AI Governance12 June 2026
ISO 42001 in practice: what your first AIMS actually looks like
Six months in, we share what's working — and the controls that quietly fall over at internal audit.
8 min read →
Insights
Privacy and security briefings for senior leaders.
Stories we've found and articles we've written — feel free to browse, and comment if you like.
UK GDPR28 May 2026
The DUA Act is now in force. What changes for your privacy notice?
A pragmatic walkthrough of the Data (Use and Access) Act changes that genuinely affect day-to-day compliance.
6 min read →
Transfers14 May 2026
Transfer Risk Assessments without the 30-page template
How to produce defensible TRAs that an ICO investigator (or a sceptical procurement team) will actually accept.
5 min read →
ISO 2700102 May 2026
Annex A 2022: the seven controls that catch teams out
Threat intelligence, secure development, data masking — where most ISMS programmes need real work, not policy wording.
7 min read →
Breach response18 April 2026
72 hours: a tabletop script for your next personal data breach
A ready-to-run exercise that surfaces the decisions your incident playbook hasn't yet answered.
4 min read →
International01 April 2026
Selling into the GCC: a privacy primer for UK SaaS
What changes when your roadmap reaches Riyadh, Dubai or Doha — and what stays reassuringly familiar.
6 min read →
Guides15 March 2026
Why data breaches pose a threat to your business
Small businesses are disproportionately exposed. Beyond the headline fines lies a quieter toll on trust, credibility and customer relationships.
6 min read →
HR02 March 2026
Why your HR team are superheroes
HR sits at the centre of more personal data than almost any other function — and quietly carries a huge share of your compliance load.
4 min read →
News18 February 2026
The silent revolution: how user privacy concerns are shaping digital marketing
Consent fatigue, tracking restrictions and a shifting public mood are quietly rewriting the rules of acquisition and retention.
7 min read →
Guides04 February 2026
Why collecting less data is good for business
Data minimisation isn't just a UK GDPR principle — it's a faster, cheaper, lower-risk way to run a modern business.
5 min read →
Guides20 January 2026
GDPR belts and braces guide
A practical, plain-English checklist for the controls and records that keep you defensible when the ICO comes knocking.
9 min read →
Guides07 January 2026
Legitimate Interest Assessments
How to write an LIA that actually stands up — purpose, necessity and balancing, without the legal jargon.
6 min read →
Guides12 December 2025
Absenteeism monitoring
Where employee monitoring crosses the line — and how to design absence processes that respect staff and the law.
5 min read →
Guides28 November 2025
Pseudonymisation & anonymisation
The difference matters more than most teams realise. A clear guide to when each technique applies and what it actually buys you.
6 min read →
News14 November 2025
The functionality compromise
Every new feature is a privacy decision. How to weigh user value against data risk without grinding product delivery to a halt.
5 min read →
