20/08/2026
๐ Learn with Link UP - We're sharing practical tips from our Lunch & Learn sessions so you can keep learning from the brilliant experts in our community ๐
This month we're looking back at our session with the brilliant Bridget Treacy on Data Protection and Digital Marketing - demystifying GDPR, PECR and the new rules for charities.
Here are our 10 key takeaways ๐
โจ Know your data - you can't comply if you don't know what you hold. Map it with the ICO's free ROPA template
โจ Good data protection builds trust - funders and donors want to see your house is in order
โจ Personal data is broader than you think - it's any info relating to an identifiable person, even your opinions about them
โจ Remember the 'no surprises' rule - be fair and transparent, only use data as people would expect
โจ Only collect what you need - if you don't need someone's date of birth, don't ask for it
โจ Never copy someone else's privacy notice - your data use is unique to you. Use the ICO's free generator instead
โจ Fundraising counts as direct marketing - promoting your charitable work to individuals falls under marketing rules too
โจ For marketing, consent is your friend - PECR takes precedence over GDPR and usually requires freely given, informed consent
โจ The new charity 'soft opt-in' is here - the Data Use and Access Act lets charities use it for fundraising, but it's not retroactive and final ICO guidance is still pending
โจ Respect people's preferences - keep a suppression list and never market to someone who's opted out
The biggest takeaway? Data protection is a journey - start with the basics and build from there ๐ฏ
๐ฅ Watch the full replay on our website! https://linkuplondon.org/resources/past-events/
Our Lunch & Learns happen once a month - keep an eye on our events page so you don't miss the next one, and explore our library of past sessions for more practical tips ๐ก