Vietnam’s New Data Protection Law: What You Need to Know Before January 2026
Vietnam has passed its first comprehensive data protection law. Law No. 91/2025/QH15 on Personal Data Protection (the PDPL) takes effect…
Articles
Practical guidance on UK GDPR, data protection, and privacy compliance. From ICO enforcement updates to implementation guides, we help you stay informed and compliant.
Colorado Privacy Act: 101 – What You Need to Know
Colorado was the third US state to pass a consumer privacy law, following California and Virginia. The Colorado Privacy Act…
Virginia Consumer Data Protection Act: 101 – What You Need to Know
Virginia was the second US state to enact a comprehensive consumer privacy law, following California. The Virginia Consumer Data Protection…
Texas Data Privacy and Security Act: 101 – What You Need to Know
Texas became the largest US state by population to enact a consumer privacy law when Governor Greg Abbott signed the…
California CCPA/CPRA: 101 – What You Need to Know
California was the first US state to pass a consumer privacy law, and it remains the most significant. If your…
The UK Cyber Security and Resilience Bill: What Data Protection Officers Need to Know
The UK Government introduced the Cyber Security and Resilience Bill in November 2025, proposing significant changes to how organisations manage…
ICO’s Public Sector Approach: Why the Post Office Received a Reprimand Instead of a £1m Fine
In December 2025, the ICO concluded its investigation into a data breach that exposed personal information belonging to 502 victims…
The EU’s First DSA Fine: What X’s €120m Penalty Means for Digital Platform Compliance
On 5 December 2025, the European Commission issued its first-ever fine under the Digital Services Act (DSA). X, formerly Twitter,…
ICO Enforcement in 2025: Record Fines and What They Mean
The Information Commissioner’s Office issued fewer fines in the first half of 2025 than in previous years. Yet it collected…
EU Digital Omnibus Explained: Will Cookie Banners Finally Disappear?
Cookie fatigue is real. We’ve all done it – visited a website, seen yet another cookie banner, and clicked “Accept…
GDPR Subject Access Requests When AI Processes Your Data
When someone submits a subject access request (SAR), you have 30 days to respond. For most organisations, this is straightforward.…
What is the UK Cyber Security and Resilience Bill?
In November 2025, the UK government introduced the Cyber Security and Resilience Bill to Parliament, marking the most significant update…
Is GDPR Really on the Chopping Block in the EU?
Seven years after the General Data Protection Regulation transformed global privacy standards, Europe finds itself at a crossroads. The landmark…
Australia Privacy Act 1988: 101 – What You Need to Know
What Is the Australia Privacy Act 1988? Australia’s Privacy Act 1988 is a long-standing federal law that regulates how personal…
Connecticut Data Privacy Act: 101 – What You Need to Know
This article explains the Connecticut Data Privacy Act for educational purposes. It is not legal advice. For guidance specific to…
Rhode Island Data Transparency and Privacy Protection Act: 101 – What You Need to Know
What Is the Rhode Island DTPPA? Rhode Island enacted the Data Transparency and Privacy Protection Act (DTPPA), also known as…
Indiana Consumer Data Protection Act: 101 – What You Need to Know
Indiana enacted the Consumer Data Protection Act on 1st May 2023, when Governor Eric Holcomb signed Senate Bill 5 into…
Can a Company Process and Store Employee Fingerprint Data Under GDPR?
Two landmark cases demonstrate how seriously data protection authorities take workplace biometric processing. Learn when fingerprint data can and cannot…
EU Court Redefines ‘Personal Data’: 5 Documents to Update Now
On 4 September 2025, the Court of Justice of the European Union fundamentally changed how "personal data" is defined under…
EU NIS-2 Management Liability: The SonicWall Breach Test Case
In October 2025, SonicWall revealed the full scope of a September breach: attackers had stolen ALL cloud-stored security configuration backups,…