BLOG & UPDATES

Why having the right clauses may not be enough A contract can contain data protection clauses and still leave your organisation exposed to compliance risks. The real question is whether those clauses adequately reflect how personal data is handled, who is responsible for protecting it, and what happens when something goes wrong. For businesses entering into supplier agreements, sharing personal data with third parties or reviewing existing commercial arrangements, this distin

Most organisations know they must protect personal data. Fewer ask a simpler question: How long should we hold it or do we still need to keep it? In September 2026, the Irish Data Protection Commission fined the Health Service Executive (HSE) for leaving patient records in disused, unsecured hospital buildings. Intruders walked in and filmed them. The case is a reminder that old data is not harmless data. What the law says The storage limitation principle (Article 5(1)(e) UK

In today’s fast-paced digital world, protecting sensitive data is more important than ever. Businesses face increasing pressure to comply with data protection laws like GDPR, and the role of a Data Protection Officer (DPO) has become essential. However, hiring a full-time DPO can be costly and complex, especially for small and medium-sized businesses. That’s where outsourcing a Data Protection Officer comes in. Outsourcing offers a practical, efficient, and cost-effective sol

In today’s digital world, protecting personal data is more important than ever. Organisations must ensure that they handle data responsibly and comply with privacy laws. One essential tool for this is conducting an impact assessment for data protection. This process helps identify risks related to data processing activities and ensures that appropriate measures are in place to mitigate those risks. This article will guide you through how to conduct these assessments effective

Ensuring compliance with the General Data Protection Regulation (GDPR) is essential for any organization handling personal data of individuals in the European Union. GDPR sets strict rules on data privacy and protection, and failure to comply can result in hefty fines and reputational damage. To navigate this complex regulation, organisations need a clear and practical GDPR essentials checklist that covers all critical areas of compliance. This article breaks down the key com

Data Protection Day is the perfect opportunity to pause, reflect, and challenge some of the most common myths we still hear about data protection. Misunderstandings can lead to unnecessary fear, poor decisions, or even non‑compliance. Common Myths About Data Protection Myth: “Getting consent is always required to use personal data” ✅ Fact: Consent is only one lawful basis for processing personal data. Organisations can lawfully use personal data without consent where another

In today’s data-driven world, organisations must be vigilant about how they handle personal information. One critical aspect of data protection is managing requests from individuals who want to access their personal data. This process, known as the data subject access request (SAR) process, is essential for compliance with privacy laws and building trust with customers. Understanding how to master this process can save your organization from legal pitfalls and enhance your re

What Is a Subject Access Request and a SAR Complaint? A Subject Access Request (SAR) is an individual’s right to ask for the personal data your organisation holds about them. This includes certain supplementary information, such as why it is being processed and how long you will keep it. Anyone can make a SAR verbally, in writing, or via social media. Importantly, it does not have to use the words “SAR” or refer to GDPR. It just needs to be clear that they want their own pers

In today's data driven world, what is your personal information worth? What is personal information or personal data Personal information is all about you, its about information that identifies you as living human being. This information helps identify your character, your preferences, likes, dislikes and what makes you tick. This information in silo may not be used to identify you however, cumulatively when put together with the sophisticated technology and artificial intell