Insights

Privacy and security briefings for senior leaders.

Stories we've found and articles we've written — feel free to browse, and comment if you like.

AI Governance12 June 2026

ISO 42001 in practice: what your first AIMS actually looks like

Six months in, we share what's working — and the controls that quietly fall over at internal audit.

8 min read →

UK GDPR28 May 2026

The DUA Act is now in force. What changes for your privacy notice?

A pragmatic walkthrough of the Data (Use and Access) Act changes that genuinely affect day-to-day compliance.

6 min read →

Transfers14 May 2026

Transfer Risk Assessments without the 30-page template

How to produce defensible TRAs that an ICO investigator (or a sceptical procurement team) will actually accept.

5 min read →

ISO 2700102 May 2026

Annex A 2022: the seven controls that catch teams out

Threat intelligence, secure development, data masking — where most ISMS programmes need real work, not policy wording.

7 min read →

Breach response18 April 2026

72 hours: a tabletop script for your next personal data breach

A ready-to-run exercise that surfaces the decisions your incident playbook hasn't yet answered.

4 min read →

International01 April 2026

Selling into the GCC: a privacy primer for UK SaaS

What changes when your roadmap reaches Riyadh, Dubai or Doha — and what stays reassuringly familiar.

6 min read →

Guides15 March 2026

Why data breaches pose a threat to your business

Small businesses are disproportionately exposed. Beyond the headline fines lies a quieter toll on trust, credibility and customer relationships.

6 min read →

HR02 March 2026

Why your HR team are superheroes

HR sits at the centre of more personal data than almost any other function — and quietly carries a huge share of your compliance load.

4 min read →

News18 February 2026

The silent revolution: how user privacy concerns are shaping digital marketing

Consent fatigue, tracking restrictions and a shifting public mood are quietly rewriting the rules of acquisition and retention.

7 min read →

Guides04 February 2026

Why collecting less data is good for business

Data minimisation isn't just a UK GDPR principle — it's a faster, cheaper, lower-risk way to run a modern business.

5 min read →

Guides20 January 2026

GDPR belts and braces guide

A practical, plain-English checklist for the controls and records that keep you defensible when the ICO comes knocking.

9 min read →

Guides07 January 2026

Legitimate Interest Assessments

How to write an LIA that actually stands up — purpose, necessity and balancing, without the legal jargon.

6 min read →

Guides12 December 2025

Absenteeism monitoring

Where employee monitoring crosses the line — and how to design absence processes that respect staff and the law.

5 min read →

Guides28 November 2025

Pseudonymisation & anonymisation

The difference matters more than most teams realise. A clear guide to when each technique applies and what it actually buys you.

6 min read →

News14 November 2025

The functionality compromise

Every new feature is a privacy decision. How to weigh user value against data risk without grinding product delivery to a halt.

5 min read →