Blog

GDPR Basics for HR: why is it important to understand the lawful bases for employee data processing? Employee data is core to HR functions. This is true before, during, and after employment. For example, during recruitment, for payroll, absence management, performance reviews, learning and development, safeguarding, workplace investigations, references and

Why the Data and Information You Use at Work Is Not Your Property In modern workplaces, information is created, shared, stored, and reused at extraordinary speed. Emails, documents, spreadsheets, instant messages, and reports flow continuously through corporate systems. Yet a lot of people seem to believe that information handled by

The Accountability Principle in DMBOK: A Cornerstone of Effective Data and Information Management Accountability sits at the heart of mature data and information management. Within the DAMA-DMBOK (Data Management Body of Knowledge) framework, accountability is not an abstract ideal; it is a practical principle that underpins governance, quality, security, and

The UK National Data Opt Out: What It Is and How It Relates to the GDPR The use of patient data plays a vital role in improving health and care services. It supports research, planning, and the delivery of safer, more effective treatment. At the same time, patients rightly expect

Responding to a subject access request within statutory timescales is a real challenge. Finding, reviewing and collating all the information you hold about a person in 30 days or less involves a lot of steps, and can involve a lot of people. It can be easy to lose track, miss

An Introduction to ISO 27001: Strengthening Information Governance and Supporting GDPR Compliance In a data-driven world, and one where AI has been the focus of much speculation, organisations of all sizes face growing pressure to protect information, manage risk, and demonstrate accountability. Cyber threats, regulatory scrutiny, and customer expectations have