The GDPR was enacted in 2016 and became applicable in 2018. As it approaches a decade since its application, it has become one of the defining instruments of technology law worldwide. Yet the questions facing data protection have continued to evolve, perhaps most notably with the rise of AI. In this episode, host Mauricio Figueroa sits down with legal academic and author Jiahong Chen, and data protection consultant, James Robson, to explore the GDPR’s continuing evolution and some of the questions that may remain on the agenda for one of the world’s most influential instruments of technology law.

Mauricio Figueroa is Assistant Professor in Commercial Law at Durham University and the host of the SCL Podcast.

Jiahong Chen is a Senior Lecturer in Law at the University of Sheffield. He holds a PhD in Law from the University of Edinburgh. His research focuses on the intersection between law and technology, in particular data protection law, cyber security law, law and AI, data ethics, and internet regulation, with extensive experience in using co-creation methods to address the sociotechnical challenges of cyber security in smart homes. His work has been published in leading peer-reviewed journals, such as International Data Privacy Law, and his oral and written evidence has been cited by parliamentary inquiry reports.

James Robson is a data protection, privacy, and technology professional with extensive experience spanning cybersecurity, consultancy, research, and digital platforms. Since moving into data protection consultancy in 2016, he has helped hundreds of organisations implement practical applications of the GDPR and subsequently held senior in-house privacy roles, including overseeing complex data environments and major AWS migrations. James has served as Data Protection Officer for the Labour Party.