GDPR in Practice: What Good Compliance Really Looks Like

The General Data Protection Regulation (GDPR) has been around for several years, yet many organisations still find themselves asking the same questions. How much documentation is enough? What are regulators actually concerned about? And how can you demonstrate compliance without creating unnecessary processes that nobody follows?
The reality is that strong GDPR compliance is rarely about having the thickest policy manual. It's about understanding the personal data your organisation holds, having sensible controls in place, and being able to show that you're managing it responsibly.

In this practical webinar, Rachael Salter and Aimee Brown (both Data Protection Consultants at URM) will look at what effective GDPR compliance looks like for small and medium-sized enterprises (SMEs) in 2026. Drawing on their extensive experience helping organisations strengthen their compliance, Rachael and Aimee will share the common issues they encounter when supporting clients, discuss emerging challenges such as AI and employee monitoring, and provide straightforward guidance that organisations can apply immediately.

Whether you're just getting started or looking to improve an existing privacy programme, this session will help you focus on the areas that matter most.

Join us as we discuss:

• GDPR Pitfalls We See in Practice: Common misconceptions, recurring compliance issues, and lessons learned from real-world GDPR assessments
• What Good Compliance Actually Looks Like: Practical approaches to accountability, lawful basis, data retention, supplier management, DSARs and more
• GDPR Challenges in 2026: Navigating current and emerging issues such as AI, employee monitoring and hybrid working
• A Practical Approach to GDPR: How to focus effort where it matters most, reduce risk, and avoid unnecessary bureaucracy