Ofcom 'deadlock' period for ADR reduced to six weeks, for complaints raised on and after 8 April 2026
In January 2025, Ofcom consulted on changes to the telecoms Alternative Dispute Resolution (ADR) rules.
Latest Posts
What number of UK users constitutes a 'significant number' for the purposes of the Online Safety Act 2023?
Ofcom seems to regard a service as having a significant number of UK users if it has more than 855 monthly active users and fewer than 50,000 monthly active users, but exactly where the boundary is remains unclear.
The OSA, sex blogs, erotica, and Ofcom's approach to enforcement
2.5 years ago, I wrote about the Online Safety Act 2023's (anti-)pornographic content provisions.
An overview of the UK's updated laws on storing information in someone's terminal equipment, and accessing information stored in someone's terminal equipment
The UK's law on storing information on someone's terminal equipment, and accessing information stored in someone's terminal equipment, has changed.
Russmedia: a court case imposing data protection obligations which many website operators may struggle to meet?
In December 2025, the Grand Chamber of the Court of Justice of the European Union released its decision in the case of Russmedia.
Internet services sanctions (January 2026)
There are currently 37 Internet services sanctions in place.
decoded.legal is 10 years old!
I can't believe that I get to write this blogpost.
Happy holidays 2025
(Art by the wonderful Jennie Gyllblad.)
A proposed legislative amendment to attempt to ban under 16s in the UK from common messaging services, sharing family photos, using Wikipedia, and doing much else online, by imposing age assurance on everyone
Updated 2026-01-19: the amendment has been amended, to give the Secretary of State some discretion over which services are in scope:
A proposed legislative amendment to attempt to compel VPN services providers to prevent anyone under 18 in the UK from using their VPNs
The Children’s Wellbeing and Schools Bill is going through Parliament.
Deemed compliance with the UK IoT security requirement to have a relevant connectable product accompanied by a statement of compliance
I have written before about the UK's new (well, new-ish) regime for connected products.
Would you like a decoded.legal holiday card? (2025 edition)
Update: I've closed the form for this year!
Preparing for the burst of the AI bubble (or just good business planning)
My feeling - and, of course, I could be wrong - is that we are in an "AI" bubble.
Announcing decoded.legal, gopher-edition
Always keen to stay at the forefront of modern technology, you can now access much of the information on the decoded.legal website through the gopher protocol.
The UK/USA Data Access Agreement, and the Data (Use and Access) Act 2025 partial commencement
Sorry for the world's least interesting blog post.
ISPs and telcos: check your pre-contractual information and contract summaries
Ofcom's recent enforcement action against BT, and BT's subsequent remedial action is a timely reminder for UK ISPs and telcos to check that their approach to co...
The Data Use and Access Act 2025: personal data breach notification timescales, and a lawful basis for UK/USA Data Access Agreement requests
The UK's new Data Use and Access Act 2025 received Royal Assent on 19 June 2025.
A proposed new power to allow police (and others) to extract online information from devices following seizure
I've written before about some interesting communications-related powers in the UK's Crime and Policing bill, including provisions relating to SIM farms, and me...
Notes from the University of Sussex's 'The Future of the Online Safety Act 2023'
I was fortunate to spend Friday at the University of Sussex, discussing and hearing about the future of the Online Safety Act 2023.
Free sources of English and other laws as alternatives to AI
Almost every week, one reads stories of lawyers citing cases and laws which do not exist, thanks to AI (intentional or otherwise) making things up which went un...
Ofcom bans leasing of Global Titles and imposes broader requirements on non-leasing use of GTs
This is a niche one even by my usual standards.
The UK's proposed measures for court orders to suspend IP addresses and domain names
A while back, I wrote about the Crime and Policing bill, and powers in relation to SIM farms.
Updated handling of errors and personal data breaches under the Investigatory Powers Act 2016
Introduction
It is time to make the Online Safety Act 2023 fit for purpose
I have spent a lot of my free time recently trying to deal with unnecessary, undesirable consequences of the UK's Online Safety Act 2023, dealing with stressed,...
SIM farms, GSM gateways, COMUGs and the Crime and Policing Bill
Edit: amended to reference the new legislative vehicle, the Crime and Policing Bill, rather than Criminal Justice Bill from which it originated.
Some UK Internet Services Sanctions that I only just spotted
The UK government has announced new sanctions today, targeting ZSERVERS in the context of cybercrime.
