Understand the difference between data controllers and data processors under UK GDPR, including who decides the purpose of processing, who acts on instructions, and why the distinction matters in practice.
A practical guide to DPIAs under UK GDPR, including when they are required, what high risk processing means, and how organisations should approach them in practice.
A practical guide to transparency obligations under UK GDPR, including what organisations must tell people, when privacy information should be given, and where notices often fail in practice.
A practical overview of UK GDPR transfer mechanisms, explaining the legal tools used for international data transfers and what organisations should consider before relying on them.
A clear explanation of standard contractual clauses under UK GDPR, including when they are used, why they matter for international transfers, and what organisations should understand before relying on them.
A practical guide to international data transfers under UK GDPR, including what counts as a restricted transfer, when safeguards are needed, and what organisations should check before sending personal data overseas.
A practical explanation of the accountability principle under UK GDPR, including what it requires in day-to-day compliance and how organisations can demonstrate responsibility in practice.
A clear guide to subject access requests under UK GDPR, including what individuals can ask for, how organisations should respond, and where SAR handling often goes wrong in practice.
A practical guide to direct marketing under UK GDPR, including what counts as direct marketing, which rules apply, and where businesses often get compliance wrong.
A practical introduction to PECR, explaining what the rules cover, how they interact with UK GDPR, and what organisations need to know about cookies, electronic marketing, and privacy rights.
