EU Commission issues draft guidance on high risk AI systems
The EU Commission has released much awaited draft guidance on high risk AI systems under the EU AI Act. The Guidance is split into three
May 19, 2026
Alison Deighton
Progress on the Digital Omnibus on AI
Progress on the Digital Omnibus on AI is continuing at a pace with the European Parliament having agreed its position on the proposal. The European
April 21, 2026
ICO issues report on Agentic AI
The ICO’s latest tech futures report focuses on agentic AI. The ICO notes that agentic AI is evolving at pace and that it is essential
January 28, 2026
ICO updates guidance on data subject access requests
The ICO has updated its guidance on data subject access requests in line with the Data (Use and Access) Act 2025 to set out that
December 24, 2025
ICO provides update on cookie compliance action
On 4 December 2025, the ICO provided an update on its cookie compliance action, reporting that 95% of the UK’s top 1000 sites are now
December 4, 2025
CNIL issues EUR 1.5 million fine in relation to cookie rule violations
On 27 November 2025, the French data protection authority (the CNIL) fined the French subsidiary of American Express EUR 1.5 million. The CNIL found that
November 27, 2025
noyb pursues criminal action against Clearview AI
On 28 October 2025 noyb filed a criminal complaint against Clearview AI for persistent violations of EU data protection law. Clearview AI has been subject
October 30, 2025
EU Commission presses on with EU AI Act timetable despite industry concerns and introduces General Purpose AI code of practice
On 4 July 2025 the EU Commission confirmed that it is pressing ahead with the existing timetable for the entry into force of the EU
July 4, 2025
EDPB adopts final guidelines on transfers to third country authorities
On 5 June 2025 the EDPB adopted the final version of its guidelines on data transfers to third country authorities. These guidelines aim to help
June 8, 2025
ICO publishes strategy on AI and biometrics
On 5 June 2025 the ICO launched its AI and biometrics strategy. The ICO states that they are stepping up supervision in this area with
June 7, 2025
Data (Use and Access) Bill raises the stakes for marketing
Watch this webinar to learn how to stay compliant with the electronic marketing rules. We outline the key PECR terms and their relevance, consent and
March 12, 2025
Top tips for sharing personal data with another controller
When sharing personal data with another controller, there are a number of things you need to think about from a data protection compliance point of
November 26, 2024
AI Governance Building Blocks
Organisations recognise the need to put in place effective AI governance, but this is often easier said than done. The task often falls to legal
May 23, 2024
Do I need a data protection officer and the benefits of outsourcing the role
Many organisations are unsure as to whether they need a data protection officer and, if they do need one, aren’t sure whether they should appoint
May 14, 2024
Question of the month: are your security practices up to scratch?
There have been several recent ICO reprimands issued in relation to security failings which had some similar themes. In the case of GRS (Roadstone) Limited
December 14, 2023
Question of the month – why did a UK court overturn the ICO enforcement notice issued against Clearview AI Inc. relating to use of facial recognition?
The First-tier Tribunal of the UK General Regulatory Chamber has overturned an enforcement notice and a £7.5 million fine which was issued against Clearview AI
November 28, 2023
ICO guidance on employee monitoring
After a period of consultation, and in response to rapidly changing work practices following the Covid pandemic, the ICO has issued new guidance on monitoring
October 28, 2023
Question of the month – what happens if you don’t effectively respond to data subject rights requests?
In late July 2023 the Irish Data Protection Commission (Irish DPC) published the results of its inquiry into Airbnb Ireland’s (Airbnb) handling of a data
September 28, 2023
‘Likely to be accessed’ guidance
Providers of Information Society Services (which according to the ICO include most for-profit online services), even if they run an adult only service, must consider
August 28, 2023
ICO issues guidance for employers on responding to data subject access requests
In May this year, the ICO published new guidance for employers on responding to subject access requests (SARs). The new guidance is in the form
July 28, 2023
AI vs GDPR: the risks and challenges of Generative AI models from a data protection perspective
Generative AI has been a topic of increasing interest, we’ll explore how systems such as ChatGPT, impact data protection.
April 24, 2023
ICO direct marketing guidance
The ICO has created a new hub for direct marketing which has several pieces of guidance as well as FAQs and checklists to assist organisations with direct marketing.
March 30, 2023
Top 5 tips on disposing of personal data safely
Ensure you comply with appropriate technical and organisational security measures to protect personal data.
December 14, 2022
Resource Library
Data protection is a fluid terrain. Data protection legislation and the approach by regulators are constantly changing, so it is vital to stay up to date. In this resource library, you’ll find some expert insight and information to help you navigate a path of compliance.
