Shows / The Privacy Partnership Podcast with Robert Bateman

The Privacy Partnership Podcast with Robert Bateman
Robert Bateman provides the latest on data protection and privacy, with regular solo news updates and short-form interviews. Brought to you by Privacy Partnership: www.privacypartnership.com
Episodes
The Privacy Partnership Podcast with Robert BatemanXandr and Grindr: can you rely on someone else’s consent?
Send us Fan Mail In this episode of the Privacy Partnership Podcast, Robert Bateman unpacks the record 92 million NOK (€8.6 million) fine issued by the…
The Privacy Partnership Podcast with Robert BatemanThe Digital Omnibus: 5 Key Changes in the Council’s GDPR Negotiating Mandate
Send us Fan Mail Could the GDPR's 72-hour breach reporting deadline soon be a thing of the past? On 21 October 2026, the Council of the EU agreed on its…
The Privacy Partnership Podcast with Robert BatemanThe trouble with extraterritorial laws: Ofcom v 4chan
Send us Fan Mail In this episode of the Privacy Partnership Podcast, Robert Bateman unpacks the massive gap between a UK regulator having legal authority and…
The Privacy Partnership Podcast with Robert BatemanSmart glasses: 3 implausible ways to lawfully wear them, according to the EDPB
Send us Fan Mail So you just bought a pair of Meta Ray-Bans, and you're ready to start publicly streaming your morning coffee run. Not so fast. According to a…
The Privacy Partnership Podcast with Robert BatemanDSG settles with ICO for £200k: The "relativity" of personal data under UK GDPR
Send us Fan Mail Just yesterday, the ICO announced a £200,000 settlement with DSG Retail, finally bringing an end to nearly seven years of legal wrangling over…
The Privacy Partnership Podcast with Robert BatemanTikTok throws in two towels: How the battle with the ICO played out
Send us Fan Mail Seven years after former Information Commissioner Elizabeth Denham told MPs that a probe into TikTok would conclude "in the fall," the…
The Privacy Partnership Podcast with Robert BatemanNew EDPB guidance: When to issue a GDPR fine
Send us Fan Mail How does a data protection regulator decide whether to hand down a multi-million euro fine or issue a simple reprimand? In this episode…
The Privacy Partnership Podcast with Robert BatemanAre Meta Ray-Bans legal under the GDPR? A roundup of regulatory positions
Send us Fan Mail In this episode of the Privacy Partnership Podcast, Robert Bateman looks at the mounting regulatory scrutiny and public backlash across Europe…
The Privacy Partnership Podcast with Robert BatemanGrindr settles for £26 million... But wait, what about Lloyd v Google?
Send us Fan Mail In this episode of the Privacy Partnership Podcast, Robert Bateman unpacks Grindr's recent agreement to pay £26 million to settle a major UK…
The Privacy Partnership Podcast with Robert BatemanSummer Special: Privacy action you might have missed
Send us Fan Mail n this late-summer roundup episode of the Privacy Partnership Podcast, host Robert Bateman unpacks a massive €825 million GDPR fine, the…
The Privacy Partnership Podcast with Robert BatemanFrance fails to ban kids from social media: Age assurance remains privacy's "hard problem"
Send us Fan Mail France’s Constitutional Council has struck down the central provision of a new law that would have banned under-15s from accessing social…
The Privacy Partnership Podcast with Robert BatemanIs TikTok a patron of the arts? How an appeal under the "special purposes" exemption failed
Send us Fan Mail In this episode of the Privacy Partnership Podcast, Robert Bateman dives into a fascinating and highly creative legal defense recently mounted…
The Privacy Partnership Podcast with Robert BatemanWeb scraping under the GDPR: The EDPB's uncharacteristically pragmatic solution
Send us Fan Mail Can you scrape the internet for AI training data without completely running afoul of the GDPR? The European Data Protection Board (EDPB) has…
The Privacy Partnership Podcast with Robert BatemanThe EDPB's new anonymisation framework: 5 things you need to know
Send us Fan Mail This week, Robert Bateman breaks down the newly adopted EDPB Guidelines 02/2026 on Anonymisation. Dragging the ancient 2014 Working Party 29…
The Privacy Partnership Podcast with Robert BatemanRob rambles about Trump v Slaughter from a European perspective
