Records of Processing Activities (RoPAs) are often viewed as nothing more than a compliance requirement, but are organisations missing their true value?

In this episode of the Data Protection Made Easy Podcast, Catarina Santos is joined by Data Protection Consultant Himanshi to discuss how RoPAs can become one of the most valuable tools in an organisation's privacy programme.

Together, they explore why so many organisations struggle with RoPAs, the common mistakes they see, and how a well-maintained RoPA can support risk management, DPIAs, Subject Access Requests, and day-to-day compliance.

They also discuss ownership, practical implementation, and why a RoPA should be treated as a living document rather than a spreadsheet that's only updated during an audit.

Whether you're building your first RoPA or looking to get more value from an existing one, this episode offers practical advice to help you turn compliance into strategy.

In this week's GDPR Radio, Caine Glancy and Catarina Santos discuss some of the latest developments in data protection and privacy.

The episode explores the rise in AI-generated Subject Access Requests (SARs), concerns around the ICO's approach to complaints and enforcement, the resignation of Information Commissioner John Edwards, and the UK Government's proposed social media restrictions for under-16s.

The discussion considers the practical implications of these developments for organisations, data protection professionals and individuals, alongside wider questions around online safety, accountability and the future of regulation.

Topics covered include:

• AI-generated Subject Access Requests (SARs)
• ICO complaints and enforcement
• John Edwards' resignation
• Social media restrictions for under-16s
• Platform accountability and online safety

GDPR Radio is part of the Data Protection Made Easy podcast, bringing you the latest news, insights and practical guidance from the world of data protection and cyber security.

• Containing the incident and limiting further risk
• Assessing what has happened and who may be affected
• Determining whether notification obligations apply
• Managing internal and external communications
• Avoiding common mistakes that can make a situation worse
• Lessons learned from real-world breach scenarios

Last Friday, we hosted another episode of GDPR Radio, part of the Data Protection Made Easy podcast, with Caine Glancy and Catarina Santos.

During the session, we explored some of the biggest stories and developments from across the data protection landscape, discussing key regulatory updates, enforcement activity, emerging trends, and the practical implications for organisations. The conversation provided attendees with valuable insight into what these developments mean in practice and how organisations can stay ahead of an ever-evolving compliance environment.

Last Friday, Catarina Santos and Caine Glancy, discussed Training That Actually Changes Behaviour.

Most organisations provide training... but how often does it genuinely change behaviour, improve decision-making, or create accountability?

In this practical live discussion, we’ll explore what effective data protection training looks like in practice, why so much compliance training fails, and how organisations can evidence that learning is actually making a difference.

Join us for an episode of GDPR Radio, part of the Data Protection Made Easy podcast, hosted by Caine Glancy and Catarina Santos.

Last week, we discussed the key trends, biggest talking points, and sharing expert insight into the latest developments from the last two weeks across the data protection industry.

In this live session, Katerina Douni and Catarina Santos will explore the most common issues uncovered during GDPR audits and why they continue to appear across organisations.

They’ll break down recurring findings, explain the root causes behind them, and share practical insight on how to address gaps before they become regulatory problems.