public sector

Retail stockroom CCTV monitors beside a QR code on a clipboard, illustrating a shadow IT workaround that bypassed data protection sign-off

What the Met Police’s Auror Reprimand Really Teaches About Shadow IT

A LinkedIn Celebration, Six Months Before an Enforcement Notice In April, Auror’s co-founder and the Metropolitan Police’s official account posted on LinkedIn about a retail crime pilot going well. Officers in Lewisham and central London could review CCTV and incident reports submitted by retailers through a platform called Auror, and the positive outcome rate —

What the Met Police’s Auror Reprimand Really Teaches About Shadow IT Read More »

Empty chair and staff lanyard beside a hospital computer showing a patient record with an access alert, after NHS snooping suspension

NHS Snooping Crackdown: Suspension Is the Easy Part

Back in June I wrote about three hospital trusts where dozens of staff had looked at the records of patients who happened to be in the news: the Southport victims treated at Aintree, the Nottingham stabbing victims, and the three-year-old injured at a zoo near Huntingdon who was taken to Addenbrooke’s. What struck me most

NHS Snooping Crackdown: Suspension Is the Easy Part Read More »

A gloved hand on a computer mouse next to a keyboard, with a patient record displayed on a hospital computer screen in the background

The NHS doesn’t have a data security problem. It has a culture problem.

The NHS doesn’t have a data security problem. It has a culture problem. This week, Cambridge University Hospitals referred itself to the Information Commissioner’s Office after it emerged that around 40 members of staff had accessed the medical records of a three-year-old boy injured in a crocodile attack. The child was treated at Addenbrooke’s following

The NHS doesn’t have a data security problem. It has a culture problem. Read More »

Aerial view of a port at dusk with a network of connected transport and logistics icons overlaid, illustrating supply chain interdependency.

The cyber law your organisation probably doesn’t need to worry about — and why that might be exactly the problem

The cyber law your organisation probably doesn’t need to worry about — and why that might be exactly the problem The Cyber Security and Resilience Bill passed its third reading in the House of Commons on 16 June and arrived in the Lords the following day. If you’ve seen coverage of it, you could be

The cyber law your organisation probably doesn’t need to worry about — and why that might be exactly the problem Read More »

Illustration of data breach with lock icon and spreadsheet background.

The Afghan Data Breach – A Wake-Up Call for Public Sector Data Governance

️ The Afghan Data Breach – A Wake-Up Call for Public Sector Data Governance In July 2025, the veil of secrecy was finally lifted on one of the most catastrophic data breaches in UK government history. A spreadsheet leaked by a Ministry of Defence (MoD) official exposed the personal details of nearly 19,000 Afghan nationals […]

The Afghan Data Breach – A Wake-Up Call for Public Sector Data Governance Read More »

Person holding tablet with data protection lock icon, office desk scene.

Will the ICO change its approach to the public sector?

Will the ICO change its approach to the public sector following more high profile data breaches in some of the UK’s Police Forces? Yesterday Simon Bryne, Chief Constable of the Police Service of Northern Ireland (PSNI), resigned.  Amongst a number of issues leading up to the resignation was the accidental publication of the details for […]

Will the ICO change its approach to the public sector? Read More »