The Data Use and Access Act Is Here. What Changes for Marketers?
The biggest overhaul of UK data protection since Brexit just received Royal Assent. Here's what it actually means for your marketing operations — and what you need to do
Privacy news and stories that matter to UK business.
Latest issues
The EU AI Act's UK Shadow: What the Extraterritorial Rules Mean for You
The biggest overhaul of UK data protection since Brexit just received Royal Assent. Here's what it actually means for your marketing operations — and what you need to do
ICO's New Guidance on Cookie Consent: Finally Some Clarity
The biggest overhaul of UK data protection since Brexit just received Royal Assent. Here's what it actually means for your marketing operations — and what you need to do
Why Your Privacy Policy Is a Liability, Not an Asset
The biggest overhaul of UK data protection since Brexit just received Royal Assent. Here's what it actually means for your marketing operations — and what you need to do
Automated Decision-Making Under UK Law: The Practitioner's Guide
The biggest overhaul of UK data protection since Brexit just received Royal Assent. Here's what it actually means for your marketing operations — and what you need to do
Legitimate Interest After the DUA Act: What Actually Changed
The recognised legitimate interests provision is the most significant change for marketers. Here's how to use it — and where the traps are.
DSIT's AI Governance Framework: A Marketer's Translation
The Department for Science, Innovation and Technology published its AI governance principles. We translate the Whitehall into actionable guidance.
PECR Reform: What the Consultation Means for Email Marketing
The Privacy and Electronic Communications Regulations are finally getting an update. Here's what the consultation signals about the future of consent.
Stop Calling It Compliance — It's Risk Management
The compliance mindset is holding marketing teams back. Reframing privacy as risk management changes everything about how you approach it.
When Your AI Vendor Can't Explain Their Model: A Due Diligence Checklist
You're probably using AI tools that process personal data in ways even the vendor can't fully articulate. Here's how to assess the risk.
International Data Transfers Post-DUA: The UK Adequacy Landscape
The new adequacy framework is simpler in theory, but the practical implications for marketing data flows are more nuanced than the headlines suggest.
Coming soon
This is Penby, a brand new site by Andy Williamson that's just getting started. Things will be up and running here shortly, but you can subscribe in the