to compartmentalise operations rather than apply universal standards. The conversation also reveals insights into what's driving demand in the privacy market, from AI governance frameworks like NIST RMF and ISO 42001, to the growing need for technical implementation expertise. Ben shares how their privacy practice has grown rapidly by combining consultancy with training, explaining why being able to teach something demonstrates you truly understand it. Perfect for privacy professionals, business leaders, and anyone trying to navigate the increasingly complex world of global data protection regulations in an AI-driven economy.

From GDPR Panic to Competitive Advantage: How Data Protection Drove Business Success | S1E6

In this episode of Privacy Impact Shop, we sit down with Samantha Deeks, a startup expert and former CEO of PRgloo, who has a refreshingly different perspective on GDPR. Rather than seeing data protection as a regulatory burden, Samantha explains how she used GDPR principles to build better products, improve data quality, and gain competitive advantage. From building journalist databases with privacy-by-design principles to achieving a 20% increase in user retention through proper data governance, Samantha shares practical insights on how treating data protection as a quality framework rather than a tick-box exercise can deliver tangible business benefits. She also reveals her simple but effective approach to GDPR: "do unto other people's data as you would have done unto yourself." Perfect for entrepreneurs, PR professionals, and all those interested in seeing data protection through a business opportunity lens rather than a compliance headache.

The Future of Privacy: DPOs, AI, and the New Compliance Landscape | S1 E5

In this episode of The Privacy Impact Shop brought to you by Blackfootuk.com [http://Blackfootuk.com] and GDPR.ie [http://GDPR.ie], hosts Ben and privacy veteran Shaab take you through another thought-provoking conversation on the shifting role of Data Protection Officers in today’s AI-driven world. From major fines hitting Apple and Meta to the evolving demands of GDPR, the Digital Markets Act, and the EU AI Act, they explore how regulation is adapting—and in some cases, falling behind—emerging technologies. What it really means to be a DPO today? Whether certifications or experience matter more? How AI is changing the skills required for privacy professionals? The growing demand for privacy engineers and data governance experts? Whether you're a DPO, a privacy enthusiast, or just curious about the future of compliance, this episode is packed with insights, laughs, and real-world advice. 👉 Don’t forget to like, subscribe, and share!