NHS Subject Access Request Failings: A Real‑World Case Study Yesterday should have been simple. My 14‑year‑old son needed his broken wrist re‑x‑rayed. A routine appointment, in and out, nothing remarkable. Except it turned into an unexpected case study in how not to handle Subject Access Requests (SARs) — and how easily well‑meaning NHS processes can […]
NHS Subject Access Request Failings: A Real‑World Case Study Read More »
️ The Afghan Data Breach – A Wake-Up Call for Public Sector Data Governance In July 2025, the veil of secrecy was finally lifted on one of the most catastrophic data breaches in UK government history. A spreadsheet leaked by a Ministry of Defence (MoD) official exposed the personal details of nearly 19,000 Afghan nationals […]
The Afghan Data Breach – A Wake-Up Call for Public Sector Data Governance Read More »
The ICO Fine: A Call for Accountability in Data Protection Across the Supply Chain The announcement of the substantial fine levied on Advanced Computer Software Group Ltd by the Information Commissioner’s Office (ICO) brings the critical issue of data protection to the forefront once again. While the failings of the software provider are evident, this […]
Accountability in Data Protection Read More »
Will the ICO change its approach to the public sector following more high profile data breaches in some of the UK’s Police Forces? Yesterday Simon Bryne, Chief Constable of the Police Service of Northern Ireland (PSNI), resigned. Amongst a number of issues leading up to the resignation was the accidental publication of the details for […]
Will the ICO change its approach to the public sector? Read More »
It is noteworthy that, once again, the ICO continues with a soft touch, implementing a revised approach to the public sector, on this occasion issuing a reprimand to both Surrey and Sussex Police, suggesting that large fines could lead to reduced budgets. Aside from the fact that most businesses are currently operating in a financially […]
ICO continues soft touch for public sector Read More »
The UK General Data Protection Regulation (UK GDPR) is a comprehensive set of regulations that was created to protect the personal data of UK citizens. It applies to all organizations, both inside and outside the UK, that process or store the personal data of UK citizens, and is based on the EU General Data Protection […]
GDPR Employee Training: A Comprehensive Guide Read More »
