Philippa Donn

As the end of the Brexit transition period draws close, will the free flow of data continue? Will the EU grant the UK adequacy?

As the ICO slams a £18 million data breach fine on Marriott, we take a look at what went wrong and what other businesess can learn ...

Subject Access Requests: As the ICO published detailed guidance we take a look at the higlights and whether it's a help or hindrance

Data Subject Access Requests can be a challenge to handle. Get 10 great tips from experts who routinely handle the right of access,

Covid Symptom Study breaks the marketing rules by promoting masks for to fund their research, but find out how an quick apology can go a long way. ...

Covid-19 has meant employers have, by necessity, made risk-based data decisions. Do these need revisiting now?

How to get your Data Protection Impact Asssessment process on track - when should you do one, what should you process look like? Get some useful tips...

New Children's Code to protect under 18s online. It will affect your business if your online services are likely to be acccessed by children.

What does ‘Data Protection by Design’ really mean (and why is it also called ‘Privacy by Design’)? Do you need to be concerned about it? And how do you...

What are the email marketing rules? Make sure your marketing comms are not unwittingly putting your business at risk.

Brexit and GDPR - what the UK leaving the EU means for data protection law. Find out the impact on your business.

DSARs from disgruntled ex-employees can be challenging to handle, get some helpful tips on how best to approach the task of fulfilling them.

International data transfers - EU-US Privacy Shield ruled invalild, questions raised regarding SCCs, find out what actions should you take.

From holiday cottages to theme parks, hotels to pubs, many will be collecting people's details for contact tracing. Get our quick guide to how to do this.

How do you assess the actual risk to people of a data breach? 10 questions you need to ask when carrying out an risk assessment.

“Hi, you haven’t finished watching Jeffrey Epstein: Filthy Rich”, said an email my husband received .It annoyed him......

GDPR may have its critics and regulators may stand accused of not taking enough action. Why this is not a reason to stop taking data protection seriously.

Subject Access Requests – What is ‘proportionate’ to ask for?  When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...

Is your ‘Service’ Message actually a Marketing one?  A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...

No-deal Brexit – what’s the data protection impact?   What steps should organisations take to prepare?   This guide aims to cover the key areas organisations should consider, and provide...

Many companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...

GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...

EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...

Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...

Data Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation.  At...

The Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...

GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...

Data protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...

Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....

Obtaining Consent from Data Subjects in order to process their data has long been an area of ambiguity, open to broad interpretation across EU Member States. The GDPR certainly...