Data protection advice for charities and not for profit organisations

Wrigleys has extensive experience advising charities on matters related to data protection. We understand that the importance of managing data protection for charitable organisations cannot be overstated. 

Our approach is always collaborative. We recognise that every organisation is unique and requires a bespoke approach to data protection. We work closely with you to understand your operations, identify potential risks, and develop practical solutions that balance legal compliance with your operational needs. 

Wrigleys' Data Protection Expertise for Charities 

Our team is well-versed in the legal and regulatory framework governing data protection in the UK, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR) and other relevant legislation. 

We work with a wide range of charitable organisations to ensure that their data protection policies and practices are compliant with these regulations. We provide tailored guidance on specific issues such as data breaches, data subject access requests and reviews of data sharing agreements and clauses.

Support for Charity Data Protection Leads & Data Protection Officers 

We provide support to your data protection lead or data protection officers as their trusted adviser, providing a legal sounding board and sense check as they address particularly complex issues which arise in respect of data protection, whether that be: 

• the process to be followed following receipt of a data subject access request

• the applicability of PECR to marketing or promotional communications

• the assessment of borderline personal data breaches to determine whether they are reportable to the Information Commission’s Office

• the affected data subjects and whether the breach needs to be reported to the Charity Commission as a serious incident. 

Achieving UK GDPR Compliance 

We work with our clients to help them to comply with the UK GDPR, including:

•  reviewing and drafting privacy notices, data protection policies and other data protection compliance documents

• negotiating contracts with processors to meet legal requirements

• delivering training sessions to clients on data protection

• providing focused legal advice on areas that require specialist expertise, such as:

• the processing of special category data

• lawful basis analysis for complex processing activities

• compliance with PECR and the UK GDPR when undertaking marketing activities.

Handling Complex Data Subject Rights Requests: Wrigleys’ Support for Charities 

Many of the third sector organisations we work with need to process particularly sensitive personal data (whether that be special category personal data or just particularly sensitive information).

When they receive a data subject rights request, complex legal issues can often arise for example where they would involve the disclosure of sensitive information connected to confidential complaints received.

We take a flexible approach to supporting our clients with such requests – working with you to provide an appropriate level of support tailored to your needs, whether that be answering discrete questions on legal complexities or guiding you through the process from receipt to response.

For further information about the services, we can offer your charity, please feel free to contact us or sign up for our free newsletters Charity, Social Enterprise & Employee Ownership solicitors. 

You may also find the following Wrigleys' articles helpful: 

Charity fundraising reforms dropped in revised Data Protection reform bill

Cyber security update for charities

ICO fines charity £25,000 for failing to secure personal data

UK-EEA data sharing: European Commission issues draft adequacy decision

Schrems II and sharing personal data overseas: back to the drawing board

GDPR: what should charities and social enterprises be doing to prepare?

GDPR – Practical guidance for pension trustees

View Biography

Nick Dunn

Direct Line: 0113 204 1140

Associate
Leeds

Meet the team