Send us Fan Mail A longer edition of the podcast because Rob gets unreasonably animated about EU-US data transfers. On 29 June 2026 the US Supreme Court ruled…
The Privacy Partnership Podcast with Robert BatemanCalPrivacy Director Tom Kemp on how businesses should approach California's robust privacy regulation
Send us Fan Mail What happens when a Silicon Valley cybersecurity founder takes the reins at one of the world's most powerful privacy regulators? In this…
The Privacy Partnership Podcast with Robert BatemanThe death of the EU-US DPF? Trump v Slaughter and the future of transatlantic data flows
Send us Fan Mail Did the US Supreme Court just sign the death warrant for the EU-US Data Privacy Framework (DPF)? In this explosive episode of the Privacy…
The Privacy Partnership Podcast with Robert BatemanData transfers at the Irish courts: A partial win for TikTok
Send us Fan Mail The Irish High Court has just delivered a massive judgment in TikTok’s appeal against the Data Protection Commission (DPC). The court upheld a…
The Privacy Partnership Podcast with Robert BatemanJohn Edwards resigns! A look back at his time at the ICO
Send us Fan Mail John Edwards has abruptly resigned as the UK Information Commissioner via a LinkedIn post, leaving behind a rather complicated legacy. In this…
The Privacy Partnership Podcast with Robert BatemanData transfers: How encryption and SCCs failed to save Yango Taxi from a €100 million fine
Send us Fan Mail f you’re going to encrypt European personal data before transferring it to a high-risk jurisdiction, the golden rule is simple: don't leave…
The Privacy Partnership Podcast with Robert BatemanAI Act loophole? How one company navigated the ban on workplace emotion recognition
Send us Fan Mail Can an employer use AI to read its employees' Slack and Teams messages to diagnose their stress levels? Under the EU AI Act, that sounds like…
The Privacy Partnership Podcast with Robert BatemanRegulating the reality of adtech: The ICO’s recommended PECR reforms
Send us Fan Mail The internet’s worst-kept secret is that basic digital advertising operations involve breaking privacy laws millions of times a day. But…
The Privacy Partnership Podcast with Robert BatemanDecoding the AI Act: A first look at the Commission’s "high-risk" draft guidelines
Send us Fan Mail The European Commission just dropped its highly anticipated first set of draft guidelines on high-risk AI classification under the AI Act—all…
The Privacy Partnership Podcast with Robert BatemanGet 40% off an ICO fine! The South Staffordshire case and early settlements
Send us Fan Mail How do you knock 40% off a looming data protection fine? In this episode of the Privacy Partnership Podcast, Rob Bateman breaks down the…
The Privacy Partnership Podcast with Robert BatemanRTM v Bonne Terre: Court of Appeal redraws the line on consent
Send us Fan Mail The Court of Appeal has ruled that consent under the UK GDPR and PECR is objective. A data subject's hidden vulnerabilities are not, in…
The Privacy Partnership Podcast with Robert BatemanWhat actually counts as 'scientific research'? Here's the EDPB's six-point answer
Send us Fan Mail On 15 April 2026, the European Data Protection Board adopted Guidelines 1/2026 on the processing of personal data for scientific research…
The Privacy Partnership Podcast with Robert Bateman'Clarity in action'?! The EDPB's 2025 annual report and litigation battles
Send us Fan Mail In this episode, Rob looks at the newly published European Data Protection Board (EDPB) annual report for 2025. We are skipping the usual…
The Privacy Partnership Podcast with Robert BatemanAI in recruitment: ICO highlights poor practices as UK overhauls automated decision-making rules
Send us Fan Mail Are your hiring managers quietly letting an algorithm bin hundreds of job applications while claiming a human is technically in charge? This…
The Privacy Partnership Podcast with Robert BatemanBrillen Rottler: A German optician fights back against 'abusive' DSARs
Send us Fan Mail Are you seeing a rise in "copy-paste" Data Subject Access Requests (DSARs) designed primarily to extract a quick financial settlement? In this…
The Privacy Partnership Podcast with Robert BatemanAmazon's €746m fine overturned: But who actually won this case?
