your resources

There is always someone in the office who can take be persuaded to take on a new “hat”. “Money laundering officer”, “Fire Marshall” and “Health & Safety Officer” are common examples. This usually happens when the implications of non-compliance are deemed low risk and the appointment will probably work adequately until there is a real problem. This is different!

UK GDPR defines two types of organization, controller and processor. Here we provide further tips.

Here is a checklist of issues to bear in mind when data sharing.

GDPR includes a statutory requirement for a Data Protection Officer, or DPO, we outline the situations in this blog.

GDPR sets out the responsibilities of both the Data Protection Officer and the organisation which appoints the DPO.

Subject access is the right to access your own personal data held by any organization. This blog looks at how to recognise and manage incoming subject access requests.

Our top tips Give individuals advance warning of how personal data will be used - A CV should be kept for no more than six months - A speculative CV that is of interest could be kept for up to six months - Sharing CVs put the information in a central location

As a tech company looking for investors, setting up a UK subsidiary can provide a range of benefits, from gaining access to new markets and customers to attracting investment and talent. However, there are also potential pitfalls to consider.