ICO public sector trial at an end
Claire Saunders
July 22, 2024
The ICO has confirmed the trial period in which the ICO explored using a range of regulatory tools (as well
Previous slide
Next slide
ICO publishes final version of enterprise data strategy
Claire Saunders
July 22, 2024
On 13 June 2024 the ICO issued its final enterprise data strategy. The strategy states that the ICO wants to
ICO dealing with a backlog of fines/reprimands post-election
Claire Saunders
July 22, 2024
Having observed the pre-election “period of sensitivity” rules, the ICO has warned that it will be busier than usual with
ICO concludes public consultation on data subject rights in relation to AI and UK government launches public consultation on AI cyber security
Claire Saunders
June 26, 2024
The ICO has concluded the fourth call for evidence in relation to AI and individuals’ rights. The ICO has set
ICO reprimands Clyde Valley Housing Association
Alison Deighton
June 26, 2024
Earlier this year, the ICO issued a reprimand against Clyde Valley Housing Association (the Association) for failing to keep its
ICO and Privacy Commissioner of Canada announce investigation into 23andMe data breach
Claire Saunders
June 26, 2024
On 10 June 2024, the ICO announced that together with the Office of the Privacy Commissioner of Canada they have
ICO and Ofcom issue joint statement on regulation of online services
Claire Saunders
May 28, 2024
On 1 May 2024 the ICO and Ofcom released a joint statement in relation to online safety and data protection.
Transparency in health and social care
Claire Saunders
May 28, 2024
On 15 April 2024 the ICO published guidance to improve transparency in health and social care. The guidance looks at
ICO’s strategic approach to AI
Claire Saunders
May 28, 2024
Last month the ICO released its strategic approach to AI. The report covers: The opportunities and risks of AI The
ICO report on the prevalence of data breaches
Claire Saunders
May 28, 2024
The ICO has released a report on Q4 2023 data breach trends. In terms of overall numbers, there was an
ICO strategy on the Children’s code
Claire Saunders
May 23, 2024
The ICO has released a statement in relation to its strategy on the Children’s code. The statement looks at what
ICO launches the third chapter of its AI consultation series
Claire Saunders
April 12, 2024
On 12 April 2024 the ICO launched the third chapter of its AI consultation, this time in relation to the
“Pay or consent” models under scrutiny
Claire Saunders
March 28, 2024
Pay or consent models are causing a stir both in the UK and the EU. The ICO has launched a
ICO issues guidance on data protection in content moderation
Claire Saunders
March 28, 2024
The ICO has produced some detailed guidance on data protection in content moderation. The guidance doesn’t place additional obligations on
South Tees NHS Trust enforcement
Claire Saunders
March 28, 2024
The ICO has issued a reprimand to South Tees Hospital NHS Trust in relation to failures to appropriately deal with
GDPR Jargon Buster
Alison Deighton
March 1, 2024
If you need help navigating your way through technical data protection terms, look no further. We have created a list
ICO issues guidance on information sharing in mental health emergencies at work
Jenai Nissim
March 1, 2024
On 1 March 2024, the ICO published guidance on sharing information in mental health emergencies at work. The guidance aims
ICO enforcement in relation to direct marketing
Claire Saunders
February 28, 2024
It is worth noting that the ICO’s enforcement action in relation to direct marketing continues unabated, making up seemingly the
ICO legal services certification
Claire Saunders
February 13, 2024
On 13 February the ICO approved the Legal Services Operational Privacy Certification Scheme (LOCS) which is designed to “assist legal
ICO statement on cookie compliance
Claire Saunders
February 12, 2024
The ICO has advised that it has had a positive response to the letters it issued to 53 of the
ICO outlines measures app developers can take to protect user privacy
Claire Saunders
February 12, 2024
The ICO has issued a blog post with practical tips for app developers on how to comply with their data
ICO issues Data Protection and Journalism code of practice
Claire Saunders
February 12, 2024
The Data Protection and Journalism code is a statutory code of practice under the Data Protection Act 2018 (DPA 2018).
ICO publishes updated opinion on age assurance for the Children’s code
Claire Saunders
February 12, 2024
The ICO has published an updated opinion on age assurance for the Children’s code to reflect updated practices. The updated
ICO publishes guidance on UK BCR addendum
Claire Saunders
January 28, 2024
The ICO has now released its UK addendum to the EU BCRs with accompanying guidance. The guidance walks through the
Parliamentarians’ letter to the ICO in relation to facial recognition technology
Claire Saunders
January 28, 2024
A cross-party group of nearly 30 parliamentarians have written to the ICO to voice their concerns about the expansion of
ICO response to the Data Protection and Digital Information Bill
Claire Saunders
January 28, 2024
The ICO has responded to the updated Data Protection and Digital Information Bill (the Bill), in particular, the Government’s late-stage
ICO seeks views on two new pieces of guidance for employers
Jenai Nissim
December 14, 2023
The ICO has published two new pieces of draft guidance for consultation. The guidance relates to: Keeping employment records –
ICO seeking to appeal Clearview decision
Alison Deighton
December 14, 2023
The ICO have, unsurprisingly, applied for permission to appeal the decision by the First Tier Tribunal (Information Rights) reported in
Question of the month: are your security practices up to scratch?