Send us Fan Mail A €746 million GDPR fine gets completely annulled by a Luxembourg court. A massive, unmitigated victory for big tech, right? Not exactly. In…
The Privacy Partnership Podcast with Robert BatemanInvisible, indestructible signatures: The AI Act’s text watermarking problem
Send us Fan Mail Can you hide an indestructible, imperceptible signature inside a basic marketing blog post? The European Commission seems to think you should…
The Privacy Partnership Podcast with Robert BatemanAre you a 'data broker'? Maybe, under the EDPB’s expanding definition
Send us Fan Mail Are you a data broker? You might not think so, but European regulators could soon be looking at your business model and concluding otherwise…
The Privacy Partnership Podcast with Robert BatemanReddit’s £14.5m fine and the “hard problem” of age assurance
Send us Fan Mail The ICO has issued a £14.47 million fine against Reddit for alleged children's privacy failures, officially signaling the end of the road for…
The Privacy Partnership Podcast with Robert BatemanEDPB highlights "right to erasure" inadequacies: Exceptions, backups, and pseudonymisation
Send us Fan Mail Rob presents a few highlights from the EDPB's latest Coordinated Enforcement Framework report on the "right to erasure". - Poor storage…
The Privacy Partnership Podcast with Robert BatemanCJEU: Private companies CAN sue the EDPB
Send us Fan Mail In this episode of the Privacy and Partnership podcast, Rob discusses a significant ruling from the CJEU regarding WhatsApp's legal challenge…
The Privacy Partnership Podcast with Robert BatemanThe ICO's planned 'experimentation regime' to attract AI firms to the UK
Send us Fan Mail Rob discusses the recent letter from the Information Commissioner's Office (ICO) to UK government officials, highlighting the ICO's focus on…
The Privacy Partnership Podcast with Robert BatemanHappy Data Protection Day! A brief history of UK data protection law
Send us Fan Mail On Data Protection Day 2026, Rob talks us briefly through the history of data protection in the UK: From the "data users" of the Data…
The Privacy Partnership Podcast with Robert BatemanThe EDPB and EDPS 'slam' AI Act reforms under the Digital Omnibus
Send us Fan Mail Along with plans to "simplify" the GDPR, there's an AI Digital Omnibus that proposes amendments to the AI Act. In a new Joint Opinion, the…
The Privacy Partnership Podcast with Robert BatemanHappy New Year? A look at the ICO's new 'international data transfers' guidance
Send us Fan Mail Rob looks at the ICO’s newly released guidance on international transfers and what it means for UK privacy professionals. • The “Three-Step…
The Privacy Partnership Podcast with Robert Bateman'No surprises': The ICO and the Government come to an understanding
Send us Fan Mail The ICO and the UK Government have come to an understanding: "No surprises", "supportive challenge", and a seat at the table for the…
The Privacy Partnership Podcast with Robert BatemanChristmas Special: The top 5 data protection CJEU cases of 2025
Send us Fan Mail Time for the Privacy Partnership Podcast Christmas Special, where Rob looks at his top 5 data protection CJEU judgments for 2025. Here's the…
The Privacy Partnership Podcast with Robert BatemanThe Accidental Americans v FATCA: Like the Schrems cases, but for tax
Send us Fan Mail The CJEU will soon hear the Belgian DPA's case against FATCA, the tax treaty that results in the systematic bulk transfer of data about…
The Privacy Partnership Podcast with Robert BatemanDid the CJEU just junk the EU's intermediary liability AND general monitoring rules? X v Russmedia
Send us Fan Mail Did the CJEU just use the GDPR to junk the intermediary liability exemption and impose a general monitoring obligation? Here's a look at…
The Privacy Partnership Podcast with Robert BatemanThe 'final straw': Open letter calls for inquiry into the ICO
Send us Fan Mail A coalition of organisations and experts sent an open letter calling for a Parliamentary inquiry into the performance of the UK ICO. What's…
The Privacy Partnership Podcast with Robert BatemanIt's here! Major proposed GDPR changes under the Digital Omnibus Regulation
Send us Fan Mail In this episode of the Privacy Partnership Podcast, Rob walks you through the most important aspects of the proposed Digital Omnibus…
The Privacy Partnership Podcast with Robert BatemanGDPR's "death by 1000 cuts"? A look at the leaked Digital Omnibus draft
Send us Fan Mail "Death by a thousand cuts?" That's what the leaked Digital Omnibus proposals represent to the GDPR, according to noyb.eu. Here's a look at…
The Privacy Partnership Podcast with Robert BatemanUp to 40% off UK GDPR fines! The ICO's draft enforcement guidance
Send us Fan Mail The ICO is offering up to 40% off UK GDPR fines under its new draft Data Protection Enforcement Procedural Guidance. Here's how to take…
The Privacy Partnership Podcast with Robert BatemanThe TikTok China decision: A de facto ban on international data transfers?
