Why organisations should look beyond what they can do with personal data and ask what they should do. By Clare Chatfield, Information Governance Manager Data protection is often framed as a compliance exercise: is processing lawful, is the paperwork complete and have risks been managed? These questions matter, but they are only part of the […]
By Sue White, Head of Information Law Services I have a cupboard under my stairs. It’s full of things that seemed useful at the time. I continue to add to it, but I haven’t sorted it out in years: old phone chargers, miscellaneous cables that I know must fit something, and instruction manuals for appliances […]
I recently attended the ICO DPCC 2026, where data protection professionals explored the challenges and opportunities shaping the sector. Here, I share practical lessons from the day on responsible AI, cyber resilience and information rights. By Clare Chatfield, Information Governance Manager What organisations should take away on responsible AI, cyber resilience and information rights Artificial […]
By Alison Sigsworth, Information Governance Manager England, Wales, Scotland and Northern Ireland are all part of the United Kingdom, but organisations across the four nations may put data protection requirements into practice in different ways. Those differences matter because effective compliance needs to work in the real world, not just on paper! In September 2026, […]
By Jess Pembroke, Chief Operating Officer My early career was spent in operational data protection roles across public services, including busy NHS hospitals, community Trusts and education settings. As Data Protection Officers (DPO) in these environments, we often focus on the principle that less is more: setting appropriate retention periods, securely destroying data we no longer […]
By Alison Sigsworth, Information Governance Manager When the General Data Protection Regulation first came into being, many organisations went into panic mode and began completing a Data Protection Impact Assessment (DPIA) for every system, process, or project that involved processing someone’s name and address. Whilst many people now have a clearer understanding of data protection […]
By Alison Sigsworth, Information Governance Manager By now, almost everyone knows what a Subject Access Request (SAR) is, or that individuals can ask organisations to allow them access to, or provide a copy of, the personal data it holds about them. In data protection terms, this is known as an individual’s ‘right of access’. It […]
By Clare Chatfield, Information Governance Manager A practical guide to when the EU AI Act may affect UK organisations. This post explains when the European Union Artificial Intelligence Act[1] (EU AI Act) may matter for UK organisations, especially where artificial intelligence (AI) involves personal data, EU users, EU customers or EU-facing services. It focuses on […]
By Clare Chatfield, Information Governance Manager Further education colleges are being urged to remain vigilant following reports of a cyber incident affecting the Department for Education’s (DfE) online customer help desk and Turing Scheme portal. According to reports, around 607,000 records were exposed during the incident. The affected data is understood to include professional contact information […]
Neighbour Disputes, CCTV, Privacy and Domestic Surveillance By Sue White, Head of Information Law Services Recent headlines about a dispute involving the chairman of WH Smith and a neighbour over CCTV cameras highlight an issue that is becoming increasingly common across the UK. As smart doorbells, home security cameras and rural surveillance systems become more sophisticated, […]
By Jess Pembroke, Director of Information Law Services As our new Prime minister talks about social care funding in recent weeks,[1] it’s incumbent upon him to look to end the scandal that is companies taking excessive profits from any of our public services. “Care is costly in the UK, with 70 per cent of local authority […]
By Cleo Everett, Information Services Coordinator Data Protection is a topic which is ever evolving. You can feel confident with applying the main principles one day, yet the next, you may be asked a question about the UK GDPR, or receive a complex DSAR to review, and suddenly it all seems daunting once again. In my […]
Page 1 of 13
