Data protection training for staff: a practical UK employer checklist
Data protection training for staff works best when it is part of an everyday operating routine, rather than a generic…
Practical Data Protection Guides
Step-by-step data protection guidance for the people responsible for putting compliance into practice. Find checklists, worked examples and implementation advice covering staff training, policies, DPIAs, individual rights, workplace data and privacy laws in the UK and beyond. Start with the staff training checklist, learn when a DPIA is required, or browse our ready-to-use data protection templates.
CNIL connected-vehicle location rules: what fleet managers and telematics providers should check
A connected car, van, or scooter generates location data every time it moves. Fleet dashboards, rental recovery tools, and telematics…
GDPR & Slack: How to stay compliant with GDPR
Slack is where your team talks. It is not where your GDPR programme lives. Under the UK GDPR Article 28,…
Can I Request a Copy of All My Employment Data from My Employer Under GDPR?
The General Data Protection Regulation (GDPR) gives you the explicit right to request and receive a copy of all personal…
Is Employee Data Subject to GDPR? How must it be protected?
Yes. Employee data is personal data, so GDPR applies whenever an employer collects, stores, shares, searches, or deletes it. The…
Why a templated privacy policy is only half the job — writing vs. operationalising it
A templated privacy policy can look reassuring while hiding gaps in complaints handling, SAR workflow, consent records, and breach response.…
UK Data Protection Complaints Procedure: What Organisations Need in Place Before 19 June 2026
From 19 June 2026, UK organisations must have a process for handling data protection complaints. This requirement needs a live…
EDPB Issues New Guidelines on AI Systems and Personal Data — Key Changes for EU Organisations
EDPB Opinion 28/2024 clarifies GDPR rules for AI models and personal data. What HR, leadership, and marketing teams must do…
Minnesota MCDPA Is Already in Force — Is Your Organisation Compliant?
Minnesota's Consumer Data Privacy Act has been in force since July 2025. Check your MCDPA compliance now — enforcement is…
Indiana Consumer Data Protection Act — What Managers Need to Know in 2026
Indiana Consumer Data Protection Act (INCDPA) is now in force. The enforcement grace period ends July 1, 2026. What managers…
Cross-Border Data Breach Lawsuits: Courts Are Coming for You
An Estonian crypto company with no office in the US just got dragged into a California courtroom. A facial recognition…
Copyright vs. GDPR: The Tension in AI Training and Data Protection
Every dataset scraped from the internet to train an AI model contains two things: copyrighted material and personal data. A…
Age Verification Is No Longer Optional: How Regulators Are Raising the Bar
In early 2026, regulators on both sides of the Atlantic fined platforms, blocked laws, and rewrote policy — all focused…
UK Data Use and Access Act: What Changes on 5 February 2026 and How to Prepare
The UK’s Data (Use and Access) Act 2025 (DUAA) comes into force on 5 February 2026. Before you worry about…
Indiana INCDPA Fines: What We Know So Far
The Indiana Consumer Data Protection Act took effect on January 1 2026. The Indiana Attorney General has signaled an intention…
Rhode Island RIDTPPA Fines: What We Know So Far
The Rhode Island Data Transparency and Privacy Protection Act took effect on January 1 2026. The law is notable for…
Kentucky KCDPA Fines: What We Know So Far
The Kentucky Consumer Data Protection Act takes effect on January 1 2026. As of this writing, the law is not…
Minnesota CDPA Fines: What We Know So Far
The Minnesota Consumer Data Privacy Act took effect on July 1 2025. The law includes unique requirements like the right…
MODPA Fines: What We Know So Far
The Maryland Online Data Privacy Act took effect on October 1 2025, though it does not apply to processing activities…
US Privacy Enforcement Isn’t Slowing Down
If you thought US privacy enforcement was winding down, think again. Despite predictions that changes in Washington would put the…