Blog

Here’s a practical, step-by-step guide to handling a Subject Access Request (SAR) under UK GDPR / GDPR within statutory timescales, plus a downloadable checklist is at the end. We'll start by explaining the legal background, before taking you through the key steps - and why they are important - to

Understanding “ROT” Data: Redundant, Obsolete, and Trivial Information Organisations create, collect, and store extraordinary volumes of information every day. While some of that information is mission-critical and legally required, a significant proportion has little or no ongoing value. This unnecessary content is widely known as ROT data — information that

In health and social care, protecting people’s confidential information is more than a legal requirement — it is a core ethical responsibility. One of the most important roles in maintaining this trust is that of the Caldicott Guardian. Yet, outside clinical governance circles, many people are unfamiliar with what a

Exploring the Applicant Blind Principle in freedom of information requests Transparency in public administration is a cornerstone of democratic accountability. The Freedom of Information Act 2000 (FOIA) embodies that principle in the United Kingdom, granting the public a legal right to access recorded information held by public authorities. One of

An information audit systematically inventories, assesses and scores the information assets, flows, controls and risks in an organisation. The objective is to understand what information exists, where it lives, how it is used, and whether it is fit for purpose and subject to appropriate protection and governance. The plan below

A risk register is key to effective risk management. A good risk register will help you capture your risks, set out the risk score, define your approach and get assurance of your risk approach. That means the right risk register template is important. Fortunately the risk management experts at WuDo

We get asked a lot of questions about conflicts of interests so we have collated the most frequently asked ones and invited our conflicts of interests expert, Michael Wuestefeld-Gray, to answer them. ________________________________________________________________________________________________ [su_box title="About the Author" box_color="#020a4a"]Michael has over 15 years experience supporting, developing and improving effective conflicts of

The Data Use and Access Act (DUAA) has introduced an important new right into UK data protection law — a right for individuals to complain directly to data controllers if they believe their personal data has been mishandled. This right, set out in section 164A of the Data Protection Act