BLOG & UPDATES

Why having the right clauses may not be enough A contract can contain data protection clauses and still leave your organisation exposed to compliance risks. The real question is whether those clauses adequately reflect how personal data is handled, who is responsible for protecting it, and what happens when something goes wrong. For businesses entering into supplier agreements, sharing personal data with third parties or reviewing existing commercial arrangements, this distin

Most organisations know they must protect personal data. Fewer ask a simpler question: How long should we hold it or do we still need to keep it? In September 2026, the Irish Data Protection Commission fined the Health Service Executive (HSE) for leaving patient records in disused, unsecured hospital buildings. Intruders walked in and filmed them. The case is a reminder that old data is not harmless data. What the law says The storage limitation principle (Article 5(1)(e) UK

In today’s digital world, protecting sensitive information is more critical than ever. Data breaches can cause severe financial losses, damage reputations, and compromise personal privacy. Organisations must adopt effective strategies to safeguard their data from unauthorised access. This article explores proven methods for preventing data breaches, offering practical advice to help secure your digital assets. Understanding the Importance of Preventing Data Breaches Data brea

In today’s data-driven world, managing information effectively is crucial for any business aiming to thrive. Data governance ensures that data is accurate, secure, and used responsibly. However, implementing a robust data governance framework can be complex and time-consuming. This is where professional expertise comes into play. Engaging with Sarsearon Consulting can transform how your business handles data, leading to numerous advantages. Understanding Data Governance Consu

In today’s digital world, protecting personal data is more important than ever. Organisations must ensure that they handle data responsibly and comply with privacy laws. One essential tool for this is conducting an impact assessment for data protection. This process helps identify risks related to data processing activities and ensures that appropriate measures are in place to mitigate those risks. This article will guide you through how to conduct these assessments effective

Ensuring compliance with the General Data Protection Regulation (GDPR) is essential for any organization handling personal data of individuals in the European Union. GDPR sets strict rules on data privacy and protection, and failure to comply can result in hefty fines and reputational damage. To navigate this complex regulation, organisations need a clear and practical GDPR essentials checklist that covers all critical areas of compliance. This article breaks down the key com

Data Protection Day is the perfect opportunity to pause, reflect, and challenge some of the most common myths we still hear about data protection. Misunderstandings can lead to unnecessary fear, poor decisions, or even non‑compliance. Common Myths About Data Protection Myth: “Getting consent is always required to use personal data” ✅ Fact: Consent is only one lawful basis for processing personal data. Organisations can lawfully use personal data without consent where another

In today’s data-driven world, organisations must be vigilant about how they handle personal information. One critical aspect of data protection is managing requests from individuals who want to access their personal data. This process, known as the data subject access request (SAR) process, is essential for compliance with privacy laws and building trust with customers. Understanding how to master this process can save your organization from legal pitfalls and enhance your re

In today's digital age, data protection and privacy have become paramount concerns for individuals and organisations alike. With regulations such as the Data Protection Act (2018) & General Data Protection Regulation (GDPR) in place, individuals have the right to request access to their personal data and exercise other data subject rights. As such, it's crucial for organisations to have clear procedures in place for responding to these requests promptly and effectively. Here