UK data protection fees to increase by 30%
Back in September 2024, I blogged about the consultation on the UK government's proposal to increase data protection fees.
Reminder: new Ofcom rules on inflation-linked price rises in telecoms/connectivity agreements start on 17 January
I wrote last year about Ofcom's amendment to GC C1, to prohibit inflation-linked price (e.g. RPI/CPI, or RPI/CPI + a percentage) rises for new contracts, for co...
Wishing you happy holidays
Well, that's it for 2024 from decoded.legal.
Would you like a decoded.legal Christmas card? (2024 edition)
Update: I've closed the form for this year :)
Helping lawyers understand the basics of core tech, 2024 edition (with slides)
On Wednesday, I ran a day-long series of presentations with my friend Simon, for the Society for Computers and Law, entitled "Tech Fundamentals For Lawyers".
New regulations set out circumstances in which the Secretary of State can intervene in the running of internet domain registries for UK-related domains
Background
What the Investigatory Powers (Amendment) Act 2024 means for UK telecommunications operators
Much - indeed, most - of the UK's Investigatory Powers (Amendment) Act 2024 commences today (14 October 2024).
ND 1437: the 2014 UK call tracing standard that I hadn't heard about
The other day, I was asked to look at a request from the ICO to a UK communications provider to trace a call.
Some stats on decoded.legal's environmental impact
decoded.legal has published an environmental policy for quite some time now.
Running a law firm on Free software (2024 edition)
Two years ago, I wrote about running decoded.legal - an English law firm - on Free software.
The UK's data protection regulator has taken its (tentative) first step to enforce against non-compliant cookie practices. Sort of.
The UK's Information Commissioner's Office has, for what I think is the first time ever, taken enforcement action against an organisation for cookie-related pra...
UK government proposes to increase data protection fees
Did you know about this? I didn't.
A first look at the ICO's new (beta) tool for creating UK GDPR privacy notices
The UK's Information Commissioner's Office has launched a beta of a new free tool to create privacy notices.
Web analytics tools using JavaScript: 'cookie consent' and the UK
This blogpost started life when I was asked to advise on the use of a popular open source web analytics tool.
Ofcom amends GC C1 to prohibit inflation-linked price rises for new contracts from 17 January 2025
As expected, Ofcom has issued a new statement, prohibiting inflation-linked price rises in contracts for communications services.
The UK/USA data access agreement, subpoenas from the FBI, and a brief update for UK telecoms operators
Roughly two years ago - wow, how time flies - I wrote a blogpost about what UK telecoms operators need to know about the UK/USA Data Access Agreement and the US...
The UK's draft Code of Practice for Software Vendors
The UK government has published a consultation on its draft Code of Practice for Software Vendors.
The Upper Tribunal's decision in ICO v Experian but mostly griping about a PDF file
Yesterday, the Upper Tribunal released its decision on the Information Commissioner's appeal against the First Tier Tribunal's decision about the Information Co...
New rules for people making, importing, or distributing Internet-connected or connectable products (Part 3)
I've written before about the UK's Product Security and Telecommunications Infrastructure Act 2022, and the associated The Product Security and Telecommunicatio...
New rules for people making, importing, or distributing Internet-connected or connectable products (Part 2)
Way back in October 2023, I wrote an introduction to the Product Security and Telecommunications Infrastructure Act 2022, and the associated The Product Securit...
Is DocuSign using your documents to train its AI?
According to DocuSign's website, DocuSign - a company most commonly used for helping people sign contracts digitally - is or may be (its information is not whol...
Ofcom's draft guidance on the Online Safety Act's porn provisions
Ofcom has published draft guidance, and a consultation, on Part 5 Online Safety Act 2023 - this is the OSA's porn (or, perhaps, anti-porn) provisions.
An introduction to 'ethical licensing'
Technology, and programming, has always been political. I've very little time for discussions which try to separate "tech" and "politics".
Being an Internet lawyer
A friend with a child at a local primary school asked if I would join their careers afternoon, to talk about being an Internet lawyer.
Dealing with 'AI'-generated subject access requests
Over the past few months, I've seen an increase in the number of subject access requests received by data controllers, which appear to have been generated by, o...
Cookies: the letter that the ICO sent to 'top websites'
Just before Christmas, I wrote a short post about how the ICO appears to be finally taking some action in respect of cookies, in the sense that the ICO has writ...
Happy Christmas!
