Skip to content
Artwork for Practical Privacy with Orla Dormer
Practical Privacy with Orla Dormer · Thursday · 14 min

Incident reporting isn't a tick-box exercise | Dave Evans

GDPR, NIS2, DORA, US state laws and now AI incidents. How do you build one incident management model that keeps up with all of them? In this episode, Orla Dormer welcomes back her first ever guest, Dave Evans, Group DPO at Ultradome, to talk about centralising incident management across regulations and jurisdictions. Dave explains why his team moved to a user-friendly collection form, why a "four-eye" review is essential, and where AI can help with the analysis without replacing human judgement. The conversation also covers turning incident data into KPIs, training and dashboards, and why rising report volumes can signal a maturing privacy culture. 📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise. 🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/

0:00-14:27

transcript

No transcript — this publisher did not publish one.

show notes

GDPR, NIS2, DORA, US state laws and now AI incidents. How do you build one incident management model that keeps up with all of them?

In this episode, Orla Dormer welcomes back her first ever guest, Dave Evans, Group DPO at Ultradome, to talk about centralising incident management across regulations and jurisdictions. Dave explains why his team moved to a user-friendly collection form, why a "four-eye" review is essential, and where AI can help with the analysis without replacing human judgement.

The conversation also covers turning incident data into KPIs, training and dashboards, and why rising report volumes can signal a maturing privacy culture.

📌 Subscribe for more real-world conversations on privacy operations, AI governance, and scaling compliance without the noise.

🟡 TrustWorks reduces operational drag through context-aware operations that align compliance with how the business actually works. Learn more at https://www.trustworks.io/
links1