Insights

Writing on data protection in practice

Shorter, practical notes rather than long legal explainers — aimed at people who need to make a decision, not pass an exam.

• 2 September 2026

  Five questions to ask before signing a processor's DPA

  Article 28 sets out what a Data Processing Agreement must contain. Here's what to actually check before your legal team signs one.

  • Article 28
  • DPA review
  • vendor management

• 4 August 2026

  Do you actually need to appoint a DPO?

  A quick, honest walk-through of when Article 37 UK GDPR makes a Data Protection Officer mandatory — and when it's a good idea but not a legal requirement.

  • UK GDPR
  • DPO