Subtext: we are now on holiday until the new year.
DPDI Bill: a new amendment supporting the UK/USA Data Access Agreement
Back in July 2022, I wrote "What UK telecoms operators need to know about the UK/USA Data Access Agreement and the US CLOUD Act".
Online Safety Act 2023: the UK's (anti-)pornographic content provisions
This is a very quick overview of Part 5 of the Online Safety Act 2023, which deals with certain pornographic content.
Cookies: a brief reminder, now that the ICO is finally taking some action
It looks like the ICO has finally taken some enforcement action against the operators of websites which fail to comply with the UK's "cookie law".
Would you like a decoded.legal Christmas card?
Update: we've run out of cards, so we've closed the form for this year!
More pressure on UK ISPs and telcos: a proposal to compel PECS providers to notify the ICO of suspected unlawful direct marketing
Frankly, I'm not as close to the Data Protection and Digital Information Bill as I ideally would be. There's a lot going on at the moment...
Online Privacy: slides from a recent lecture
I was lucky enough to be invited to give a talk about "Online Privacy", from an English law point of view, to a mix of undergraduate and postgraduate students r...
Ofcom's >1,500 page consultation on the Online Safety Act 2023, and why small companies don't have a chance
I know that I've got quite a downer on the Online Safety Act 2023. I've followed it closely and, each time I read it, I find something else to dislike about it.
My initial analysis of The Investigatory Powers (Amendment) Bill
I have read through the 54 pages of the Investigatory Powers (Amendment) Bill. I've also had the benefit of reading the background notes in the King's Speech, a...
The Investigatory Powers (Amendment) Bill has arrived
As expected, The Investigatory Powers (Amendment) Bill has been published.
Coming soon: The Investigatory Powers (Amendment) Bill
The government has announced that the Investigatory Powers Act 2016 is to be amended, via a not-yet-published The Investigatory Powers (Amendment) Bill.
Ofcom's new guidance on open Internet / net neutrality, including zero rating and traffic management
Ofcom has published an updated statement on net neutrality / open Internet, with accompanying annexes.
Free software developers and fiduciary obligations: is an English Bitcoin a cause for concern?
The UK's updated voluntary code of practice for App Stores, whatever those are...
The UK government has updated its Code of practice for app store operators and app developers.
New rules for people making, importing, or distributing Internet-connected or connectable products (Part 1)
This blogpost is an introduction to the Product Security and Telecommunications Infrastructure Act 2022, and the associated The Product Security and Telecommuni...
ICO guidance on workplace monitoring
The ICO has published new guidance on workplace monitoring.
Going darker...
If you're looking at this blogpost, or our website, or one of our presentations ([^presentations]), thinking "why is it darker?", here's the explanation.
UK GDPR recognises the USA as adequate for some (many?) transfers of personal data
From 12th October 2023, the USA is "adequate" for the purposes of the UK GDPR for any transfer which
But lawyers know nothing about tech...
Pretty much every day, I read something to the effect of "lawyers are clueless when it comes to tech lol".
Consultation on changes to the Investigatory Powers Act 2016's notices regime
The government has launched a consultation on proposed changes to the notices regime under the Investigatory Powers Act 2016, following the statutory review, an...
Ofcoms changes to its guidance on incident reporting thresholds for the digital infrastructure subsector under The Network and Information Systems Regulations
On 31st May 2023, Ofcom published a statement and new guidance, setting out changes to the guidance on
Tech law predictions for 2073
The wonderful Society for Computers and Law is 50 this year, and it is producing a book of predictions of what tech law will look like in 50 years' time.
Ofcom investigates broadband providers for failing to implement simpler switching
First, my apologies: I haven't blogged here for a while. Work has been busy and, well, I've spent far too much time blogging about Linux-related stuff on my per...
Changes to the Legal Ombudsman's complaints procedure
The Legal Ombudsman is changing its timescales for considering complaints.
Quick, easy and reliable switching: changes coming to Ofcom's General Conditions on 3 April 2023
If you run a telco or ISP - fixed or mobile - make sure you're aware of the imminent changes to Ofcom's General Conditions, around switching (customers moving f...
There is no copyright in a file format ... unless there is
There's a lot of litigation around Bitcoin at the moment, on a number of different fronts. The litigation around the purported fiduciary duty of developers is i...
