Phil Lee | On regulation and AI, and the challenge of balancing innovation with control | Episode #84

In this episode, Lasse Rindom speaks with Phil Lee, the Managing Director of Digiphile and a leading legal expert on data privacy, GDPR, and the evolving EU digital rulebook. It is a conversation that moves beyond the hype of the AI Act to explore the practical, often messy reality of compliance, investigating how organizations can navigate the "regulatory vicious circle" without stifling innovation.

4 sharp conversation topics from the episode:

- How excessive complexity in legislation causes companies to accidentally fall out of compliance, prompting regulators to create more rules, which only deepens the problem.
- Why the biggest governance headache isn't always new tools, but existing vendors quietly rolling out AI features - like a PDF reader suddenly sending data to servers in China via a software update.
- The legal reality that systems cannot be held accountable, meaning that regardless of how autonomous an AI agent becomes, a human must always remain in the loop to absorb the liability.
- Looking beyond personal data (GDPR) to the new Data Act, which essentially serves as competition law designed to break vendor lock-in and force cloud providers to make proprietary data portable.

This conversation sets the tone and the reality for the interplay of regulation and innovation and is not to be missed by practitioners in the field of AI and data.

Do you want to know more about Phil Lee?

Phil is a lawyer with over 20 years' experience, specialising in data protection and artificial intelligence. His practice focuses mainly on technology, cloud and digital media companies, and he has worked in both London and California.

Phil Lee runs UK challenger law firm, Digiphile, which specialises in data protection, AI, and digital regulation. Digiphile's mission is to provide its global clients across all sectors with simple, strategic and actionable legal advice.

He holds CIPP/E, CIPM, AIGP and FIP status with the IAPP, and a degree in Computer Science from Cambridge University.