If you run a business, you have probably seen the terms data protection and data privacy used almost interchangeably. They are closely connected, but they do not mean exactly the same thing. For a UK business, the simplest way to understand it is this: data privacy is about how personal data should be used, while…
Is an email address considered personal data? Yes, in most cases, an email address is considered personal data under UK GDPR. If an email address can identify a person directly or indirectly, it falls within the definition of personal data. For most businesses, that means email addresses are part of their GDPR responsibilities from the…
Data breaches are becoming more common and severe If you run a business today, the chances of encountering a data breach are higher than they used to be. Not necessarily because your business is doing something wrong, but because more data is being collected, stored, and shared across more systems than ever before. The important…
How to incorporate a privacy by design approach when building a business If you are building a business and handling customer or user data, privacy by design simply means thinking about data protection before problems arise, not after. It is about setting things up properly from the start so you are not fixing gaps later….
What actually counts as personal data under GDPR? If you are running a business and handling any kind of customer, client, or website information, you are already dealing with personal data. The question is not whether you collect it, but whether you recognise it. Under UK GDPR, personal data is any information that can identify…
I just launched a website, do I need a privacy policy now? Yes, in most cases, you do. If your website collects any form of personal data, even something as simple as a contact form or basic analytics, you are expected to have a privacy policy in place. This applies from the moment your site…
If you’re asking yourself is GDPR needed for your small business, then you’re really asking something simpler. Does this apply to me, or is it something I can ignore? In most cases, the answer is straightforward. If your business handles personal data in any form, GDPR applies. That includes far more businesses than people expect….