Digital Marketing Institute Podcast | #127 GDPR and AI Regulation for Marketers

Finding it difficult to navigate the changing landscape of data protection? In this episode of the DMI podcast, host ⁠Will Francis⁠ speaks with ⁠Steven Roberts⁠, Group Head of Marketing at Griffith College, Chartered Director, certified Data Protection Officer, and long-time marketing leader. Steven demystifies GDPR, AI governance, and the rapidly evolving regulatory environment that marketers must now navigate.  Steven explains how GDPR enforcement has matured, why AI has created a new layer of complexity, and how businesses can balance innovation with compliance. He breaks down the EU AI Act, its risk-based structure, and its implications for organizations inside and outside the EU.  Steven also shares practical guidance for building internal AI policies, tackling “shadow AI,” reducing data breach risks, and supporting teams with training and clear governance.  For an even deeper look into how businesses can ensure data protection compliance, check out Steven’s book, ⁠Data Protection for Business: Compliance, Governance, Reputation and Trust⁠.  Steven’s Top 3 Tips for Marketers 1. Build data protection into projects from the start, using tools like Data Protection Impact Assessments to uncover risks early.  2. Invest in regular staff training to avoid common mistakes caused by human error.  3. Balance compliance with business performance by setting clear policies, understanding your risk appetite, and iterating your AI governance over time.  Timestamps 01:29 – AI’s impact on GDPR & the explosion of new global privacy laws  03:26 – Is GDPR the global gold standard?  05:04 – GDPR enforcement today: Who gets fined and why  07:09 – Cultural attitudes toward data: EU vs. US  08:51 – The EU AI Act explained: Risk tiers, guardrails & human oversight  10:48 – What businesses must do: DPIAs, fundamental rights assessments & more  13:38 – Shadow AI, risk appetite & internal governance challenges  17:10 – Should you upload company data to ChatGPT?  20:40 – How the AI Act affects countries outside the EU  24:47 – Will privacy improve over time?  28:45 – What teams can do now: Tools, processes & data audits  33:49 – Data enrichment tools: targeting vs. Legality  36:47 – Will anyone actually check your data practices?  40:06 – Steven’s top tips for navigating GDPR & AI  Follow Steven Roberts at   / stevenroberts-marketing   Follow Will Francis at https://willfrancis.com/ Follow and learn with the Digital Marketing Institute at https://digitalmarketinginstitute.com... ------------------------ If you are interested in hearing more, subscribe here or follow us on Spotify: https://spoti.fi/2YHVbA5 Are you interested in becoming a DMI Member? Check out the link for more info: https://bit.ly/3rhXQg7 About the Digital Marketing Institute The global standard in digital marketing certification! The Digital Marketing Institute delivers unparalleled learning experiences. Gain an internationally recognized digital marketing certification. Develop your digital skills and advance your marketing career. Learn world-class knowledge. Develop skills in key marketing disciplines. From PPC to SEO, Analytics, Social Media, AI, and more. Join our global members and get the skills that employers want and make your impact. Why choose Digital Marketing Institute? DMI is the proven global standard for digital marketing certification. We operate in 100+ countries and work with the global marketing teams of blue-chip brands and with the world's leading education brands. Our programs are developed with our council of leading global marketers, so they are built and validated by industry, for the industry. #digitalmarketing #digitalmarketingcourse #marketingpodcast #DMIPRO #digitalmarketingcareer #digitalmarketinginstitute #marketing Website - https://bit.ly/2MmLbdj LinkedIn - https://bit.ly/3cDArBY Facebook - https://bit.ly/36DbuTi X - https://bit.ly/3cDAAFw Instagram - https://bit.ly/3cwwRJM