BLOG & UPDATES

Why having the right clauses may not be enough A contract can contain data protection clauses and still leave your organisation exposed to compliance risks. The real question is whether those clauses adequately reflect how personal data is handled, who is responsible for protecting it, and what happens when something goes wrong. For businesses entering into supplier agreements, sharing personal data with third parties or reviewing existing commercial arrangements, this distin

Data Protection Day is the perfect opportunity to pause, reflect, and challenge some of the most common myths we still hear about data protection. Misunderstandings can lead to unnecessary fear, poor decisions, or even non‑compliance. Common Myths About Data Protection Myth: “Getting consent is always required to use personal data” ✅ Fact: Consent is only one lawful basis for processing personal data. Organisations can lawfully use personal data without consent where another