Insights, Guides & Data Protection Resources

FinTech product managers operate at one of the most complex intersections in technology. The products they build often handle bank account details, payment records, transaction history, credit scores, identity documents,...

Most data teams understand, in broad terms, that the General Data Protection Regulation, known as GDPR, applies to the personal data they work with. They may know that personal data...

Article 30 of the UK General Data Protection Regulation, usually called UK GDPR, requires many organisations to maintain a Record of Processing Activities, or ROPA. But knowing that you need...

Every time an organisation shares personal data with a third-party supplier, it creates a privacy relationship that needs to be understood before the contract is signed. The supplier might be...

Data Protection Impact Assessments are one of the most frequently misunderstood requirements in a privacy programme. Many organisations know that they may be legally required, but are less clear on...

Most organisations keep far more personal data than they need. Customer records remain in old systems. Employee files stay in shared drives long after staff leave. Marketing lists grow without...