DPIAs are one of the most powerful tools in data protection when done properly. But too often they become tick box exercises that fail to manage real risk.

In this episode, we will be cutting through the theory to focus on what works in practice, including:

• What regulators actually expect to see
• Common mistakes that undermine DPIAs
• How to turn DPIAs into genuine risk management tools
• Practical examples that protect individuals and organisations alike

Hosts Catarina Santos and Caine Glancy unpack early ICO enforcement activity around PECR breaches, debate whether meaningful consent is still realistic in today’s digital economy, and explore the growing push to protect children online through age assurance and the Online Safety Act.

The conversation also turns to Grok and the wider role of AI on social platforms, including Elon Musk’s comments on free speech, regulatory scrutiny in the UK and EU, and whether current laws are moving quickly enough to keep pace with emerging technologies.