Send us Fan Mail The DPC's TikTok decision is not that surprising if you understand the law, but it's actually a pretty huge deal to see this play out in…
The Privacy Partnership Podcast with Robert BatemanThe EDPB's long list of problems with UK data protection standards
Send us Fan Mail The EDPB just published its opinion on the UK's adequacy decision and it's pretty critical of the country's post-Brexit direction on data…
The Privacy Partnership Podcast with Robert BatemanWhat is going on between the ICO and Clearview AI? The UK GDPR's scope and the meaning of "monitoring behaviour".
Send us Fan Mail What is going on between Clearview AI and the ICO? Actions against Clearview have been a test of how far digital regulation actually has…
The Privacy Partnership Podcast with Robert BatemanDiscord's photo ID breach: Are the UK GDPR and Online Safety Act to blame?
Send us Fan Mail Discord's recent data breach exposed photo IDs used to verify users' ages. Should we blame the Online Safety Act, the Children's Code, or the…
The Privacy Partnership Podcast with Robert BatemanTractor Supply: The first CCPA case involving HR data
Send us Fan Mail Tractor Supply: The first CCPA case about job applicants' privacy (and the largest CPPA settlement yet). Don't forget: Unlike other states…
The Privacy Partnership Podcast with Robert BatemanLinkedIn's AI training plans are back, but not all users are treated equally
Send us Fan Mail LinkedIn's AI training settings don't affect all users equally. Did you notice that LinkedIn will share UK users' data with Microsoft, but not…
The Privacy Partnership Podcast with Robert BatemanThe ICO is consulting on guidance on the new cookie rules—and whether to enforce them.
Send us Fan Mail The ICO has yet MORE draft guidance, this time on the UK's upcoming changes to the law on cookies (etc). At the same time, it's running a…
The Privacy Partnership Podcast with Robert BatemanThe first criminal prosecution for 'ignoring' a DSAR: More common than we think?
Send us Fan Mail An individual has been criminally prosecuted for "ignoring" or having "blocked, erased, or concealed" a subject access request. A rare…
The Privacy Partnership Podcast with Robert BatemanWhat does 'without undue delay' ACTUALLY MEAN? IL v Veracash
Send us Fan Mail All over EU and UK law, we see a requirement to report certain stuff "without undue delay", often coupled with a hard deadline period (e.g…
The Privacy Partnership Podcast with Robert BatemanMore ICO guidance! Recognised legitimate interests
Send us Fan Mail More draft ICO guidance! This time, about one of the Data (Use and Access) Act's most important concepts: "Recognised legitimate interests"…
The Privacy Partnership Podcast with Robert BatemanHow to handle data subject complaints: New draft ICO guidance
Send us Fan Mail In advance of new obligations under the Data (Use and Access) Act, the ICO has published some draft guidance on handling data subject…
The Privacy Partnership Podcast with Robert BatemanUK Data (Use and Access) Act: The first provisions take effect
Send us Fan Mail Some parts of the Data (Use and Access) Act (DUAA) take effect today! This is our first chance to see how the Act is actually going to operate…
The Privacy Partnership Podcast with Robert BatemanThe Online Safety Act's tensions with the UK GDPR
Send us Fan Mail The Online Safety Act is why you might have been asked for your driver's licence on Reddit, X, and some... other websites. In this video, I…