How does GDPR, data privacy, and data protection impact your business?
In this podcast, Tom Fox, the Voice of Compliance, hosts Data Privacy/Data Security expert Jonathan Armstrong, co-founder of Cordery Compliance. They use the framework of GDPR to discuss a wide range of issues relating to data privacy and data protection.
If you are a compliance professional, business leader, or InfoSec security expert, this is the podcast to learn about what is happening in the UK, EU, US, and beyond.
Site
RSS
Apple
Données mises à jour le 14/07/2026
Classements récents
Dernières positions dans les classements Apple Podcasts et Spotify.
Liens partagés entre épisodes et podcasts
Liens présents dans les descriptions d'épisodes et autres podcasts les utilisant également.
Découvrez des podcasts liées à Life with GDPR. Explorez des podcasts avec des thèmes, sujets, et formats similaires. Ces similarités sont calculées grâce à des données tangibles, pas d'extrapolations !
A Compliance Roadmap for ADS/ADMT - Part 2: Understanding Opt-In and Opt-Out Requirements
Épisode 2
mardi 14 octobre 2025 • Durée 18:36
Welcome to a special series on Life with GDPR. Over the next five episodes, Tom Fox and Alyssa DeSimone, a legal/compliance & risk management expert, with an extensive background in HR, will discuss the complex topic of a Compliance Roadmap for ADS/ADMT.
In this second episode, Tom Fox and Alyssa DeSimone review the opt-in and opt-out requirements introduced in the recent updates to the California Consumer Privacy Act (CCPA). They discuss what opting in and out entails, the concept of anti-retaliation in this context, and how disparate impact analysis can help regulators assess compliance. Additionally, they explore the importance of clear communication and training for HR departments on the use of AI in hiring, as well as the role of vendors in ensuring compliance. The episode wraps up with a discussion on the ambiguous term 'significant decision making' and its potential for litigation.
Key highlights:
Understanding Opt-In and Opt-Out Requirements
Anti-Retaliation Measures
Disparate Impact Analysis
Applicant Rights and Training
Vendor Collaboration and Compliance
Significant Decision Making
Resources:
Connect with Tom Fox
LinkedIn
Connect with Alyssa DeSimone
LinkedIn
Website
Life with GDPR was recently honored as a Top Data Security Podcast
Learn more about your ad choices. Visit megaphone.fm/adchoices
A Compliance Roadmap for ADS/ADMT - Part 1: Introduction & Jurisdiction
Épisode 1
lundi 13 octobre 2025 • Durée 17:19
Welcome to a special series on Life with GDPR. Over the next five episodes, Tom Fox and Alyssa DeSimone, a legal/compliance & risk management expert with an extensive background in HR, will discuss the complex topic of a Compliance Roadmap for ADS/ADMT.
In this first episode, we break down the essentials of ADS/ADMT, focusing on who is covered, the nuances of jurisdiction, and the broader business implications of evolving employment laws. ADS is an automated decision system, and ADMT is an automated decision-making technology. Whether you are an HR professional, compliance professional, or legal eagle, this discussion will help you navigate the complexities of compliance in a changing legal landscape.
Key highlights:
What is ADS/ADMT?
Applies to 5+ employees (including part-time/out-of-state).
Coverage limits for out-of-state conduct.
Jurisdiction can reach beyond California.
Risk mitigation tips for businesses.
Resources:
Connect with Tom Fox
LinkedIn
Connect with Alyssa DeSimone
LinkedIn
Website
Life with GDPR was recently honored as a Top Data Security Podcast
Learn more about your ad choices. Visit megaphone.fm/adchoices
Endpoint Security and Data Protection: Uncovering the Hidden Compliance Risks in Printer Security with Jim LaRoe
Épisode 116
jeudi 9 octobre 2025 • Durée 24:31
Jonathan Armstrong remains on assignment. Today, Tom Fox visits with fellow Texan Jim LaRoe, CEO of Symphion, to discuss data privacy, data protection, and compliance related to printer security in one of the most interesting podcasts Tom has done in some time.
Jim provides insight into how 20-30% of network endpoints are printers, and alarmingly, 99% of these are unprotected. Printers, despite being integral to business functions, are typically left vulnerable, making them prime targets for sophisticated phishing and cyber-attacks. Jim shares his journey from a trial lawyer to founding Symphion in 1999 and explains Symphion’s groundbreaking work in developing comprehensive security software for printers. Jim highlights the importance of a culture of compliance in managing endpoint security and the multifaceted challenges that come with securing printers. He emphasizes the collaborative effort needed among GRC compliance teams, IT, and supply chain departments to manage printer security effectively, and offers actionable steps for businesses to mitigate these risks.
