Insights, Guides & Data Protection Resources

Consent under UK GDPR is more than a checkbox. For consent to be valid, it must be freely given, specific, informed and unambiguous — and people must be able to withdraw it just as easily as they gave it. This guide explains when consent is the right lawful basis, where organisations often get it wrong, and how UK teams can collect, record and manage consent with confidence.

Cookie consent is more than adding a banner to your website. Under PECR and UK GDPR, users must have a genuine choice over non-essential cookies, with clear information, granular options and an easy way to reject or withdraw consent. This guide explains which cookies need consent, what a compliant cookie banner should look like, and how UK marketing and web teams can avoid common compliance mistakes.

Most data teams understand, in broad terms, that the General Data Protection Regulation, known as GDPR, applies to the personal data they work with. They may know that personal data...

Here is a scenario most engineers recognise. A product launches, users start signing up, and then someone from legal or compliance asks: "How are we handling personal data?" Cue a...