Insights, Guides & Data Protection Resources

Every time an organisation shares personal data with a third-party supplier, it creates a privacy relationship that needs to be understood before the contract is signed. The supplier might be...

Data Protection Impact Assessments are one of the most frequently misunderstood requirements in a privacy programme. Many organisations know that they may be legally required, but are less clear on...

Most organisations keep far more personal data than they need. Customer records remain in old systems. Employee files stay in shared drives long after staff leave. Marketing lists grow without...

Not every privacy incident is a reportable data breach. But every reportable data breach usually begins as a privacy incident that someone notices, reports, investigates, and escalates. That first response...

Payroll and benefits administrators handle some of the most sensitive personal data in any organisation. Every pay cycle involves salary figures, bank account details, National Insurance numbers, tax codes, pension...

A Data Subject Access Request, often called a DSAR or SAR, can arrive at any time and through almost any channel. It may come from a customer by email, a...