Making Waves – Data Protection Day Episode

Direct Links to Podcast Episode:

• Spotify
• Apple Podcasts

About this Episode

In this thought-provoking episode of the Talk Data To Me podcast for World Data Protection Day, Daragh is joined by Dr Blessing Mutiro—fresh from successfully defending his PhD—and digital rights solicitor Simon McGarr to explore a fundamental gap in EU data protection law: the lack of protection for groups and collectives. The conversation weaves together Blessing’s research on Ubuntu philosophy as a framework for collective data rights that could be integrated into EU Data Protection law, Simon’s practical insights from a litigation and enforcement angle, and Daragh’s governance theory perspective (from his own doctoral research) to examine what happens when individual-focused regulation meets group-level data harms.

This episode celebrates World Data Protection Day by shining a critical light on some possible gaps in the architecture and some potential unintended consequences of the proposed Digital Omnibus reform.

Key Topics

The Individual Focus Problem
GDPR protects individuals, but data value now comes from group-level analysis. If a platform targets all red-haired people with discriminatory content, each person can complain individually—but there’s no mechanism to address the collective harm. Blessing proposes the EU learn from Ubuntu philosophy, which balances individual dignity with collective interconnectedness. His framework includes four principles for group data protection to sit alongside existing GDPR requirements.

Simon notes that current EU collective actions merely bundle individual claims. True group protection may work better through regulatory enforcement—allowing action without waiting for individual complaints.

The EU Digital Omnibus Concerns
The panel critiques proposed changes including contextual personal data definitions, ROPA exemptions, and reduced transparency requirements. Simon argues legislators have chosen business interests over citizen protection.

Why ROPAs Matter
Despite being seen as bureaucratic overhead, ROPAs enable DSAR responses, support business continuity, reveal operational inefficiencies, and establish what processing is intended—critical when things go wrong (illustrated by the FAI children’s data breach).

A Quotable Quote

The Data Leaders’ Summit

The episode ends with a blatant plug for the 3rd Data Leaders’ Summit being hosted by Castlebridge in Wexford on the 18th and 19th of March. Details of the Summit can be found at https://dataleadersummit.ie.