Alison Deighton
December 14, 2023
There have been several recent ICO reprimands issued in relation to security failings which had some similar themes. In the
ICO guidance on Transfer Risk Assessments for transfers to the US
Claire Saunders
December 14, 2023
The ICO has amended its guidance on Transfer Risk Assessments to acknowledge that it is reasonable and proportionate to rely
ICO issues guidance to retailers on processing personal data to tackle shoplifting
Ian Pemberton
November 28, 2023
The ICO has released guidance to retailers on processing personal data to tackle shoplifting. This guidance has been issued following
ICO guidance on managing workers’ health data
Ian Pemberton
November 28, 2023
The ICO has issued guidance on managing workers’ health data in accordance with data protection law. The guidance is divided
ICO issues draft guidance on fining
Jenai Nissim
November 28, 2023
The ICO has issued draft guidance on fining for consultation. The guidance explains: the legal framework that gives the Information
ICO Snapchat enforcement
Claire Saunders
November 23, 2023
The ICO has issued a preliminary enforcement notice against Snap Inc and Snap Group (together Snap) in relation to
New UK addendum for EU BCRs
Alison Deighton
October 28, 2023
The ICO will be launching its new approach to UK BCRs this month. The ICO will be issuing a new
ICO issues advisory notice for public authorities to protect personal data
Alison Deighton
October 28, 2023
The ICO has warned public authorities that they should not be sharing original source spreadsheets in response to Freedom of
ICO guidance on sharing information to safeguard children
Alison Deighton
October 28, 2023
The ICO has issued guidance relating to sharing information to protect children in an effort to reassure people that data
Top tip – time to check your cookie compliance
Claire Saunders
October 28, 2023
The ICO has reiterated its position in relation to organisations who do not allow individuals to reject all cookies on
ICO guidance on employee monitoring
Jane Toiger
October 28, 2023
After a period of consultation, and in response to rapidly changing work practices following the Covid pandemic, the ICO has
ICO announces focus on smart devices and period and fertility tracking apps
Jane Toiger
September 28, 2023
The ICO have stated their interest in two topics this month. In response to an article published by Which on
ICO consults on biometric guidance
Jane Toiger
September 28, 2023
The ICO has issued “phase 1” draft guidance on biometric data for public consultation. The guidance covers: what biometric data
Joint report on measurement of age assurance technology commissioned by ICO and Ofcom
Claire Saunders
September 28, 2023
The ICO and Ofcom have published a joint report (which they commissioned) into measuring the accuracy levels achievable by different
ICO and other regulators issue joint statement on data scraping
Jenai Nissim
September 28, 2023
Together with eleven other data protection authorities, the ICO has released a joint statement in relation to data scraping and
ICO guidance on bulk emailing
Claire Saunders
September 28, 2023
Continuing a theme from last month’s digest (see “Question of the month – Help! We have used To/CC rather than
ICO and Competition Markets Authority (CMA) issue joint report on harmful design in digital markets
Jenai Nissim
September 28, 2023
The ICO and CMA have issued a joint report which outlines their concerns that design practices being used by websites
ICO guidance on sharing savings rates and protecting gamblers
Claire Munro
August 28, 2023
Data protection compliance can sometimes be seen as a blocker for organisations trying to do the right thing for their
NHS Lanarkshire issued with a reprimand in relation to WhatsApp use
Alison Deighton
August 28, 2023
NHS Lanarkshire (the Trust) have been issued with a reprimand in relation to sharing patients’ personal data on WhatsApp. In
Question of the month – Help! We have used To/CC rather than BCC in an email and it has revealed sensitive personal data– what should we do now?
Claire Saunders
August 12, 2023
There have been a couple of recent reprimands issued by the ICO in situations where individuals’ email addresses were inadvertently
ICO statement on sharing of information by banks
Claire Saunders
August 12, 2023
The ICO has responded to concern about banks sharing personal information with the media following the complaint raised by Nigel
ICO issues guidance for employers on responding to data subject access requests
Jane Toiger
July 28, 2023
In May this year, the ICO published new guidance for employers on responding to subject access requests (SARs). The new
TikTok fined by the ICO
Claire Saunders
May 31, 2023
Last month the ICO issued a fine of £12.5 million to TikTok.
Experian v the ICO
Claire Saunders
April 14, 2023
The recent decision of the First Tier Tribunal (Information Rights) (the Tribunal) has addressed several interesting points of general application in relation to using legitimate interests as a basis for direct marketing processing and the standard of privacy information which needs to be provided by organisations
Question of the month – What does the new ICO guidance on marketing by electronic mail tell us?
Jenai Nissim
March 30, 2023
Let us help you navigate direct marketing by electronic mail.
New ICO direct marketing guidance
Alison Deighton
March 30, 2023
The ICO has created a new hub for direct marketing which has several pieces of guidance as well as FAQs and checklists to assist organisations with direct marketing.
