Privacy & GDPR Exposure
Businesses deploy familiar office, marketing and support software every day to handle personal data belonging to clients, employees and job applicants. Because AI is frequently bundled inside these products it introduces compliance challenges that standard procurement processes miss.
Follow the personal information
- What the underlying systems do: Everyday business services often turn AI processing and model training on by default, reading emails, customer records, and connected information to share with outside companies or cross organizational boundaries.
- What my research examines: I identify where these hidden features create concrete GDPR risks, such as missing Article 30 records of processing, accountability gaps under Article 5(2) and unverified assumptions about default settings.
- Sector-specific priorities: I provide service-by-service investigation priorities tailored to high-risk environments like healthcare, finance and legal services, mapping out where sensitive narratives require immediate scrutiny.
- Practical accountability: I look past marketing assurances to explain why turning off a visible assistant does not necessarily stop background data processing and how businesses can properly verify their configuration.
Start with the services you use
Privacy questions are easier to examine when you know which services handle your information. Start with the relevant area:
Contact me if you need help understanding AI in the services your business uses.