Privacy by Design Is No Longer Optional-So Why Are We Still Getting It Wrong?
There is a telling irony at the centre of modern data protection. The organisations spending the most on privacy technology are often the ones furthest from genuine compliance. They invest in the latest encryption stacks and deploy automated consent management platforms… and yet they remain systematically non-compliant with one of GDPR’s most foundational principles: Article […]
Court of Appeal Draws a Clear Line on Data Security Duty
The Court of Appeal’s latest ruling on the DSG Retail cyber-attack should be read as a decisive statement about responsibility in the digital age. By backing the Information Commissioner’s Office (ICO) and reaffirming that organisations must take appropriate security measures to protect all personal data, regardless of whether individuals can be directly identified from stolen […]
Data Protection Reform at Speed: What Short-Notice Change Tells Us About UK Privacy Governance
UK data protection reform has entered a new phase, bringing with it a pace of change not previously seen in the UK. Recent reforms taking effect at short notice show a clear signal from government that data protection is treated as a living system expected to evolve at rapid pace. For those unfamiliar with the […]
The 2026 Privacy Horizon: Building Your 2026 Privacy Strategy for Privacy Day
With Privacy Day approaching, organisations are looking ahead to a year that increasingly resembles a geopolitical and commercial chessboard for data privacy. By 2026, the global privacy landscape has decisively shifted into a multi-polar regulatory reality. An increase in divergent national laws and intensifying enforcement have fractured the predictability that organisations once relied upon. In […]
Three New U.S. State Privacy Laws Take Effect: What Changed on 1 January 2026
Three New U.S. State Privacy Laws Take Effect: What Changed on 1 January 2026 On 1 January 2026, three additional U.S. state-level comprehensive privacy laws came into force: Indiana, Kentucky, and Rhode Island. While each law broadly follows the now-familiar ‘Virginia-style’ consumer privacy model, focused on controller and processor responsibilities rather than individual litigation, the […]
OpenAI Breach: A Wake-Up Call for the AI Supply Chain
If there is one enduring lesson that we’ve taken away from the state of cybersecurity of late 2025, it is that your data security is only as strong as your weakest vendor. You only have to consider any of the UK’s largest attacks from the last quarter to see the trend. The recent revelation that […]
TikTok vs The Data Protection Commissioner
TikTok vs. The Data Protection Commissioner: A high court ruling with billion-dollar implications for EU data transfers The Irish High Court has temporarily paused an order from the Irish Data Protection Commission (DPC) that would have forced TikTok to suspend transfers of its European Economic Area (EEA) users’ data to China. While this decision follows […]
AI in the Courtroom: Safeguarding Rights in the Age of Judicial AI
The University of Surrey has unveiled a truly impressive Artificial Intelligence system designed to revolutionise how we interact with justice. By tailoring AI to the unique language of British courtrooms, this tool promises to make justice ‘more transparent and accessible’ than ever before.The system achieves this by automatically transcribing UK Supreme Court hearings and semantically […]
Beyond the Backlog: Lessons from Bristol City Council’s Data Rights Failures
The right to access personal data held by public authorities, formally known as a Subject Access Request (SAR), is a fundamental part of UK data protection law. When that right is not upheld, individuals can be left without vital information that may affect their lives, legal cases, or understanding of their own histories. Recent findings […]
Analysis of Ambient AI Within UK Healthcare
The Promise Ambient voice technology, also known as AVT, feels like one of the most straightforward healthcare AI use cases. Rather than revolutionising clinical practice, it sits in the background like a silent assistant, undertaking tasks such as transcribing consultations, sometimes summarising them, and entering notes into patient records.Research from Great Ormond Street’s research arm […]