Handling Data Breaches

Handling Data Breaches Workshop, 12 November 2026, 10:00 to 12:00, Central Birmingham Effective breach management is not simply about deciding whether to notify the ICO. It is about responding quickly, protecting affected people and producing a clear, evidence-based record of what the organisation knew, decided and did. Every organisation wants

Read more
Using AI Within the GDPR

Thursday 14 January 2027 | 10:00am–11:30am Q&A and networking afterwards | Central London Artificial intelligence can help organisations work faster, analyse information and improve services. But using AI can also create difficult questions about personal data. Can employees enter personal information into generative AI tools? Can an AI provider use

Read more
GDPR and Children’s Data: Making Decisions with Confidence

GDPR and Children’s Data: Making Difficult Decisions with Confidence Thursday 11 February 2027 | 10:00am–11:30am Q&A and networking afterwards | Central Birmingham Children’s information deserves particular protection, but applying data protection law in practice is not always straightforward. Can a child provide their own consent? Does a parent have a

Read more
Data Compliance in Marketing: GDPR And PECR

Data Compliance in Marketing: GDPR and PECR How to plan lawful campaigns without unnecessarily restricting marketing Thursday 11 March 2027 | 10:00am–11:30am Q&A and networking afterwards | Central London Effective marketing depends on information. Organisations use customer details, mailing lists, website activity, social-media audiences and purchasing histories to find and

Read more
GDPR Compliance and CCTV

GDPR and CCTV How to install, operate and review CCTV lawfully Thursday 15 April 2027 | 10:00am–11:30am Q&A and networking afterwards | Central Birmingham CCTV can help organisations prevent crime, protect people and investigate incidents. But installing cameras also means collecting personal data, potentially about employees, customers, visitors, children and

Read more
Subject Access Request Workshop

Subject access requests can be time-consuming and difficult to manage—particularly when they involve large volumes of information, workplace disputes, third-party data or potentially exempt material.

This practical, in-person workshop will take you through the subject access request process from receipt to response. Using a realistic case study, you will explore how to define the scope of a request, plan proportionate searches, identify personal data, apply redactions and exemptions, and make defensible disclosure decisions.

The event is suitable for data protection and information governance practitioners, HR professionals, managers and anyone responsible for handling subject access requests in businesses, charities, schools, healthcare organisations or other workplaces. You will leave with a clearer, repeatable approach, practical tools to use in your organisation and an opportunity to put your questions to an experienced data protection specialist.

Read more
Understanding and Managing Privacy Risks

Managing Privacy Risks: How to identify, assess, control and escalate data protection risks Thursday 10 June 2027 | 10:00am–11:30am Q&A and networking afterwards | Central Birmingham Every organisation that uses personal data faces privacy risks. But those risks are often described too vaguely, assessed inconsistently or recorded without clear ownership and

Read more