All Posts

Following the major data breach at the Legal Aid Agency (LAA) earlier this year, the LAA has introduced a significant new requirement: from 1 October 2025 , every law firm delivering criminal legal aid work must hold a valid Cyber Essentials certification. This isn’t optional. It’s a contractual requirement  under the new LAA rules — and firms that fail to comply risk being unable to continue their legal aid work. But Cyber Essentials is only the beginning. The LAA now expect

If your employees access/process personal data, they must be trained—before access, then regularly. The ICO expects an all-staff...

Cybersecurity breaches and GDPR compliance failures Imagine this : a northern-based law firm , trusted with society’s most sensitive...

Picture this : a modest Scottish charity, Birthlink , dedicated to reconnecting people affected by adoption through handwritten letters,...

The UK Information Commissioner’s Office (ICO) produced a video around personal data breaches which you may find helpful. Data breaches...

Here we try to clarify the legislation and things to consider regarding the appointment of Data Protection Officers. If you have any...

A Vulnerability Assessment (VA) is super important because it checks out your devices, networks, and systems with the latest security...