All items are available to download as pdf files. To view a document, please ensure you have installed Adobe Acrobat Reader on your device.
Description
Do you want to hear from us?
Please complete the fields below to stay up-to-date with the latest HelloDPO news.
Our experience...
Speaks for itself through collaboration with leading global brands such as…
- Tech giants
- Health tech start-ups
- Forward-thinking financial institutions
- Global dating app
- One of the largest entertainment record labels globally
- Shopping meccas
- National broadcasters
- Professional services firms and regulators
0
+
Sector specialisms and in-depth experience
0
%
Client retention rate and long lasting relationships
0
s
Learners who complete our data protection training each year
Don't just take our word for it
“If you’re looking for trustworthy, pragmatic and diligent legal advisors, say Hello(to)DPO! The team has been a great support to Skyscanner on a broad range of privacy and data protection matters, whether advising at a compliance level or on more acute legal issues. You’ll enjoy considerate, timely and helpful advice, provided by professionals with whom it’s a delight to work.”
Gemma Witham
Director of Legal (Privacy), Group Privacy Officer, Sykscanner Limited
Don't just take our word for it
“We have been working with HelloDPO for several years now and I have always found them to be friendly, approachable and above all professional in their approach. I would have no hesitation in recommending them.”
Serena May
Director, Southern HR Ltd
Don't just take our word for it
“We have worked with Jenai, Alison and the HelloDPO team for over 5 years as our DPO and have found their advice and support invaluable. They are pragmatic and flexible in the advice they provide, and assist in making data protection compliance apply in a corporate environment. Working with them is like having additional members of our team, and the relationship has flourished over time.”
Craig Saunders
Head of International Privacy, Aetna Global Benefits (UK) Ltd
Don't just take our word for it
“The team (Jenai and Lisa) provided DPO services and compliance support to our business for over a year, during which they consistently delivered high quality advice and excellent client service. The demands of the hospitality industry are high and HelloDPO adapted to this quickly and seamlessly – they are responsive, knowledgeable, and pragmatic. They are also a pleasure to work with.”
Frasers Hospitality (UK) Ltd
Don't just take our word for it
“We have been working with HelloDPO for nearly a year. The team have been great to work with, highly professional and flexible. Most importantly, they have given clear advice and guidance in what is a very complex area. Well done and we look forward to continuing working with you!”
Ruth Hidalgo
Director, Chartered Accountants Worldwide
Don't just take our word for it
“The HelloDPO team have led us patiently through the intricacies of GDPR over the years, helping us to navigate a careful path to ensure understanding of the rules and therefore compliance with them. HelloDPO are a pleasure to work with and I’d have no hesitation in recommending them to others looking for good, commercial advice in this complex area.”
Sanjay Patel
Finance Director, Cadogan Group Limited
Don't just take our word for it
“We have recently engaged HelloDPO and the team, led by Jenai, has been responsive, practical and generally very helpful when dealing with our data protection queries. We look forward to what’s on track to becoming a great working relationship!”
Federica Cozzani
Senior Legal Counsel, Compre Group
Don't just take our word for it
“Jenai and Emma are amazing to deal with. They strike the right balance between understanding the business needs while doing it’s fiduciary duty to ensure we are on the right track from a legal, ethical and moral perspective. Working with HelloDPO’s guidance over the past 2 years has enabled X-Mode (now known as Outlogic) to be able to navigate complex and at times uncertain waters with GDPR in a strategic and ethical manner.”
Joshua Anton
CEO, Outlogic
Don't just take our word for it
“A great bespoke service, delivered flexibly by absolute experts in a friendly, collaborative and accessible way. I cannot recommend more highly!”
Clare Russell
Interim Head of Legal, Vue UK and Ireland
Don't just take our word for it
“HelloDPO have been brilliant at getting our data compliance into shape. We have come such a long way in our ways of working and they are always on hand to help when we have complicated or urgent issues – they have simply become part of the team.”
Josh Towb
Head of Business Transformation, Jigsaw
Don't just take our word for it
“The HelloDPO team have provided Channel 4 with a wide range of data protection advice over the years. Alison is always delightful to work with, and her advice is pragmatic and set within a commercial context, which is particularly helpful. HelloDPO runs regular DP Confessionals, which provide our team with a valuable wider industry view and a sense of issues which other organisations are struggling with, and the ways in which they are approaching them.”
Rebecca Miller
Channel 4
Let’s chat
Book a free 30 min discovery call with our expert team and we’ll advise how we can help.