Subscribe to our blog posts

Information Governance practitioners are often called upon when the answer is not obvious. A new system is being introduced. Information needs to be shared. A subject access request has become complicated. A data breach has occurred, and the organisation needs to decide what happens next. In these moments, knowing the legislation is essential, but knowledge alone is not enough. The real value of an effective IG practitioner lies in how they interpret a situation, ask the righ

People often assume the hardest part of data protection is understanding the legislation or dealing with complicated systems. In our experience, it usually isn't. Often, the biggest challenge is getting leadership to make it a priority. We've worked with organisations that know exactly what needs doing. The risks have been identified, recommendations have been made and everyone agrees on the next steps. Then progress stalls because the people responsible for delivering the ch

If your organisation works with the NHS, chances are the Data Security and Protection Toolkit (DSPT) is something you look forward to about as much as a trip to the dentist. Every year, as the submission deadline approaches, we speak to organisations that are convinced it's going to be stressful and take up far more time than they have available. We recently worked with a client who felt exactly the same. They'd built the DSPT up in their minds into this huge project and were

If your organisation handles Subject Access Requests, you may have noticed something changing. Over recent months, we've seen an increase in requests that appear to have been drafted using AI. They are often well-written, professionally structured, and reference everything from audit trails and metadata to system logs, legal holds, digital footprints, and details of every person who has accessed a record. At first glance, they can look intimidating. Many of these requests are

Most small and medium-sized businesses are handling personal data every day — customer details, employee records, marketing lists, CCTV, booking forms, invoices. It's rarely one big system. It's dozens of small touchpoints that quietly accumulate over time. UK GDPR compliance can feel like it belongs in a different world — one with in-house legal teams and dedicated compliance departments. But most of the fundamentals are straightforward once you know what to look for. That's

As AI becomes part of our everyday workflows, a new security risk is emerging—one that doesn’t rely on malware or technical hacking. It relies on language . Adversarial prompt injection hides instructions inside content that looks completely harmless: Emails. Documents. Chat messages. Even URLs. When an AI assistant reads that content, it may follow the attacker’s hidden instructions without the user ever noticing. Because language models treat every part of an input as m

We are all familiar with the infamous phrase "death by PowerPoint" but let's shine a spotlight on another critical issue that often flies under the radar: "Death by DPIA"

We’re all familiar with the infamous phrase “death by PowerPoint,” but it's time to shine a spotlight on another critical issue that...

Many parents share photos and personal details about their children online. This is known as sharenting. While it often stems from love...

The consequences of Cyber-attacks on small businesses: Cyber-attacks don’t just affect large corporations. Small and medium-sized...

According to the UK government's Cyber Security Breaches Survey 2025 , around 1% of all UK businesses experienced a ransomware crime in...

Intro to IoT Over 50% of Internet of Things (IoT) devices have critical vulnerabilities that hackers can exploit right now. Even more...

Impact of Unauthorised Disclosure on Systems and Staff Cyber security recon is a core practice used to assess vulnerabilities and...

Understand the core Idea Social engineering relies on psychological manipulation to extract information from unsuspecting individuals,...

Social media has transformed how we connect, but it comes with hidden risks. Many users unknowingly share personal details that can be...

We’re all familiar with the infamous phrase “death by PowerPoint,” but it's time to shine a spotlight on another critical issue that...

Holidays are rapidly approaching and as usual, for me anyway, everything will be done at the last possible minute which this year may be...

With the introduction of Covid-19 the world has changed in many ways. We saw changes take place in all aspects of life, and the workplace...

‘Tis the season to be jolly’ but don’t forget to protect your data along the way! Welcome back to my blog where we talk about anything...

Hello everyone and welcome back to my to another week of my (hopefully) informative blog posts. With Christmas just round the corner we...