Search

How can we help?

Icon

Data breaches and ICO investigations: Responding with confidence

Data breaches can have serious legal, financial and reputational consequences for organisations. In this episode of Data Protection Matters, Harry Berryman and Zahra Navarro, members of the Data Protection Team, discuss recent ICO enforcement action, common causes of data breaches, and the practical steps organisations should take to respond effectively when incidents occur. Through real-world examples and practical insights, they explore how businesses can strengthen their data protection compliance and reduce regulatory risk.

This episode covers:

  • Key lessons from recent ICO enforcement action
  • Common causes of data breaches, including human error, insider misconduct and cyber incidents
  • Best practice for responding to data breaches and reporting obligations
  • Practical steps organisations can take to strengthen data protection compliance

Whether you’re looking to improve your organisation’s data protection framework or understand how to respond when a breach occurs, this episode provides valuable practical guidance. If you have any questions about data protection compliance, data breaches or ICO investigations, please get in touch with our Data Protection Team.

Meet the speakers

Harry Berryman

Solicitor

View profile

+44 118 960 4636

Zahra Navarro

Trainee Solicitor

View profile

+44 20 7539 8050

Read, listen and watch our latest insights

art
  • 23 September 2026
  • Corporate and M&A

GDPR Privacy Policies: Key requirements for organisations

When an organisation is creating a website or app to reach users or potential customers drafting a Privacy Policy may be an afterthought. However, failure to write a Privacy Policy, which complies with the relevant legislation, can have serious consequences.

art
  • 11 September 2026
  • Privacy and Data Protection

Data Protection Breaches – Personal Liability for Employees

It is well known that employers have obligations under the Data Protection Act 2018 (the “Act”) but, perhaps lesser known, is that employees can be held personally liable for certain actions amounting to criminal offences under the Act.

art
  • 06 August 2026
  • Privacy and Data Protection

The rise of the AI-powered individual: Is your business ready?

Artificial intelligence is changing the data protection landscape, but perhaps not in the way many organisations expected. Much of the discussion has centred on businesses adopting AI and ensuring they comply with the UK GDPR.

art
  • 20 July 2026
  • Privacy and Data Protection

Personal Data FAQs

Explore comprehensive answers to frequently asked questions about personal data, GDPR compliance, and your rights.

art
  • 08 July 2026
  • Privacy and Data Protection

ICO prosecutes employee under the Data Protection Act for forwarding client data to his personal email address

The issue of employees taking confidential business information or personal data when moving to a new employer remains a significant concern for businesses.

art
  • 08 June 2026
  • Privacy and Data Protection

FAQs – Privacy Documentation

Clearly documenting and regularly reviewing data protection policies and procedures is paramount to demonstrating compliance with the UK GDPR. It is essential that such policies are communicated within an entity and staff are regularly trained on these.