Data protection laws can be hard to get your head around.

Training like this can only take us so far. We also need to know how to find trusted information when things go wrong.

If you’re doing business in the UK, the ICO is your go-to guide for further reading. Their GDPR guide is here.

Other countries will have their own equivalents to the ICO, which often operate under different laws.

For instance, Spain has the Agencia Española de Protección de Datos, or AEPD.