How to Manage a Data Breach

How to Manage a Data Breach

Data breaches can happen to anyone, at any time. So, it’s important to know what to do in the event one happens within your organisation.   While not all breaches are created equal, there is a blueprint to follow when executing your management strategy. In this blog,...
Privacy notices – the good, the bad and the ugly

Privacy notices – the good, the bad and the ugly

  With the ever-increasing importance of data protection, privacy notices are everywhere. Go on any website and you’ll find a privacy notice (or you should do!) Some are good, some are bad and some are just plain ugly.  The good ones are to-the-point and easy to...
Can I access my child’s school records?

Can I access my child’s school records?

Under data protection law, there are two ways for parents to access information that a school or academy holds about their child: either via the Education (Pupil Information) (England) Regulations 2005 and/or the UK GDPR and the Data Protection Act 2018.   The...
SARs as ‘weapons’ in employment disputes

SARs as ‘weapons’ in employment disputes

It’s becoming more and more common to find a subject access request (SAR) going hand-in-hand with an employment dispute.  We’ve even heard of these SARs being described as ‘weaponised’, meaning that the employee has made a SAR and will withdraw...