You Are Paying Monthly to Exercise Rights You Already Own. That Is the Problem.
DeleteMe and Incogni are not scams. But paying monthly to exercise rights you own under UK GDPR for free is evidence the rights are broken.
Read more →All Articles
650 articles · Page 6 of 33
Next Week on The Open Book Problem: The Subscription Scam That Is Not Quite a Scam
Next week Graham Falkner joins Noel to examine the paid removal industry. Not scams. But you are paying monthly to exercise rights you already own for free.
Read more →
If Your Legal Rights Only Work When You Have Stamina, Who Are They Really For?
UK GDPR gives everyone data rights. In practice those rights require sustained effort most people cannot maintain. That is the structural problem.
Read more →
Threat Analysis: FortiSandbox Under Active Exploit, LegacyHive Zero-Day, and ClickFix Everywhere
FortiSandbox flaws are being actively exploited, a Windows zero-day with no patch is now public, and ClickFix attacks are hitting UK businesses daily. Here is what you need to know.
Read more →
The ICO's Questions: What the Regulator Has Not Yet Answered on Data Brokers
Lucy Harper examines the accountability questions the ICO has not yet answered about UK data broker oversight, using the published enforcement record.
Read more →
SharePoint Is Being Actively Exploited Right Now. Is Your Business Exposed?
CISA added a Microsoft SharePoint remote code execution flaw to its active exploitation list on 16 July 2026. Here is what UK small businesses need to do today.
Read more →
Threat Analysis: Scattered Spider Sentenced, Trojanised Collaboration Tools, and the AsyncAPI Supply Chain Compromise
Five and a half years each for the TfL hackers. A Russian group hiding malware inside legitimate collaboration tools. And a supply chain worm loose in the npm ecosystem. Here is what today actually means.
Read more →
How to Submit a UK GDPR Erasure Request to a Data Broker That Actually Works
Most UK GDPR erasure requests to data brokers fail because they are vague, undocumented, or not followed up. Here is the process that produces results.
Read more →
Patch Tuesday Delivered 570 Fixes. A Zero-Day Arrived Hours Later. What UK Small Businesses Need to Do Right Now.
570 Microsoft patches. A Windows zero-day PoC published hours later. A building automation protocol now on the CISA KEV list. This week is not one to ignore.
Read more →
Hello, Mauven Here: Why the ICO's Experian Loss Matters More Than You Think
Hello, Mauven here. The Upper Tribunal dismissed the ICO's Experian appeal in April 2024. Here is what the outcome signals about UK data broker regulation.
Read more →
Microsoft's Record 622-Flaw Patch Tuesday and Two Active Zero-Days: What UK Small Businesses Must Do Today
Two Microsoft zero-days are being actively exploited right now. One requires no login whatsoever. Here is what to do before close of business.
Read more →
SonicWall Zero-Days, 570 Microsoft Patches, and Fake GitHub Repos: Your July 2026 Threat Briefing
SonicWall zero-days are being exploited in the wild. Microsoft patched 570 flaws in one go. Here is what actually matters for your business this week.
Read more →
Threat Analysis: SharePoint Under Active Attack, AiTM Phishing Surge, and npm Supply Chain Compromise
Three stories today that UK SMBs cannot afford to ignore: SharePoint flaws being actively exploited, a sophisticated AiTM phishing operation, and a poisoned npm supply chain.
Read more →
Threat Analysis: MFA-Bypassing Phishing Kits and AI-Accelerated Attack Infrastructure, What UK SMBs Need to Know
Your MFA is not the safety net you think it is. Two new phishing kits are bypassing it right now, and AI is doing the heavy lifting for attackers.
Read more →
Your Joomla Website Is Being Actively Exploited Right Now. What Are You Doing About It?
Attackers are executing arbitrary code on Joomla websites right now. CISA confirmed it. Here is what UK small businesses need to do today.
Read more →
Seven Years of UK GDPR: Why the Data Broker Market Has Never Been Bigger
UK GDPR came into force in 2018. Seven years on the data broker market has grown and zero monetary penalties have been imposed on a UK data broker.
Read more →
Threat Analysis: Russian State Actors, ShareFile Emergency Shutdown, and DocuSign RMM Abuse, What UK SMBs Need to Know
The NCSC has joined a Nine-Eyes advisory on Russian state actors targeting poorly configured routers. Meanwhile, Progress ShareFile has ordered an emergency server shutdown over an undisclosed threat.
Read more →
The Regulator Who Looked the Other Way: GDPR, Data Brokers, and UK Directors
UK GDPR gave individuals the right to erasure in 2018. The commercial data broker market has grown every year since. This is not a coincidence.
Read more →
Next Week on The Open Book Problem: The Attacker's Playbook
Next week Mauven MacLeod joins to break down the social engineering chain. How attackers turn a public profile into a targeted attack before sending anything.
Read more →
Seven Years of UK GDPR. The Data Broker Market Has Never Been Bigger.
UK GDPR promised control. Seven years on the ICO has not imposed a monetary penalty on a UK data broker. Lucy Harper joins me today.
Read more →