Blog

A PESTLE analysis provides a structured framework for systematically identifying external risks and opportunities, ensuring that political, economic, social, technological, legal and environmental influences are all considered. Many organisations struggle to identify risks consistently. A PESTLE analysis is one important tool to help them do this. Where Does PESTLE sit

Navigating the steps of freedom of information requests can be complex. Considering requests, seeking clarification and applying exemptions is a normal part of obtaining and sharing data. It can, however be difficult to get everything right when dealing with a large volume of requests or when requests are complex. That's

The Freedom of Information Act 2000 (FOIA) places clear obligations on public authorities to provide access to recorded information, and with those obligations comes the need for consistency, clarity, and control. This is where a well-designed Freedom of Information (FOI) policy becomes indispensable. Without one, organisations risk delays, inconsistency, and

For any public authority or organisation subject to the Freedom of Information Act 2000, receiving a request can feel like a disruption to the "real" work. However, treating FOI requests as an afterthought is risky because of your statutory duties and the role FOI has in building openness and trust.

A Data Protection Impact Assessment (DPIA) is a structured risk assessment used to identify and reduce privacy risks in a project or process that involves personal data. Under the UK GDPR, organisations must complete a DPIA before they start certain types of processing—especially where that processing could create a high

Here’s a practical, step-by-step guide to handling a Subject Access Request (SAR) under UK GDPR / GDPR within statutory timescales, plus a downloadable checklist is at the end. We'll start by explaining the legal background, before taking you through the key steps - and why they are important - to

A risk register is key to effective risk management. A good risk register will help you capture your risks, set out the risk score, define your approach and get assurance of your risk approach. That means the right risk register template is important. Fortunately the risk management experts at WuDo

Download your GDPR Maturity Matrix with five maturity levels (1 = Initial, 5 = Optimised) across the requested domains. It’s written so you can lift it straight into a governance pack or audit framework. Get the template here:   [gravityform id="58" title="false" description="false"] [su_box title="About the Author" box_color="#020a4a"]Michael has many

It is important for every organisation to develop effective conflicts of interests management systems. But, how do you know if your systems are good enough?  One thing you can do is to benchmark your systems and processes against the maturity matrix below. Take a step back and use the content

A Register of Interests is one of the tools for identifying and managing conflicts of interest within organisations. It acts as a structured, transparent record of any declared personal, financial, professional, or other interests held by individuals that may influence, or be perceived to influence, their decision-making or duties.  

A robust conflicts of interests policy is essential to ensure transparency, maintain trust, and uphold ethical standards. In this blog post, we will explore why having such a policy is crucial for the success and reputation of any organisation. We will also consider the role of individuals as well as

Why test your Freedom of Information maturity? Compliance with the UK Freedom of Information Act (FOIA) is no longer just a legal necessity. For many public authorities, it has become a visible measure of organisational transparency, capability, and trustworthiness. Yet in practice, FOI compliance can feel fragmented. Teams may be