Kafico Ltd

Over the past few months, I’ve been looking more closely at something that raises concerns for me. How much real, practical control organisations retain when their IT service is delivered by an external provider. The relationship may be great and the SLA met, but three patterns keep surfacing: Concentrated privileged access (single points of failure) Remote access to sensitive data without meaningful friction Customers being charged for access to their own governance information Individually,...

Handling complaints lawfully and compassionately Complaints about health or social care are often raised by relatives when the person who received the care is no longer able to complain themselves. This may be because the person has died, is unconscious, or otherwise lacks capacity due to illness or detention. In these cases, our customers can be unsure how much health information they can lawfully share when responding to the complaint. The key point is this: a complaint does not...

We’re excited to share a first look at our new portal for GP practices, designed to make data protection support simpler, clearer, and more practical day to day. The portal brings everything together in one place, allowing practices to: Obtain disclosure advice when it’s needed Watch on-demand training videos Complete key compliance tasks, including policies, ROPA and audits View and follow the DPIA process step by step Raise a new DPIA directly through the system Book meetings quickly and...