Blog

Every organisation that processes personal data must understand the lawful bases for processing personal data. Under the UK GDPR, these reasons are known as the lawful bases for processing. Choosing the correct lawful basis is an important part of data protection compliance. It affects whether you can process personal data

The Principle of Accountability means organisations cannot simply claim to comply with the GDPR. They must be able to demonstrate that compliance through policies, records, governance arrangements and day-to-day practices. This is the purpose of the accountability principle. It requires organisations to take responsibility for protecting personal data and to

Every organisation that processes personal data has a responsibility to protect it. Whether information is stored electronically, on paper or shared verbally, individuals expect it to remain accurate, available when needed and protected against unauthorised access, loss or misuse. The GDPR's integrity and confidentiality principle establishes the security and governance

Caldicott Guardians have a central role in the ethical and safe use of patient information. Their key contribution to data protection and information governance is set out in the Caldicott Principles but they must also be mindful of a range of wider guidance and legislation such has the GDPR. One

Storage limitation matters because every item of personal data has a lifecycle. Information is collected, used, shared and eventually reaches a point where it is no longer needed. The GDPR recognises that retaining personal data indefinitely increases privacy risks, creates unnecessary costs and undermines public trust. The storage limitation principle

WuDo Solutions has been providing world-class governance expertise to the public, private and charity sectors for 11 years. This support has taken many forms, from interim management to project delivery, training and reviews. Going forward we will continue to do so, but with a narrower (but deeper) focus.