The ICO and breach reporting under Reg 5A PECR: take two
A couple of weeks ago, the ICO published a statement saying that it had "decided to stop enforcing personal data breach reports made under Regulation 5A."
The ICO, breach reporting under Reg 5A PECR, and muddy (muddier?) waters
Update: the ICO has simplified its statement (full text of which is at the end of this post), which now reads "The page you requested was removed.".
Can ISPs, telcos, and tech companies lobby?
Want a Christmas card?
Each year, we produce a geeky joke-y tech-y/legal-y Christmas card.
Notes on operating fediverse services (Mastodon, Pleroma etc) from an English law point of view
In this monologue post, I set out an introductory analysis / overview of the English laws which are likely to apply to people in England who operate decentralis...
Running a law firm on Linux - a year or so in
About a year ago, I wrote about my experience of running a law firm on Linux, three months in.
Proposed new law to ban (some?) computer code in UK company names
A new bill, the Economic Crime and Corporate Transparency Bill, proposes to prohibit the inclusion of "computer code" in UK company names.
Jury service (19 - 30 September) and what to expect while Im away
Law and the metaverse: new(ish) tech, existing principles?
A friend asked me, a while back, if I would write a few thoughts about law and "the metaverse".
What UK telecoms operators need to know about the UK/USA Data Access Agreement and the US CLOUD Act
The Home Office announced on 21 July 2022. that UK/USA Data Access Agreement, which sits under the USA's CLOUD Act, will come into force on October 3rd 2022.
The (limited) impact of the High Court's investigatory powers Liberty ruling on telecommunications operators
The High Court ruled last week on the latest challenge against parts of the Investigatory Powers Act 2016.
Emergency video relay and the 999 BSL service: an update for Internet access providers and telcos
![The "999 BSL" "download app, save lives" badge][1]
Router freedom: the (qualified) right for users to choose their own terminal equipment
![Photo of a modem on top of a FireBrick FB2900 router][1]
Ofcom General Condition changes coming into effect 17 June 2022
![Screenshot of the top of Ofcom's webpage for the General Conditions of Entitlement][1]
ISPs, telcos, and responding to the ICO's third party information notices
![Screenshot of the header of a third party information notice][1]
Presentation: IP addresses and electronic evidence
A friend asked if I could fill a slot at a conference for judges across Asia, on electronic evidence.
Internet Service Sanctions: changes to the UK Sanctions List, and an open letter from Ofcom
On Friday, I wrote about the new sanction affecting Internet access providers in the UK, The Russia (Sanctions) (EU Exit) (Amendment) (No. 9) Regulations 2022.
A new sanction affecting Internet access providers in the UK
![Screenshot of the sanctions text, linked below][1]
Selling to consumers online? Check your final order button text is compliant, or risk a voidable contract
![Screenshot of an html button saying "Order with obligation to pay" in black text on grey background][1]
The UK's International Data Transfer Agreement: what it is and what it means for you
![Screenshot of the top of the ICO's new International Data Transfer Agreement document][1]
Neil's YouGotThis.io conference talk on Legal Tips To Build Your Business Safely
![Screenshot of me giving a talk to YouGotThis.io, showing one of my tips on contract law][1]
Publishing your source code for others to use? Specify a licence, please!
![Screenshot of Github's licence selector tool][1]
Third party requests to exercise data subject rights: quick notes for controllers
An increasing number of third parties are offering services - typically, by way of a web site or an app - to facilitate data subjects in exercising their rights...
The UK's International Data Transfer Agreement: is this the ICO's worst document yet?
![Screenshot of the top of the ICO's new International Data Transfer Agreement document][1]
Events, exclusion lists, and the UK GDPR
![screenshot of a document, entitled "banned from our events"][1]
Google Fonts, an IP address, and the GDPR: must I now self-host all my web page resources?
Five points to note in the EDPB's draft guidelines on the right of access under the GDPR
The European Data Protection Board has published draft guidelines on the right of access, for consultation.
Ofcoms General Conditions of Entitlement: an update, with important changes
In December 2021, Ofcom published an updated (unofficial) consolidated version of the General Conditions of Entitlement.
Telecommunications Security Act 2021: a quick update
Don't let cold calling get you into hot water
![Photo of a phone][1]
Internet, telecoms, and tech law predictions for 2022
Things I predict will happen in 2022:
Wishing you a merry Christmas and a happy new year
![Mock-up of a phone, with a photo of father Christmas at the top with a red line through it, like a blocked profile photo. Text reads "Your account has been su...