Learn more about your ad choices. Visit megaphone.fm/adchoices
From IT to Total Compliance Tracking with Adam Goslin
Épisode 114
jeudi 2 octobre 2025 • Durée 21:08
Jonathan Armstrong remains on assignment. Today, Tom visits with Adam Goslin, founder of Total Compliance Tracking, to discuss his journey from IT development and management to becoming a leader in the security and compliance sector.
Adam shares his professional background, the challenges he faced with achieving PCI compliance, and the insights that led him to create a system to streamline compliance management. He details how his company, TCT, helps organizations efficiently manage various certifications and compliance standards. Adam also discusses the unique, direct marketing approach TCT employs and shares the philosophy behind providing accessible compliance resources. This conversation offers valuable insights into the importance of pragmatic, user-friendly compliance solutions.
Key takeaways:
Adam Goslin’s Professional Journey
Founding Total Compliance Tracking
Marketing Strategy and Philosophy
Future of TCT and Industry Insights
Resources:
Connect with Tom Fox
LinkedIn
Connect with Adam Goslin
LinkedIn
Connect with Total Compliance Tracking
Website
LinkedIn
Life with GDPR was recently honored as a Top Data Security Podcast.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Navigating GDPR in Global Outsourcing with Inge Zwick
Épisode 114
jeudi 24 juillet 2025 • Durée 23:20
Tom Fox takes a solo turn as Jonathan Armstrong is on assignment. Today, Tom visits with Inge Zwick, Executive Director, Head of Europe, and ESG Lead at Emapta Global, a global outsourcing company.
They discuss the company’s operations, with a particular focus on managing GDPR compliance within the outsourcing framework. They also discuss common misconceptions about outsourcing under the GDPR, risk assessment processes, handling data subject access requests, and integrating compliance into business operations. Zwick also shares insights into how EMAPTA collaborates with clients to ensure compliance and offers advice to business leaders on future-proofing their outsourcing strategies in light of GDPR requirements. Additionally, the discussion explores the integration of ESG initiatives within the company’s operations.
Key takeaways:
Outsourcing and GDPR Compliance
Risk Assessment and Data Security
Subject Access Requests (SAR)
Outsourcing Contracts and GDPR Obligations
Integrating Compliance into Operations
Resources:
Connect with Tom Fox
LinkedIn
Connect with Inge Zwick
LinkedIn
Connect with Emapta Global
Website
LinkedIn
Life with GDPR was recently honored as a Top Data Security Podcast.
Learn more about your ad choices. Visit megaphone.fm/adchoices
AI in Recruitment: Navigating GDPR Compliance and Challenges
Épisode 113
jeudi 10 avril 2025 • Durée 16:32
Tom Fox and Jonathan Armstrong, renowned cybersecurity experts, co-host the award-winning Life with GDPR. This episode explores the complex intersection of AI and recruitment, focusing on compliance challenges under GDPR and potential risks.
Jonathan highlights that AI is often more prevalent in recruitment processes than many compliance officers realize, often through third-party vendors. He discusses the regulatory landscape in the UK and EU, sharing insights on recent cases related to automated decision-making and the transparency required for such systems. Jonathan offers a seven-point plan for organizations that use or are considering using AI in recruitment, covering provider selection, due diligence, transparency obligations, and mechanisms for handling data subject requests. The conversation underscores the need for proactive engagement between data protection officers, compliance teams, and recruiters to ensure that AI tools are used responsibly and transparently.
Key takeaways:
AI in Recruitment: An Overview
Legal and Ethical Concerns
Transparency and Fairness in AI Decisions
Practical Steps for Companies
Future of AI in Recruitment
Resources:
Connect with Tom Fox
LinkedIn
Connect with Jonathan Armstrong
Twitter
LinkedIn
PunterSouthall
Life with GDPR was recently honored as a Top Data Security Podcast.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Cookie Compliance
Épisode 112
jeudi 27 mars 2025 • Durée 17:46
Tom Fox and Jonathan Armstrong, renowned experts in cyber security, co-host the award-winning Life with GDPR. In this episode, they discuss Cookie Compliance Under GDPR.
Their discussion highlights the increasing enforcement actions surrounding website cookies, emphasizing that this is a data protection issue and a broader compliance challenge. Specific case studies, such as the Dutch regulator’s fine against Pool Blue and fines in other EU countries, illustrate the significant financial penalties companies can face for non-compliance. Jonathan outlines an eight-point plan to help organizations ensure their cookie practices are current, including regular checks, proper configuration of cookie banners, and transparency about data retention periods.
