data protection

Graphic quoting GCHQ Director Anne Keast-Butler's 2026 Annual Lecture at Bletchley Park: "From boardrooms to living rooms" — Cambridge Risk Solutions commentary

From Boardrooms to Living Rooms”: What the GCHQ Director’s Bletchley Speech Really Said

1 Comment / News /

From Boardrooms to Living Rooms”: What the GCHQ Director’s Bletchley Speech Really Said It’s rare for the Director of GCHQ to speak in public. Anne Keast-Butler said as much herself this morning, standing at Bletchley Park to deliver the first annual GCHQ lecture. The fact that she felt compelled to do so tells you something […]

From Boardrooms to Living Rooms”: What the GCHQ Director’s Bletchley Speech Really Said Read More »

A blurred figure walks past rows of colour-coded medical records files in a hospital records room

48 staff. No dismissals. No ICO investigation. The Southport records breach tells us everything we need to know about insider threat.

Leave a Comment / News /

48 staff. No dismissals. No ICO investigation. The Southport records breach tells us everything we need to know about insider threat. When the news broke this week that 48 NHS staff had inappropriately accessed the medical records of Southport attack victims — and that the highest sanction any of them received was a final written

48 staff. No dismissals. No ICO investigation. The Southport records breach tells us everything we need to know about insider threat. Read More »

NHS Subject Access Request Failings: A Real‑World Case Study

News /

NHS Subject Access Request Failings: A Real‑World Case Study Yesterday should have been simple. My 14‑year‑old son needed his broken wrist re‑x‑rayed. A routine appointment, in and out, nothing remarkable. Except it turned into an unexpected case study in how not to handle Subject Access Requests (SARs) — and how easily well‑meaning NHS processes can […]

NHS Subject Access Request Failings: A Real‑World Case Study Read More »

The Afghan Data Breach – A Wake-Up Call for Public Sector Data Governance

News /

️ The Afghan Data Breach – A Wake-Up Call for Public Sector Data Governance In July 2025, the veil of secrecy was finally lifted on one of the most catastrophic data breaches in UK government history. A spreadsheet leaked by a Ministry of Defence (MoD) official exposed the personal details of nearly 19,000 Afghan nationals […]

The Afghan Data Breach – A Wake-Up Call for Public Sector Data Governance Read More »

Accountability in Data Protection

News /

The ICO Fine: A Call for Accountability in Data Protection Across the Supply Chain The announcement of the substantial fine levied on Advanced Computer Software Group Ltd by the Information Commissioner’s Office (ICO) brings the critical issue of data protection to the forefront once again. While the failings of the software provider are evident, this […]

Accountability in Data Protection Read More »