The limits of Norwich Pharmacal orders: when a cellular operator is a witness, not a facilitator of wrongdoing
The Court of Appeal has ruled on an interesting point of law, to do with a UK mobile operator and Norwich Pharmacal orders.
Running a law firm on Linux
![Photo of a light wood desk, with a keyboard and mouse in the foreground, and a computer and two monitors showing the Debian logo, with a circular LED light ab...
decoded.legal and the seven OSI layers for Internet, telecoms, and tech legal advice
Blake E Reid, an excellent US tech/telecoms law professor, tweeted:
Give them (GNU GP)ell: a new approach to claims for non-compliance with Free software licences?
Ring doorbells, audio and video monitoring equipment, data protection, and suspiciously long raincoats
![A bad photo of a Fanvil doorbell mounted on a red brick wall, with an ethernet cable going up the left hand side][1]
How to handle data subject access requests under the UK GDPR
![Photo of a handwritten letter, in blank ink, saying "Dear Example Co, Please provide me with a copy of the personal data you are processing about me"][1]
Dealing with demands for communications data under the Investigatory Powers Act 2016
![Screenshot of the top of the Investigatory Power][1]
How the draft Online Safety Bill would affect the development of Free / open source software
![Screenshot of @revk's source code for voip-answer.c, licensed under GNU GPL 3.0][1]
Personal data breach reporting for service outages (such as when your CDN is down)
![service temporarily unavailable screenshot][1]
Online ID / age verification: the death of online search, and non-browser web access?
Neil note: I've published this with the hope that others familiar with what this could entail will give feedback. As such, what you read now might not be the fi...
No, the European Commission is not compelling online service providers to monitor communications. Well, not yet.
![screenshot of header of regulation text][1]
All reasonable endeavours v best endeavours: a 2021 case update
![screenshot of the word "reasonable"][1]
Github Copilot: initial thoughts from an English law perspective
The UK is adequate (for data protection purposes)
The new standard contract clauses: what you need to know right now
![Screenshot of title of new clauses][1]
Must all UK Internet access providers keep records of which websites I visit?
The EU's terrorist content regulation and what it means for UK hosting providers
![Screenshot of front page of regulation][1]
Understanding the Data Protection Acts national security and defence exemption
[^1]
Five things to take from the European Parliaments response to the Commission on the GDPR
![Screenshot of top of report][1]
Drafting clearer contracts, and why you should care
![Front cover of A Manual of Style for Contract Drafting][1]
Unpicking the making children as safe as they are offline fallacy
![Children's play area sign][1]
Online harms and the role of intermediaries as enforcers
[^1]
Online harms: an extra-territorial over-reach?
[^1]
The law firm and the Streisand Effect
[^1]
EncroChat, targeted equipment interference, and the Court of Appeal
![enter image description here][1]
Telecoms Security Bill: draft specific obligations for ISPs and telcos
![enter image description here][1]
The territorial scope of the GDPR, as applied by the High Court
This week saw what is, I believe, the first English judgment dealing with the territorial scope of the GDPR.
Alternatives to using genuine phone numbers, IP addresses, domain names and email addresses in your training and documentation
If you are preparing training or guidance, showcasing your product or service, or giving code samples, you'll often want example data, such as a phone number, e...
Four legal tips to keep your business running smoothly in 2021
[^1]
decoded.legal is five years old today!
[^1]
ICO: data sharing code of practice
The ICO has released its Code of Practice on Data Sharing, under the GDPR / Data Protection Act 2018.
The UK/EU Trade and Cooperation Agreement and data protection: what you should do now
I know it's Christmas. And I know I'm supposed to be on holiday. But I also know that some of you have been planning for, or even just worrying about, what you ...
Merry Christmas and a happy new year
It's that time of year when most law firms will run some kind of "Merry Christmas — here's a year in review" blogpost, which is basically a "hey, look at ever...
What could the Telecommunications (Security) Bill mean for ISPs and telcos?
The first draft of the Telecommunications (Security) Bill was published last week.
Unpicking the licensing situation for implementing 'This is Lenny' on your phone system
If you're familiar with VoIP, and asterisk in particular — and, if you're reading this, there's a reasonable chance that you are — you'll probably be famil...
Aint no party like a virtual Christmas party
Over the weekend, some enterprising spammer bothered my inbox with a message to say that they were offering "virtual Christmas parties", and that perhaps decode...
