Data Protection and Privacy Guidance
Practical, solicitor-led guidance for organisations handling UK GDPR, data protection and privacy decisions.
Our pages explain common data protection questions businesses face in practice. In addition, they cover when legal requirements apply, what decisions are needed, and when specialist support is required.
Explore five practical data protection guidance hubs
These hubs reflect the issues organisations raise most often in our work: rights requests arriving through unexpected channels, searches returning mixed information, urgent breach-reporting decisions, employees adopting AI before approval, unclear DPO responsibilities and uncertainty about PECR. Each hub brings together practical guidance and the relevant WDPS service.
1. DSARs and individual rights
Recognising requests, planning proportionate searches, reviewing results, applying redactions and responding securely.
2. Personal data breaches
Containing an incident, preserving evidence, assessing risk and reaching a defensible decision about ICO and individual notification.
3. AI governance and DPIAs
Setting approval routes, acceptable-use rules and accountability controls before AI becomes embedded across the organisation.
4. DPO and ongoing support
Clarifying oversight, independence, escalation and reporting when responsibility is spread across legal, HR, compliance and IT teams.
5. PECR and direct marketing
Applying PECR to marketing emails, cookies, analytics and campaign data without treating every communication in the same way.
Related compliance foundations
UK GDPR audits · Privacy notices · Records of Processing Activities · Legitimate interests · Data sharing agreements
Explore More Data Protection & Privacy Services
Our team has a deep understanding of the following areas of law and continues to add value to our clients’ businesses.
Latest Insights
- The GDPR Accountability Principle: From Paper to Practice
Accountability principle As a new consultant at Westbrook Data Protection Services, one of the first […] - Changes to employment law and the rise in Data Subject Access Requests
Changes to employment law and the rise in Data Subject Access Requests Employment Rights Act […]