We need to talk about catfishing as it harms more than one person and anyone can be catfished. Learn why you should care abut the data points you create online.

Good news – I’ve been shortlisted for the PICCASO Author/Creator of the Year award with the Sofia Privacy blog as my entry. Read more about what the nomination means for the blog content.

Read about three formative privacy experiences that were my first lessons in data protection, long before I knew what being a DPO meant. Let’s talk about forums, MySpace and catfishing.

This blog explores why mission-driven platforms built on sensitive data mistake their good intentions for "good enough" data protection compliance. Inspired by a true story. Read more.

Whoever gives data protection advice or signs it off needs to be confident that it is sound. Read this post to find out how to ensure recommendations are well thought-through.

Baby sleep consultant have a serious and responsible job – they work with infants and vulnerable new parents. As such, they are responsible for the wellbeing of both, which is caught by the UK GDPR.

“Consent or pay” is not adequate consent under the GDPR. I have shared a personal story that is not just mine to show people, advertisers and practitioners why it fails.

Read a Data Protection Officer’s legitimate interest assessment of workplace keystroke capture for AI training, with Meta as the worked example.

Read more to learn what AI support vs AI decision means in practice and how to improve your AI hiring tools compliance with the UK GDPR.

Understand data protection impact assessments and how to complete them without the jargon, in simple terms, with practical tips you can use today.

This is a practical guide for organisations choosing an outsourced DPO, written by someone who’s been on all sides. Learn what to look for and key questions to ask providers.

Find out what roles and structure my dream data protection team would have, and how you could improve yours.

Find out what “AI skills” are for people working in legal, compliance, privacy, consulting and advisory roles, including hard knowledge and soft skills.

An honest account of how I passed the IAPP CIPM exam while working (almost) full-time, including study methods, revision tips, and the realities of fitting study around life.

I’ve handled requests that stretched resources, tested judgment, and looked like candidates for refusal. Read why they weren’t.

Read why nobody really owns personal data even though controllership under the GDPR and ownership under intellectual property law may overlap sometimes.

When employees leave, they take skills and knowledge they have learned. Read more for what controls employers can set on protecting information and how employees should act.

An analysis of CCTV installation in private spaces and considerations which must be included in a decision-making process.

Slipping into using generative AI tools for comfort is extremely easy. Our brains know they are not therapists, but we keep using them for emotional issues. Why?

If you’re considering going out on your own, this is for you. Read the lessons form my journey as a director and lead of a data protection compliance business.