Philippa Donn

Can you ask your customers to send on your marketing to their friends? The answer, according to the ICO’s draft Direct Marketing Code, is NO! The regulator says for...

Just when I thought January was feeling dull, I got my hands on the ICO’s much-anticipated draft Direct Marketing Code of Practice! This replaces the Regulator’s existing Direct Marketing...

If you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...

  In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...

Has opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...

This award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.

Could the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...

We’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...

Transparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...

GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...

“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...

We hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...

A first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...

GDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...

I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...

With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...

Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...

“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...

While the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...

As final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...

In the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...

For most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...

Ahead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...

Charities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...

‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...

The ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...

“We would like to share your details with selected third parties…” Consumers dislike it, assuming it means ‘anybody’, and in some cases they’re probably right. Adding ‘carefully selected third...

Organisations already grappling to comply with the General Data Protection Regulation now face the prospect of ensuring compliance with two regulations. The European Commission has announced it aims to...

The Digital Economy Bill which appears to be quickly making its way through Parliament could have a significant impact on Direct Marketing. The Bill which, among other things, aims...

The official draft of the new ePrivacy legislation is not expected to be published by the European Commission until January 2017, however a leaked draft has given many of...

Finally a decision – the UK will adopt the EU General Data Protection Regulation – GDPR – on 25th May 2018. Making the announcement, Secretary of State Karen Bradley...

The dreaded Subject Access Request strikes fear into the hearts of Data Compliance Officers and DPOs across the land. No SAR is the same, they must all be treated...

After nine long months of negotiations, the new EU-US Privacy Shield has been born.  It replaces the Safe Harbor Agreement which was ruled invalid by the European Court of...

Theresa May, the UK’s new Prime Minister, has said it: “Brexit means Brexit.” So does GDPR matter? The short answer is yes… and you shouldn’t shelve your GDPR plans....

The UK has voted to leave the EU, but despite the political drama life isn’t going to change any time soon. Under Article 50 of the 2007 Lisbon Treaty,...

In Data, it never rains… but it pours. In addition to the hefty General Data Protection Regulation, organisations also need to be prepared for changes to ePrivacy rules. The...

The Information Commissioner is to be given more powers to tackle nuisance calls, texts and emails. This could see a ‘best practice’ guide becoming legally binding; a seismic shift...

“We need to await further guidance on …” is the phrase on everyone’s lips in meeting rooms across the UK. The final General Data Protection Regulation text has been...

This Summer, Elizabeth Denham takes up her position as new Information Commissioner. She replaces Christopher Graham, taking responsibility for decisions surrounding the Freedom of Information Act, data protection and...

At the DPN’s well-attended DP Exchange event in London, the message was clear: for third party data providers and users alike, more value must be placed on quality over...

How do suppliers and users of third party data adapt in the face of stricter regulation?  Andrew Bridges talks about the challenges ahead. May 2016

Many organisations need to recruit a Data Protection Officer ahead of the implementation of the EU General Data Protection Regulation (GDPR) on 25th May 2018. Sara Howers gives an...

In its recently updated Guidance on Direct Marketing, the ICO has focussed on charity fundraising, provided more clarity surrounding obtaining consent and (specifically) highlighted third-party consent. A tightening up...

The British Red Cross has signed a written undertaking with the Information Commissioner’s Office. In a move likely to be viewed with interest by other charities, the organisation is...

Now, there is no place to hide – all companies who trade in personal data for marketing purposes are squarely in the ICO’s spotlight as its crackdown on nuisance...

When the Daily Mail launched a campaign to clean up fundraising, charities knew it was a game changer. They now face a stricter regulatory world; one where ensuring people...

Talk Talk’s reputation has been seriously compromised in the aftermath of its cyber-attack and the company is taking a £30 million hit to put things right, but the list...

Losing data, selling data without permission, unsolicited text messages and dodgy telemarketing calls are the most likely offences to cost businesses money. The ICO has recently issued its largest...

The European Commission has reiterated its wish for a swift agreement on a new Safe Harbor agreement. It has urged U.S. authorities to take the next step in on-going...

This guide aims to give practical advice on how to effectively handle common queries you might receive from consumers, about how your organisation is using their personal data. Can...

Effective data compliance and customer service free up businesses to do what they do best – business. Failure in customer service, on the other hand, can hinder sales and...