The episode also touches on the role of third-party cookies, potential litigation, and regulatory actions. Compliance with cookie regulations is becoming increasingly important, with groups like NOYB driving many complaints and regulatory bodies across Europe ramping up enforcement efforts. Listeners are encouraged to assess their cookie practices and make necessary adjustments to avoid fines and maintain compliance.
Key takeaways:
The Rise of Cookie Enforcement
Global Fines and Consequences
Practical Compliance Tips
Challenges with Cookie Banners
Understanding Your Own Cookies
Guidelines for Cookie Retention
Resources:
Connect with Tom Fox
LinkedIn
Connect with Jonathan Armstrong
Twitter
LinkedIn
PunterSouthall
Life with GDPR was recently honored as a Top Data Security Podcast.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Navigating CCO and CISO Liability Trends
Épisode 111
jeudi 6 février 2025 • Durée 24:25
Tom Fox and Jonathan Armstrong, renowned experts in cyber security, co-host the award-winning Life with GDPR. This episode discusses the complex topic of liability for the Chief Compliance Officer (CCO) and Chief Information Security Officer (CISO).
Tom and Jonathan begin by examining notable cases like Joe Sullivan, the former CISO at Uber, who faced prosecution for mishandling a ransomware threat. They also cover other significant cases like Carlos Abarca from TSB Bank and Tim Brown from SolarWinds, highlighting the increasing trend towards personal liability among high-ranking compliance and security officers. Jonathan points out that prosecutors and legislators focus more on individual accountability, driven by the belief that this approach will encourage others to adhere to standards more rigorously. They explore the implications of misleading LinkedIn profiles and the importance of thorough due diligence when taking on new roles. The episode provides practical advice for C-suite executives to protect themselves, including negotiating indemnity clauses and ensuring accurate job descriptions.
Key takeaways:
Chief Compliance Officer Liability Overview
Case Studies: Joe Sullivan and Uber, Carlos Barker and TSB Bank and Tim Brown and SolarWinds
Legislation and Trends in Personal Liability
SEC Formula for CCO Liability
Resources:
Connect with Tom Fox
LinkedIn
Connect with Jonathan Armstrong
Twitter
LinkedIn
PunterSouthall
Life with GDPR was recently honored as a Top Data Security Podcast
Learn more about your ad choices. Visit megaphone.fm/adchoices
Navigating the EU AI Act
Épisode 110
jeudi 9 janvier 2025 • Durée 30:05
Tom Fox and Jonathan Armstrong, renowned expert in cyber security, co-host the award-winning Life with GDPR. In this episode, they discuss a pressing deadline for compliance officers: the February 2nd enforcement of the EU AI Act’s prohibitions on unacceptable AI risk.
Tom and Jonathan look at the phased implementation of this complex legislation, detailing the obligations of businesses using AI in their EU operations. Jonathan emphasizes the importance of identifying ‘shadow AI’ within organizations, from HR recruitment tools to consumer applications, and the substantial penalties for non-compliance, which can reach up to $35 million or 7% of global annual revenue. They also cover a practical five-step plan to help companies move towards compliance, involving board awareness, an AI inventory, assessment of AI tools, contract reviews, and transparency measures. Tune in to understand the nuances of this legislation and how to prepare your organization before the rapidly approaching deadline.
Key takeaways:
Understanding the EU AI Act
Prohibited AI Applications
Corporate and Personal Liability
Steps to Compliance
Resources:
Connect with Tom Fox
LinkedIn
Connect with Jonathan Armstrong
Twitter
LinkedIn
PunterSouthall
Learn more about your ad choices. Visit megaphone.fm/adchoices
Understanding the UK’s Failure to Prevent Fraud
Épisode 109
jeudi 21 novembre 2024 • Durée 21:13
Tom Fox and Jonathan Armstrong, renowned expert in cyber security, co-host the award-winning Life with GDPR. This episode delves into the UK’s Failure to Prevent Fraud guidance.
The podcast spans the initial implications and conflicts these new provisions present, especially in the context of GDPR and compliance with bribery investigations. Jonathan explains the concept of ‘failure to prevent fraud,’ drawing parallels with the 2010 UK Bribery Act, and outlines six key principles organizations must adhere to to demonstrate compliance. Additionally, the episode delves into specific steps compliance professionals should take before the new provisions come into force by July 2025, including gap analysis, policy updating, training, and more.
Key takeaways:
Failure to Prevent Bribery and Fraud
New Legislation and Its Implications
Reasonable Procedures Under the Failure to Prevent Fraud Act
Comparing Fraud and Bribery Compliance
Steps for Compliance Professionals
Resources:
Connect with Tom Fox
LinkedIn
Connect with Jonathan Armstrong
Twitter
LinkedIn
PunterSouthall
Learn more about your ad choices. Visit megaphone.fm/adchoices