Training

Plenty of organisations can say, with confidence, that everyone has completed their UK GDPR training. Fewer can say what would happen if a real data protection issue landed on someone’s desk tomorrow. Training can easily become an annual box-ticking exercise: book the session, get people through it, move on. The question is not whether the

We Have All Done the Training… So Why Does Nothing Change? Ask most organisations whether their staff have completed GDPR training, and the answer is almost always yes. Certificates were issued. Boxes were ticked. The compliance log was updated. And yet breaches still happen. Subject access requests still catch people off guard. Sensitive data still