New strategic approach to regulatory action by the ICO
Jenai Nissim
March 30, 2023
UK Information Commissioner, John Edwards gave a keynote speech at the National Association of Data Protection Officers’ Annual Conference in relation to the ICO’s new approach to regulatory action.
ICO fines Interserve £4.4 million in relation to a cyber attack
Claire Saunders
January 18, 2023
On 19 October 2022 the ICO fined Interserve Group Ltd £4.4 million in relation to contraventions of Article 5)1)(f) and Article 32 of the GDPR which occurred between 18 March 2019 and 1 December 2020.
ICO fines retailer Easylife a total of £1.48 million for breaches of UK GDPR and making predatory marketing calls
Claire Munro
December 19, 2022
Following an investigation by the Daily Mail, a referral was made to the ICO regarding Easylife’s telephone marketing practices.
ICO announces intention to fine TikTok regarding the processing of Children’s data
Hulya Erzurumlu
December 19, 2022
ICO intends to fine Tik Tok for its failure to protect the privacy and data of children using the platform.
View our Resource Library
Subscribe to our privacy news and legislation updates
Resource Library
Data protection is a fluid terrain. Data protection legislation and the approach by regulators are constantly changing, so it is vital to stay up to date. In this resource library, you’ll find some expert insight and information to help you navigate a path of compliance.
All items are available to download as pdf files. To view a document, please ensure you have installed Adobe Acrobat Reader on your device.
Description
Do you want to hear from us?
Please complete the fields below to stay up-to-date with the latest HelloDPO news.
Our Experience
Our experience speaks for itself, with global powerhouse brands, tech giants at the forefront of the data processing industry, rapid growth health tech start-ups, forward-thinking financial institutions, a challenger dating app, fashion giants, one of the largest entertainment and record label conglomerates in the world, shopping meccas, national broadcasters, the UK’s biggest free streaming service, and numerous Legal 500 firms all choosing HelloDPO as their trusted Data Protection Advisory Partner.
To find out more about how we can help you
on your data protection journey,
email
hello@hellodpo.com
Don't just take our word for it
"We have been working with HelloDPO for several years now and I have always found them to be friendly, approachable and above all professional in their approach. I would have no hesitation in recommending them."
Serena MayDirector, Southern HR Ltd 
"We have been working with HelloDPO for several years now and I have always found them to be friendly, approachable and above all professional in their approach. I would have no hesitation in recommending them."
Serena MayDirector, Southern HR Ltd
“We have worked with Jenai, Alison and the HelloDPO team for over 5 years as our DPO and have found their advice and support invaluable. They are pragmatic and flexible in the advice they provide, and assist in making data protection compliance apply in a corporate environment. Working with them is like having additional members of our team, and the relationship has flourished over time."
Craig SaundersHead of International Privacy, Aetna Global Benefits (UK) Ltd 
“The team (Jenai and Lisa) provided DPO services and compliance support to our business for over a year, during which they consistently delivered high quality advice and excellent client service. The demands of the hospitality industry are high and HelloDPO adapted to this quickly and seamlessly – they are responsive, knowledgeable, and pragmatic. They are also a pleasure to work with.”
Frasers Hospitality (UK) Ltd 
“We have been working with HelloDPO for nearly a year. The team have been great to work with, highly professional and flexible. Most importantly, they have given clear advice and guidance in what is a very complex area. Well done and we look forward to continuing working with you!”
Ruth HidalgoDirector, Chartered Accountants Worldwide 
“We have recently engaged HelloDPO and the team, led by Jenai, has been responsive, practical and generally very helpful when dealing with our data protection queries. We look forward to what’s on track to becoming a great working relationship!”
Federica CozzaniSenior Legal Counsel, Compre Group 
“If you’re looking for trustworthy, pragmatic and diligent legal advisors, say Hello(to)DPO! The team has been a great support to Skyscanner on a broad range of privacy and data protection matters, whether advising at a compliance level or on more acute legal issues. You’ll enjoy considerate, timely and helpful advice, provided by professionals with whom it’s a delight to work.”
Gemma WithamDirector of Legal (Privacy), Group Privacy Officer, Sykscanner Limited 
“Jenai and Emma are amazing to deal with. They strike the right balance between understanding the business needs while doing it’s fiduciary duty to ensure we are on the right track from a legal, ethical and moral perspective. Working with HelloDPO’s guidance over the past 2 years has enabled X-Mode (now known as Outlogic) to be able to navigate complex and at times uncertain waters with GDPR in a strategic and ethical manner.”
Joshua AntonCEO, Outlogic 
“A great bespoke service, delivered flexibly by absolute experts in a friendly, collaborative and accessible way. I cannot recommend more highly!"
Clare RussellInterim Head of Legal, Vue UK & Ireland 
“HelloDPO have been brilliant at getting our data compliance into shape. We have come such a long way in our ways of working and they are always on hand to help when we have complicated or urgent issues – they have simply become part of the team."
Josh TowbHead of Business Transformation, Jigsaw 
Previous
Next
