Insights, Guides & Data Protection Resources

Article 30 of the UK General Data Protection Regulation, usually called UK GDPR, requires many organisations to maintain a Record of Processing Activities, or ROPA. But knowing that you need...

Data Protection Impact Assessments are one of the most frequently misunderstood requirements in a privacy programme. Many organisations know that they may be legally required, but are less clear on...

Most organisations keep far more personal data than they need. Customer records remain in old systems. Employee files stay in shared drives long after staff leave. Marketing lists grow without...

One standard. Countless controls. And most IT managers still aren't entirely sure if the investment is worth it. This guide explains what is ISO 27001 in plain English, compares ISO 27001 vs Cyber Essentials, and shows exactly how the ISMS framework strengthens your UK GDPR technical measures, certification decision included from the start.

Two regulators. One dataset. Finance professionals answer to both the ICO and the FCA, often without realising it. This guide explores data protection for finance UK professionals need, from FCA data protection under SYSC to automated credit scoring rights, and the open banking data-sharing rules most teams have never read.

Consent gets complicated fast when the person you're caring for can't give it themselves. This guide explores GDPR in health and social care UK settings, how the Mental Capacity Act interacts with data protection law, and the CQC GDPR requirements care providers are expected to evidence, often without even realising it.