Philippa Donn

What data protection and ePrivacy law applies in the UK post Brexit? Our handy Q&A answers key considerations for your business.

Fears the free flow of data from the EEA to UK would end have been averted with the Brexit Trade Deal. But we’re not out of the woods yet.

As the ICO publishes Data Sharing Code of Practice, what are the 10 key points you need to think about before you share personal data?

UK organisations may need to appoint a EU representative, find out if your organisation falls under this GDPR requirement...

130 people, battle-scarred data professionals all, chose to cry havoc and unleash the Dogs of Data by taking part in our Fantasy GDPR quiz.

As the ICO slams a £18 million data breach fine on Marriott, we take a look at what went wrong and what other businesess can learn ...

Subject Access Requests: As the ICO published detailed guidance we take a look at the higlights and whether it's a help or hindrance

Data Subject Access Requests can be a challenge to handle. Get 10 great tips from experts who routinely handle the right of access,

Covid Symptom Study breaks the marketing rules by promoting masks for to fund their research, but find out how an quick apology can go a long way. ...

Covid-19 has meant employers have, by necessity, made risk-based data decisions. Do these need revisiting now?

How to get your Data Protection Impact Asssessment process on track - when should you do one, what should you process look like? Get some useful tips...

New Children's Code to protect under 18s online. It will affect your business if your online services are likely to be acccessed by children.

What does ‘Data Protection by Design’ really mean (and why is it also called ‘Privacy by Design’)? Do you need to be concerned about it? And how do you...

What are the email marketing rules? Make sure your marketing comms are not unwittingly putting your business at risk.

DSARs from disgruntled ex-employees can be challenging to handle, get some helpful tips on how best to approach the task of fulfilling them.

International data transfers - EU-US Privacy Shield ruled invalild, questions raised regarding SCCs, find out what actions should you take.

From holiday cottages to theme parks, hotels to pubs, many will be collecting people's details for contact tracing. Get our quick guide to how to do this.

How do you assess the actual risk to people of a data breach? 10 questions you need to ask when carrying out an risk assessment.

“Hi, you haven’t finished watching Jeffrey Epstein: Filthy Rich”, said an email my husband received .It annoyed him......

GDPR may have its critics and regulators may stand accused of not taking enough action. Why this is not a reason to stop taking data protection seriously.

Subject Access Requests – What is ‘proportionate’ to ask for?  When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...

Is your ‘Service’ Message actually a Marketing one?  A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...

No-deal Brexit – what’s the data protection impact?   What steps should organisations take to prepare?   This guide aims to cover the key areas organisations should consider, and provide...

EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...

Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...

The Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...

GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...

Data protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...

Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....

Obtaining Consent from Data Subjects in order to process their data has long been an area of ambiguity, open to broad interpretation across EU Member States. The GDPR certainly...