Microsoft Subject Access Requests: How to Handle DSARs in Microsoft 365 Efficiently
Handling Subject Access Requests in Microsoft 365 is complex, with data spread across Outlook, Teams, SharePoint, and OneDrive. This guide explains how to manage DSARs efficiently, avoid common pitfalls, and reduce workload using proven processes and specialist support.
UK Social Media Ban for U16s
The UK is tightening its focus on children’s data and social media. From stronger regulatory expectations to design obligations under data protection law, organisations must rethink how they collect, use, and safeguard young users’ data. Here’s what this shift means in practice and how to prepare.
UCS College Group: DSAR Training Case Study
UCS College Group partnered with GRC Hub to enhance its Subject Access Request (SAR) capability through practical training and eDiscovery optimisation. The programme improved search accuracy, reduced processing time, and introduced a consistent, scalable SAR framework aligned with regulatory expectations.
PECR Compliance in 2026: A Practical Guide for UK Marketing Teams
PECR is one of the most misunderstood areas of UK data protection and one of the biggest sources of marketing risk. This practical guide breaks down B2B vs B2C rules, consent requirements, soft opt-in, cookies, and how to run compliant, high-performing campaigns in 2026.
ROPA Done Properly: A Practical Guide to GDPR Records
A practical guide to the Register of Processing Activities (RoPA): when it’s legally required, what it should contain, and how to move from a static GDPR spreadsheet to a living governance and automation foundation.
How to Respond to a Subject Access Request Without Disclosing Too Much (or Too Little)
A practical guide to DSAR support, helping organisations respond lawfully without over‑disclosing or withholding personal data.
DSARs in Local Authorities: Rising Demand and the Unitary Challenge
DSARs are no longer a background compliance task for local authorities. For unitary councils in particular, rising volumes, complex social care records and limited capacity are creating real operational strain.
DPIA Process Explained: How to Build a Defensible DPIA Framework | GRC Hub
Many organisations have DPIAs, but few have a DPIA process that actually works. Learn how to move beyond retrospective, DPO‑led assessments to a scalable, defensible DPIA framework aligned with UK GDPR and regulatory expectations.
GRC Hub: Employee DSAR Case Study
A global management consultancy faced four high risk employee DSARs involving senior executives and sensitive regulated‑market data. With no standardised DSAR process and growing pressure on HR, GRC Hub delivered rapid and defensible support, saving over 100 hours of internal effort. Through expert searching, proportionate scoping and scalable review capacity, the business reduced risk, improved compliance and built a repeatable SAR operating model.
AI BOM Compliance 2026 Guide: AI Bill of Materials for EU AI Act, Cyber Resilience Act, ISO 42001 and NIST AI RMF
AI Bills of Materials are becoming a core compliance requirement as the EU AI Act and Cyber Resilience Act take effect. This guide explains what an AI BOM is, why it matters in 2026, and how organisations can build one in just 90 days.