Does displaying Article 61 of Magna Carta exempt me from compliance with Covid rules in England?
Short answer
Doing email marketing business to business in a compliant manner
So easy, yet so many people get it wrong.
My website has been hacked: a legal checklist
A list of things to do if your website has been hacked.
Privacy policy or privacy notice?
Occasionally I get asked "should I have a privacy policy or a privacy notice?".
Goodwill hunting
The Court of Appeal has published its decision on the meaning of "goodwill" in a contract.
Broadband installation charges: do I have to refund a consumer for these?
Do you provide Internet access services to consumers? Are you worried about consumers asking you to provide the service before the end of the statutory cancella...
Audio porn and plain English consensual contracts
The legal Twitterverse has been alive this week with discussions of a tweet by Kanye West about the value of plain English contract drafting.
The end of zero rating?
(Cyber)Flash A-Ah!
CW/TW: unsolicited sexual images
Combatting child sexual abuse imagery: a proposed exemption to the EU's ePrivacy rules
The European Commission has published a proposal for a regulation which, if passed, would provide a time-limited and very constrained exemption to the rules set...
Targeted social media ads: new guidance on doing it lawfully
Does size matter? And how does a communications provider know how big you are?
There are just a few more days to run on Ofcom's consulation on revised proposals for definitions of a few key terms in the UK's implementation of the European ...
SafetyTech: what it is, and key legal issues
I've seen the term "SafetyTech" crop up quite a bit lately, mostly due to a recent report for the UK government (PDF) (and also an HTML version for those who pr...
Sales to consumers through online platforms: new rules to protect businesses
I was reading over the weekend about a freelancer, who was making a living selling videos and other content through an online platform.
Your record of processing activity: what it is, and why having one will make your life so much easier
I've written before about the key steps you need to take to get your business in order from a GDPR point of view.
Network operators: reporting obligations for reductions in availability
[^1]
Four things you need to know about the Age Appropriate Design Code
Cyber-attacks and sanctions
Demystifying The Dark Net (free video)
Urgent: changes to communications data acquisition in the UK
What is a data protection impact assessment, and when might I need to do one?
The EDPB's opinion on the UK/US data access agreement under the CLOUD Act
Some of you may be aware that, in addition to the work I do more generally for telecoms providers and ISPs, I have a particular interest in investigatory powers...
BEREC's updated net neutrality guidance
Bodged redactions, copy-and-paste, and criminal offences
I saw some comments on Twitter a week or so ago about [a case before the High Court][1].
Draft French law on porn site age verification and site blocking
You might recall that the Digital Economy Act 2017 contains measures which, if brought into effect, would prohibit porn sites from making content available to p...
How to spy on my wife’s phone: an English law perspective on an article about stalkerware
CW/TW: domestic abuse, and controlling behaviour
Cybersecurity and the Internet of Things
Yes, I know that, with everything going on in the world, this is hardly a top priority right now. But a report on [The Register][1] caught my eye this week, and...
gov.uk guidance on contracts: don't be a dick
The UK government has published some guidance, "Guidance on responsible contractual behaviour in the performance and enforcement of contracts impacted by the Co...
Online interface orders: a new injunction against service providers
Updated 19 May 2020: added a section on DNS blocking
ISPs, outages, and (automatic?) compensation
This is probably one of the geekier posts on the blog...
I can't meet my obligations because of coronavirus
Yes, well, it was about time I wrote about coronavirus, I guess.
Privacy notices in three simple steps
What is a privacy notice?
Onion services, the dark net, and the law
Selling online to consumers: the right to cancel
If you are a business selling goods, services, or digital content (music, films, software, ebooks and information, and so on) online to consumers in the UK, you...
Late payment: small businesses, solos, and freelancers
Is cryptocurrency property?
Yes
Do I need to worry about the new Californian privacy law?
Perhaps, perhaps not
Brexit: a data protection checklist for UK controllers
A look at some of the Brexit-related changes, and how to handle them
GDPR: it's not too late
Some tips of implementing data protection requirements effectively
Book recommendations for 2020, and my favourites from 2019
Plenty of reading ideas
Time to change your personal data diet?
A look at data protection retention periods, and collecting only what is needed
Have you paid your data protection fee?
A look at the Information Commissioner's Office's latest letter-writing campaign
ICO consultation on the draft right of access guidance
It closes on 12th February 2020