UK GDPR

airbnb social features connect travel map privacy a fan of picture postcards

Airbnb’s New Social Features Show Your Trips to Friends. Here’s What They Can See

Airbnb’s fall 2026 update adds Connect and a Travel Map, so connections can see each other’s past and upcoming trips, the homes they stayed in and the experiences they booked. We trace how Airbnb built its social layer since 2024, explain why it wants one, list exactly what connections can see and give a practical privacy and safety guide, including what UK data protection law expects.

Read more
palantir nhs contract uk fears health service deal a x ray lightbox showing a ribcage film

UK Fears Grow Over AI Giant Palantir’s Health Service Deal

Doctors, MPs and campaigners want the government to use a 2027 break clause to end Palantir’s £330m contract to run the NHS Federated Data Platform. We explain what the deal covers, the five separate fears behind the row, the case Palantir and ministers make for it, the options at the break point, and the lessons for UK organisations buying critical software.

Read more
meta ai suggestions invasive personal questions a child car seat high backrest side wings

Meta Says It’s Changing AI Suggestions After Posing Invasive Personal Questions

Meta AI suggestions asked Kalie Robins “Who’s the child passenger?” under a family video, then helped assemble her daughters’ names, ages and a likely home location. Meta says it “missed the mark” and has fixed the prompts. We dated the post, compared Meta’s statement with July’s Muse Image retreat, and found the fix changes the questions, not the answers.

Read more
private ai for uk businesses a cube vault single doorway

Private AI for UK Businesses: How to Use LLMs Without Exposing Company Data

The general, all-sector answer to the question every UK business is now asking: how do you get the benefit of large language models without feeding them things you are paid to protect? This guide defines what private AI actually means, maps the five deployment levels from business-tier chatbots to fully self-hosted open-weight models, sets the UK GDPR and confidentiality position, prices a 20-person worked example across all four buyable routes, covers RAG without exposure, the NCSC and OWASP security layer, vendor due diligence in eight questions, and finishes with a 90-day rollout plan.

Read more
automated decision-making - automated decision making under the duaa a branching decision node

Automated Decision-Making: Essential DUAA Rules to Avoid Risk

Section 80 of the Data (Use and Access) Act 2025 deleted Article 22 of the UK GDPR and replaced it with Articles 22A to 22D, commenced on 5 February 2026. The prohibition became a permission with conditions: for ordinary personal data you may now make solely automated significant decisions, provided you notify the individual, accept representations, provide genuine human intervention and allow a contest. This guide sets out the two-part test, what the ICO now means by meaningful human involvement, the special category data rules that did not relax, where automated decisions hide inside ordinary business software, the EU divergence that catches exporters, the evidence pack a regulator will ask for, seven failure patterns and a 60-day plan.

Read more
duaa compliance checklist uk smes a upright grooved slab

DUAA Compliance: Essential SME Checklist to Avoid Costly Fines

The Data (Use and Access) Act 2025 is fully commenced and there is no small-business exemption from the parts that matter. This checklist is written for the firm with no data protection officer and one person watching the shared inbox: a three-question scoping test, the five-item baseline every UK controller must meet, the conditional duties that only fire for some businesses, the new universal complaints procedure and its 30-day clock, the cookie audit behind a PECR ceiling that rose from £500,000 to £17.5 million, automated decisions hiding inside off-the-shelf SaaS, an honest hour-and-cost budget, the nine-artefact evidence pack, seven small-business failure patterns, and a ninety-day plan with owners.

Read more
CHAT