The GDPR Accountability Principle: From Paper to Practice
Accountability principle As a new consultant at Westbrook Data Protection Services, one of the first topics I raise with clients is that GDPR compliance is not just about having the right documents in place, but it’s also about being able to demonstrate that those documents work in real life. That is the essence of the…
Changes to employment law and the rise in Data Subject Access Requests
Changes to employment law and the rise in Data Subject Access Requests Employment Rights Act From January 1 2027, the Employment Rights Act 2025 gives employees greater protection if they are dismissed after just 6 months. This could spell a potential rise in Data Subject Access Requests from mid 2027 onwards, with individuals potentially being…
Court of Appeal’s Ruling on strengthened data privacy rights
Farley v Paymaster – Court of Appeal Boosts Data Subjects’ Rights to Compensation for Non-Material Harm Senior Privacy Lawyer The recent case of Michael Farley & Anor v Paymaster (1836) Limited (trading as “Equiniti”) [2025] EWCA Civ 1117 otherwise known as (Farley v Paymaster) has significantly strengthened the rights of data subjects when seeking compensation…
Understanding Your Right to Correct Inaccurate Personal Data
Inaccurate Personal Data – Understanding your Rights Our world is data driven and the processing of personal data forms an essential part of our daily lives. Individuals may provide their personal data in a number of scenarios, for example, when ordering products online, or from an employee to an employer for retention in a business’s…
I Need a Solicitor to Witness My Signature: What You Need to Know
Data Protection Lawyer Solicitor Led Services for Document Certification & Witnessing Here at Westbrook Data Protection Services we’ve launched a document signing service covering Woking. This has proved extremely popular with a number of our clients finding us via Google and ChatGPT and word-of-mouth for their signature witnessing, ID1 forms, guarantee indemnity witnessing and certified…
How to respond to a Data Subject Access Request (DSAR)
How to respond to a Data Subject Access Request (DSAR) With a growing awareness of data protection rights is leading to an increase in individuals making DSAR requests. In this article we’ll guide you through the challenges you face and tips on getting them right. You should be aware that requests can be made via…
UK Data (Use & Access) Act means for your privacy policy
What the UK Data (Use & Access) Act 2025 means for your privacy policy The Data (Use and Access) Act 2025 (DUAA) received Royal Assent on 19 June 2025 and introduced a number of important changes to UK data protection law and the Privacy and Electronic Communications Regulations (PECR). The changes were brought into force…
Do You Need an AI Policy? An Essential Guide
Without a clear AI policy in place, your business could be exposed to serious risks around data protection, ethics, compliance, intellectual property and reputational damage
Transactional vs. Marketing Emails Under PECR: What You Need to Know
Understand the difference between transactional and marketing emails under UK law, including PECR rules, consent, and best practice for businesses.
3 GDPR Traps Hiding in Your Website Analytics Setup
Did you know, many websites automatically load cookies and analytics which can slow down your site and impact your SEO performance.
