Legislation Articles

GDPR Chapter 5 – International Data Transfers GDPR recognises that personal data transferred outside the UK may not be subjected to the same legal standards. As such, GDPR Chapter 5 (GDPR Artic…

GDPR Article 32 on Information Security For most businesses, information security is the biggest risk associated with GDPR. However, GDPR provide very little guidance for organisations regar…

Controller-Processor Data Processing Agreements (DPA) If a company (a Data Controller) is outsourcing the processing of personal data to a third party (a Data Processor), GDPR states that there…

The following information is a full copy of the UK Data (Use and Access) Act 2025 (DUAA). The UK Data (Use and Access) Bill (DUAB) received Royal Assent on 19th June 2025. Data (Use and Acce…

The Cyber Security and Resilience Bill was announced in the Kings Speech, on 17th July 2024. The recently voted Labour government has suggested that this will keep personal data safer. The B…

The Digital Information and Smart Data Bill was announced in the Kings Speech, on 17th July 2024. The government has suggested that this will make better use of digital data. But …

What is GDPR Article 6 Lawfulness of processing? Under GDPR, each purpose of processing must be assigned a lawful basis. Consent is only one type of lawful basis, so you can chose other lawf…

What is GDPR Article 5 – Principles of Processing? GDPR provides several core principles (considerations / requirements) for processing personal data. GDPR Article 5 defines those processes …

What is GDPR Article 4 Definitions? GDPR Article 4 Definitions quite simply defines a number of the key terms that apply in the regulation. What does GDPR Article 4 Definitions actually say?…

What is GDPR Article 30 Records of Processing Activities (RoPA)? Under GDPR, organisations must maintain a Records of Processing Activities, if they “employ” 250 people of more, processes data …