Something has happened. Maybe a laptop has gone missing. Maybe an email landed in the wrong inbox. Maybe you've just discovered that a member of staff has been accessing customer records they had no reason to look at. And now you're wondering: does this count as a...
A new data protection law landed in the UK in June 2025, and if you've been half-watching the coverage, you could be forgiven for thinking it means you need to tear up your existing GDPR policies and start again. You don't. The Data (Use and Access) Act 2025, which is...
GDPR has been with us since 2018, but a remarkable number of small business owners still find themselves either slightly baffled by it, quietly ignoring it, or convinced it's primarily a large-business concern that doesn't really apply to them. It applies to them. It...