GDPR

GDPR audit readiness: What the ICO may ask for and how businesses should prepare When people think of a “GDPR audit”, they often imagine the ICO arriving to inspect their organisation. In reality, for most businesses the ICO does not routinely audit companies. Instead, organisations are far more likely to experience regulatory scrutiny following a […]

The GDPR shift nobody’s talking about When the General Data Protection Regulation came into force in 2018, businesses focused on updating privacy policies, cookie banners, and consent forms. After Brexit, organisations shifted attention to complying with the UK General Data Protection Regulation alongside the Data Protection Act 2018. But something has changed again. There has

Artificial Intelligence (AI) is transforming how businesses work, from writing marketing content to analysing customer behaviour in seconds. But before you upload your company’s data into an AI platform, pause for a moment and ask: Do you really know what happens to that data once it’s entered? AI and GDPR: What you need to know

Let’s be honest, most businesses don’t think twice about their privacy policy. It’s treated as a box to tick, a template to fill in, or something quickly generated by AI. But here’s the cold, hard truth: an incorrect, outdated, or incomplete privacy policy can expose your business to serious legal risk, hefty fines, and long-term

With 66% of businesses reportedly unwilling to deal with counterparties that are not demonstrably GDPR compliant, there is an opportunity for those that are to grow trust, relationships, and sales. Every organisation is aware of how important it is to be GDPR compliant, and not just because of the risk of substantial fines if they

GDPR or General Data Protection Regulation is a set of data protection laws passed by the European Union. They are enforced upon any company utilizing or handling data coming from EU consumers, regardless of where the company is based.  Failure to comply results in harsh penalties and fines. These penalties are some of the steepest

For individuals, subject access requests (SARs) are incredibly easy to make. They can be made in any form, including electronically (social media requests count). They don’t have to include the words “subject access request” or reference the Data Protection Act or GDPR. They can be made to anyone in the organization they want a copy

The General Data Protection Regulation has been impacting data strategy in the EU and beyond since 2018. GDPR gives individuals more control than ever over how their data is used and stored by businesses. This means that businesses have to be more vigilant than ever over what data they collect, how they store it, and

The 2018 enactment of the EU-wide GDPR created the need for organisations to radically re-think how they collect, store, and use the personal information of those they interact with. Various changes were mandated, amongst them was the need for some organisations to appoint a Data Protection Officer (DPO). Under the GDPR, you must appoint a DPO if: