Guides

Cyber security and data protection go hand in hand. If your business holds personal data about customers, employees or suppliers, you have a responsibility to keep that information secure. Under the UK GDPR, organisations must use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or damage. One useful starting […]

AI in business AI is transforming how organisations operate. However, without strong data protection practices in place, it can just as quickly introduce significant risk. The difference between safe and unsafe AI use often comes down to how effectively core data protection principles are applied in practice. Drawing on insights from our data protection experts,

How massage and beauty therapists can keep customer data safe Keeping customer data safe If you run a massage or beauty business, trust is everything. Your clients trust you with their comfort, their wellbeing and often some quite personal information too. From contact details to treatment notes, you’re handling more than just bookings. The good

Will you be hit by a class action lawsuit after a data breach? Executive summary Group lawsuits after data breaches are rising in the UK and EU.  Regulators (like the ICO) still issue fines and guidance, but claimants are increasingly using GDPR rights to sue en masse. High-profile cases show that both customers and employees can

Does your employer know too much about you? Most employees never stop to ask an important question “what exactly does my employer know about me and how well are they protecting that information?” The answer might be more concerning than you think. How much personal data does your employer hold? Your employer is likely storing

When data goes wrong: can staff be personally liable? The famous Morrisons data breach case gave organisations across the UK a nasty shock. In that incident, a disgruntled employee deliberately leaked payroll data for thousands of colleagues. The courts examined whether the supermarket could be held responsible for the actions of a rogue staff member.

Our CEO says GDPR is boring, but it is key to keeping your business secure Don’t wait until your business gets hacked Every second, businesses like yours are under attack. Hackers don’t care about your hard work, your customers, or your future; they care about exploiting your weakest link. And if you’re not GDPR compliant,

Why it matters Major data breaches are no longer rare events. They’re real, rising, and risky. Under UK GDPR, organisations have a legal obligation to manage and report breaches appropriately. The Information Commissioner’s Office (ICO) has recently updated its guidance to place greater emphasis on a “report early, update later” approach. This means your response

When Marks & Spencer hits the headlines for a cyber attack, every business should sit up, spill their coffee, and say, “what would we do?” In case you missed it, M&S recently confirmed their ongoing cyber attack exposed customer data including names, contact info, dates of birth, and even online order history. Currently, they believe

In an era where data privacy is a top priority, businesses must be prepared to handle Subject Access Requests (SARs) efficiently. Under the UK General Data Protection Regulation (UK GDPR), individuals have the right to access the data held by an organisation. For small and medium-sized enterprises (SMEs), handling SARs correctly is crucial to maintaining