Data Governance & Security

Tackling the challenge of knowing your suppliers, putting contracts in place, managing these relationships and preventing data breaches.

NHS Digital is introducing a new data collection scheme - many are worried about privacy. We consider the data protection issues.

Why have MEPs rejected draft UK adequacy decisions and called for amendments? Is the free flow of data from EU to UK under threat?

How should you tackle the tricky topic of data retention? Let us help, with our tips and techniques for success.

A bold new EU regulation is being proposed to establish a set of rules to govern artificial intelligence (AI). What is it and will it work?

Sent an attachment to the wrong person? Left a laptop on a train? Human error is a major cause of data breaches. What can we do?

Data breaches can affect anyone - the stats are concerning and we've all seen the headlines. Why being prepared is crucial...

Getting rid of personal data your business no longer needs is a really simple concept, but in practice it can be rather tricky to achieve!

We spoke to the Online Dating Association about privacy matters - here are our ten data protection lessons

How to track your business’s privacy performance and make sure data is being successfully managed across the business.

How the pandemic raises a number of privacy challenges and means taking difficult decisions on the collection and use of personal data.

Take control of your data! How a data governance framework means you can meet business objectives without taking unnecessary risks.

As the ICO resumes its investigation into adtech and RTB, what steps should advertisers and players in this market be taking?

How well-crafted easy to read data protection policies help to make sure your staff know how do the right thing

What does good data protection training look like? Why one-off sessions will not cut it and how to keep the momentum going...

As the ICO publishes Data Sharing Code of Practice, what are the 10 key points you need to think about before you share personal data?

Allocating responsibility for your privacy risks - Is it right for data protection risks to sit with your Data Protection Officer?

We take a look at how ICO's handy Accountability Framework can help organisations meet their GPDR responsiblities.

As the ICO slams a £18 million data breach fine on Marriott, we take a look at what went wrong and what other businesess can learn ...

British Airways has been fined £20m by the ICO, what lessons can we all learn from BA's painful personal data breach?

Alarming headlines have suggested COVID-19 contact tracing data from pubs and restaurants is being sold on. Is this actually true and what should checks should you take?

Covid-19 has meant employers have, by necessity, made risk-based data decisions. Do these need revisiting now?

What checks and balances should you have in place if you are monitoring your employees' health during the pandemic? We take a look at the core areas to consider...

We now have the newly minted Covid app modelled on the Google and Apple templates. Should we be trusting this app?

How to get your Data Protection Impact Asssessment process on track - when should you do one, what should you process look like? Get some useful tips...

How to implement Data Protection by Design when you are developing new applications, products and services.

What does ‘Data Protection by Design’ really mean (and why is it also called ‘Privacy by Design’)? Do you need to be concerned about it? And how do you...

Which organisations need to have a DPO? If you don't should you appoint one anyway or outsource? We explore the options ..

Facial recognition is clever, from selfies to surveillance its use is becoming far more widespread.  Should we be worried?

How do you assess the actual risk to people of a data breach? 10 questions you need to ask when carrying out an risk assessment.

Pondering how to improve your privacy credentials? Here are 5 steps to inspire you. More than 2 years on from GDPR, remember it’s a journey, not a sprint.

A practical toolkit packed with tips, advice and case studies on how to tackle data retention. Developed by a group of data protection and privacy specialists from a...

DPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...

A Guide to Controller-Processor contracts  The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...