ICO’s Public Sector Approach: Why the Post Office Received a Reprimand Instead of a £1m Fine
In December 2025, the ICO concluded its investigation into a data breach that exposed personal information belonging to 502 victims…
Articles
Practical guidance on UK GDPR, data protection, and privacy compliance. From ICO enforcement updates to implementation guides, we help you stay informed and compliant.
The EU’s First DSA Fine: What X’s €120m Penalty Means for Digital Platform Compliance
On 5 December 2025, the European Commission issued its first-ever fine under the Digital Services Act (DSA). X, formerly Twitter,…
ICO Enforcement in 2025: Record Fines and What They Mean
The Information Commissioner’s Office issued fewer fines in the first half of 2025 than in previous years. Yet it collected…
EU Digital Omnibus Explained: Will Cookie Banners Finally Disappear?
Cookie fatigue is real. We’ve all done it – visited a website, seen yet another cookie banner, and clicked “Accept…
GDPR Subject Access Requests When AI Processes Your Data
When someone submits a subject access request (SAR), you have 30 days to respond. For most organisations, this is straightforward.…
What is the UK Cyber Security and Resilience Bill?
In November 2025, the UK government introduced the Cyber Security and Resilience Bill to Parliament, marking the most significant update…
Is GDPR Really on the Chopping Block in the EU?
Seven years after the General Data Protection Regulation transformed global privacy standards, Europe finds itself at a crossroads. The landmark…
Australia Privacy Act 1988: 101 – What You Need to Know
What Is the Australia Privacy Act 1988? Australia’s Privacy Act 1988 is a long-standing federal law that regulates how personal…
Connecticut Data Privacy Act: 101 – What You Need to Know
This article explains the Connecticut Data Privacy Act for educational purposes. It is not legal advice. For guidance specific to…
Rhode Island Data Transparency and Privacy Protection Act: 101 – What You Need to Know
What Is the Rhode Island DTPPA? Rhode Island enacted the Data Transparency and Privacy Protection Act (DTPPA), also known as…
Indiana Consumer Data Protection Act: 101 – What You Need to Know
Indiana enacted the Consumer Data Protection Act on 1st May 2023, when Governor Eric Holcomb signed Senate Bill 5 into…
Can a Company Process and Store Employee Fingerprint Data Under GDPR?
Two landmark cases demonstrate how seriously data protection authorities take workplace biometric processing. Learn when fingerprint data can and cannot…
EU Court Redefines ‘Personal Data’: 5 Documents to Update Now
On 4 September 2025, the Court of Justice of the European Union fundamentally changed how "personal data" is defined under…
EU NIS-2 Management Liability: The SonicWall Breach Test Case
In October 2025, SonicWall revealed the full scope of a September breach: attackers had stolen ALL cloud-stored security configuration backups,…
Got Views on How the ICO Handles Complaints? Now Is the Time to Share
The ICO is changing how it handles data protection complaints. With the consultation closing 31 October 2025, now is your…
Are EU-UK Cross-Border Data Transfers at Risk of Change?
EU-UK data adequacy decisions are up for renewal in 2025. With the December 27 deadline approaching, understand what's changing and…
GDPR Recognised Legitimate Interests: Understanding the New ‘Recognised’ Category
The UK's Data (Use and Access) Act 2025 introduces recognised legitimate interests, a new lawful basis giving organisations pre-approved grounds…
£300,000 ICO Penalty for Illegal Automated Marketing Calls: Home Improvement Marketing Ltd Case Analysis
The ICO fined Home Improvement Marketing Ltd £300,000 for making 2.4 million illegal automated marketing calls. Analysis of the penalty…
Bristol City Council ICO Enforcement Case: Falling Behind On Subject Access Request Compliance
Bristol City Council faces ICO enforcement action for 231 overdue Subject Access Requests dating back over three years. Learn the…
How to request your personal data under GDPR in the UK?
A comprehensive guide to making Subject Access Requests in the UK. Learn how to request your personal data from organisations,…