GDPR

Tackling the challenge of knowing your suppliers, putting contracts in place, managing these relationships and preventing data breaches.

Why have MEPs rejected draft UK adequacy decisions and called for amendments? Is the free flow of data from EU to UK under threat?

How should you tackle the tricky topic of data retention? Let us help, with our tips and techniques for success.

Covid has led proliferation of online data collection forms for dentists, hairdressers pubs and more. What should we be concerned about?

Targeted advertising via various social media platforms is widely used. But are we being open and upfront about it?

Have you got your cookies in order? If not, does it matter? Find out what good looks like when it comes to cookie compliance

Sent an attachment to the wrong person? Left a laptop on a train? Human error is a major cause of data breaches. What can we do?

How do the new SCCs work? What do 'supplementary measures look like? Get the low down on international transfers post Brexit & Schrems II...

How can you minimise the volumes of data you keep whilst also maintaining good levels of marketing permissions?

Data breaches can affect anyone - the stats are concerning and we've all seen the headlines. Why being prepared is crucial...

Are you suffering from consent confusion? We dispel the myths about consent under GDPR, share some tips and handy checklist...

Getting rid of personal data your business no longer needs is a really simple concept, but in practice it can be rather tricky to achieve!

We spoke to the Online Dating Association about privacy matters - here are our ten data protection lessons

Erasure requests proving a challenge? Get some top tips on how to get your Right to Erasure process on track.

How to track your business’s privacy performance and make sure data is being successfully managed across the business.

International data transfers: A draft adequacy decision has been published which would allow for the free flow of data from EEA to UK.

How the pandemic raises a number of privacy challenges and means taking difficult decisions on the collection and use of personal data.

Take control of your data! How a data governance framework means you can meet business objectives without taking unnecessary risks.

What does good data protection training look like? Why one-off sessions will not cut it and how to keep the momentum going...

What data protection and ePrivacy law applies in the UK post Brexit? Our handy Q&A answers key considerations for your business.

More than ever we need to focus on being open and transparent and building trust with customers. What core values should you embrace?

The ICO calls for transparency, accountability and trust to be core themes in the UK's National Data Strategy post-Brexit

Fears the free flow of data from the EEA to UK would end have been averted with the Brexit Trade Deal. But we’re not out of the woods yet.

As the ICO publishes Data Sharing Code of Practice, what are the 10 key points you need to think about before you share personal data?

UK organisations may need to appoint a EU representative, find out if your organisation falls under this GDPR requirement...

130 people, battle-scarred data professionals all, chose to cry havoc and unleash the Dogs of Data by taking part in our Fantasy GDPR quiz.

Allocating responsibility for your privacy risks - Is it right for data protection risks to sit with your Data Protection Officer?

We take a look at how ICO's handy Accountability Framework can help organisations meet their GPDR responsiblities.

As the ICO slams a £18 million data breach fine on Marriott, we take a look at what went wrong and what other businesess can learn ...

Subject Access Requests: As the ICO published detailed guidance we take a look at the higlights and whether it's a help or hindrance

Giving an individual or team credit for a creative and privacy aware project. This award recognises a responsible approach to marketing.

British Airways has been fined £20m by the ICO, what lessons can we all learn from BA's painful personal data breach?

Data Subject Access Requests can be a challenge to handle. Get 10 great tips from experts who routinely handle the right of access,

Alarming headlines have suggested COVID-19 contact tracing data from pubs and restaurants is being sold on. Is this actually true and what should checks should you take?

We now have the newly minted Covid app modelled on the Google and Apple templates. Should we be trusting this app?

The demise of the third party cookie - five signs the world is changing. Where next for targeted advertising?

How to get your Data Protection Impact Asssessment process on track - when should you do one, what should you process look like? Get some useful tips...

New Children's Code to protect under 18s online. It will affect your business if your online services are likely to be acccessed by children.

How to implement Data Protection by Design when you are developing new applications, products and services.

What does ‘Data Protection by Design’ really mean (and why is it also called ‘Privacy by Design’)? Do you need to be concerned about it? And how do you...

Which organisations need to have a DPO? If you don't should you appoint one anyway or outsource? We explore the options ..

South Wales Police's use of automated facial recognition has been ruled unlawrul - it breaches human rights and has potential for bias.

Looking to leverage your customer database to drive more business? How to make sure you marketing plan is supported by your privacy strategy

7 point privacy guide for use of dashcams in vehicles. Quick steps to make sure your use of dashcams is transparent and lawful.

Seven steps for making sure innovation flourishes and your artificial intelligence activities are sound from a data protection point of view

5 tips for keeping your GDPR records of processing activities up to date. The why, who, what, how and when of data protection documentation.

Discover the benefits of being upfront and transparent with people about how you use their data.  In this webinar hosted by Robert Bond from Bristows we explore why transparency...

From holiday cottages to theme parks, hotels to pubs, many will be collecting people's details for contact tracing. Get our quick guide to how to do this.

You are at the end of long day .. you just do one last check of your inbox - the new count registers over 9,000 new emails! All...

Facial recognition is clever, from selfies to surveillance its use is becoming far more widespread.  Should we be worried?

How do you assess the actual risk to people of a data breach? 10 questions you need to ask when carrying out an risk assessment.

Pondering how to improve your privacy credentials? Here are 5 steps to inspire you. More than 2 years on from GDPR, remember it’s a journey, not a sprint.

“Hi, you haven’t finished watching Jeffrey Epstein: Filthy Rich”, said an email my husband received .It annoyed him......

Five ways to help explain complex and contentious uses of personal data. How to improve your communications and transparency.

A practical toolkit packed with tips, advice and case studies on how to tackle data retention. Developed by a group of data protection and privacy specialists from a...

Seven Step Ad Tech Guide - Support for UK businesses engaged in the programmatic digital advertising to ensure they protect the rights of individuals.

Privacy and COVID-19. When finding quick solutions and taking rapid decisions, don't forget the privacy impact. Here's our quick tour of aspects to consider.

DPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...

A Guide to Controller-Processor contracts  The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...

GDPR in a nutshell Data protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions.  Here...

The Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...

In-depth Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This version (published in April 2018) includes several case studies and an example of...

Controller – Processor Contracts Any business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other...