Your Digital Footprint

Policing your digital footprint should be high on everyone’s agenda. Justian Blount, EMBS’s Data and AI Practice Director, has over two decades of experience in tech recruitment. He believes data and AI have profound implications for us all. In his latest blog, he explores why knowing who has access to your data, and where it ends up, is more important than ever.

As a UK citizen, have you ever genuinely thought about who can access your personal information?

In today’s hyper-connected world, where data is currency and AI is evolving fast, understanding your digital footprint has never mattered more.

I’m on a mission to build the best network of professionals in this space – connecting talent with opportunities that truly challenge their potential. But beyond that, I’m passionate about the increasingly intertwined world of data sovereignty and AI – and what it means for all of us.

Why Your Data Matters

Your name, address, online activity, health and financial data all combine to create a detailed profile of who you are. That profile is incredibly valuable, not just to businesses, but also to cybercriminals.

We generate huge amounts of data daily, often without realising it. Every click, search, purchase, or interaction with a smart device adds to your digital trail.

So, who owns this data? Where is it stored? And under which laws is it protected?

Understanding the UK and EU GDPR

In the UK, we benefit from strong data protection laws – primarily the UK GDPR and the Data Protection Act 2018. These are closely aligned with the EU GDPR, a global benchmark for privacy since 2018.

Key GDPR principles include:

• Lawfulness, fairness, transparency
• Purpose limitation – use data only for clear, specific reasons
• Data minimisation – collect only what’s necessary
• Accuracy – keep personal data correct and current
• Storage limitation – don’t keep data longer than needed
• Integrity and confidentiality – protect it properly

Both UK and EU GDPR give individuals rights like accessing, correcting, deleting or moving their data. Organisations must have a legal basis to process data, keep it secure, and be transparent about its use.

How the UK/EU Differ from the Rest of the World

Other countries have laws, but few match the UK or EU’s standards. In the US, data protection varies by state or industry – there’s no single national law. That means your data might be protected differently depending on where a company is based. Importantly, UK and EU GDPR applies globally – any company handling UK or EU residents’ data must comply, even if based elsewhere.

Post-Brexit, the UK GDPR remains nearly identical to the EU’s version. The ICO enforces compliance, and the EU recognises UK protections as adequate for free data flow.

The ChatGPT Conundrum

Enter ChatGPT and other AI tools. These are built by US-based companies and governed by US laws. That matters for UK users and businesses.

When you use AI tools and enter information, where does that data go? Who sees it? ChatGPT isn’t bound by UK GDPR in the same way. While OpenAI has privacy policies, the underlying legal protections differ.

Top Tips for Data Protection in the AI Era

To stay safe, you need to be proactive. Here are my top tips:

1. Know Where Your Data Goes. Check the privacy policy before using any app, website, or AI tool. Find out what data is collected, how it’s used, and where it’s stored. If the company is outside the UK/EU, different laws apply.
2. Don’t Share Sensitive Info. Avoid inputting anything personal or confidential into public AI tools. If you run a business, train your team on safe AI usage.
3. Invest in Secure AI Licences. If your business relies on AI, choose enterprise-grade versions with strong data protections. These often include data residency options and better security – worth it to avoid reputational or financial risk.

Your data is a valuable asset. In the age of AI, protecting it demands more awareness than ever. By making smart, informed decisions, you can keep both your personal and professional information safer in a connected world.

Find out more about EMBS.