How Can Data Protection Risks Affect Printing Service Providers? Whether producing photographs, wedding invitations, business cards, direct mail, marketing materials or personalised documents, printing service providers routinely receive files containing names, postal addresses, email addresses, telephone numbers and, in some cases, special category personal data, e.g. membership records for a political party or campaign. Given…
-
-
The National Housing Federation has published a new report, The State of AI in Housing 2025, produced with IT services provider Phoenix, looking at how housing associations are adopting artificial intelligence, the opportunities it offers, the risks it creates, and how ready the sector actually is. It is not new legislation and does not create…
-
By Amber Sivill, Data Protection Consultant and AI Specialist at Data Protection People Artificial intelligence is not only changing the way organisations handle information, it is changing the way individuals understand, exercise and challenge their individual rights. That shift is now landing firmly on the DPO’s desk. Ahead of this Friday’s podcast episode on how…
-
Player Data Rights Under UK GDPR: A Guide for Sports Clubs Pre-season is underway. Across football, rugby and other contact sports, clubs are strapping GPS vests and bicep-worn heart rate monitors onto players again. As a result, an old question returns: who does player performance data belong to? The club? The analytics company? The wearable…
-
AI in the Showroom: What BMW’s ChatGPT Configurator Tells Us About Data Protection Risk A Data Protection Officer’s perspective on AI, automotive retail and accountable risk management BMW’s decision to make its vehicle configurator available through ChatGPT shows how quickly generative AI is moving from experimentation into customer-facing services. A customer can describe the vehicle…
-
Data protection training is important because it helps employees understand their responsibilities when handling personal data, reducing the risk of breaches and improving compliance. TL;DR Data protection training reduces human error and compliance risks. Different roles require different levels of GDPR training. Training should be ongoing, not a one-off. What is Data Protection Training? Data…
-
Why Data Protection Is Critical in Mergers and Acquisitions Mergers and acquisitions are complex transactions. They require time, resource, commercial planning and strategic alignment. But one area that is often underestimated is data protection. Personal data can be one of the most valuable assets transferred during a merger or acquisition. Customer databases, employee records, supplier…
-
Choosing between ongoing and project-based data protection services often comes down to how often your organisation handles compliance requirements. Businesses with frequent SARs or complex processing activities may benefit from ongoing support, and organisations with a specific compliance need will find project-based services more practical and cost-effective. TL;DR Ongoing services provide continuous data protection support…
-
The Rise of AI in Payment Fraud and Cybersecurity Artificial intelligence and machine learning are increasingly influencing how security operates on both sides of the fence. Organisations are using them to spot unusual activity more quickly and with more precision. Attackers are using them to run phishing campaigns, impersonate people convincingly, and scale fraud operations…
-
A business is legally required to appoint a Data Protection Officer (DPO) when its activities meet specific UK GDPR criteria. This includes large-scale monitoring, processing special category data or operating as a public body. Businesses need a DPO when its data activities reach a certain level of scale or sensitivity. Public authorities must appoint a…
Join our community
Our mission is to make data protection easy: easy to understand and easy to do. We do that through the mantra of benchmark, improve, maintain.