CVG Solutions

CVG Solutions We up-skill business owners in data protection to strengthen their reputation and win new customers. https://cvgsolutions.co.uk/privacy-policy/

02/03/2026

When “Household Exemption” Fails — Harrison v Cameron

What happens when a heated business dispute, some very colourful phone calls, and a Data Subject Access Request collide?
Welcome to Harrison v Cameron (2024) — one of the most fascinating (and surprisingly dramatic!) UK data protection cases we’ve seen in years.

In this episode, Michael Mulholland (Spencer West) and I break down how:
📱 a secretly recorded iPhone call
👀 shared with family, friends, and employees
💥 spiralled into reputational damage
⚖️ and a DSAR used as a tactical weapon
…all ended up in the High Court.

We discuss why the “household exemption” didn’t fly, when withholding third party identities is justified, and why recording business calls isn’t as simple as hitting the button on your iPhone.

If you work in data protection, law, compliance, or simply enjoy a good real world GDPR story, this one is unmissable.

Grab a coffee and dive in 👇
🎥 Watch the episode: https://youtu.be/eZU9QbWLXcI

🚨 Privacy Notice vs Privacy Policy — Do you know the difference?These two terms are still used interchangeably, but they...
27/02/2026

🚨 Privacy Notice vs Privacy Policy — Do you know the difference?

These two terms are still used interchangeably, but they serve completely different purposes — and getting them wrong can seriously impact your GDPR compliance.

In my latest YouTube episode, I’m joined by data protection expert Sona Mehta, and we break it all down in clear, simple language. Whether you’re a small business, charity, website owner, or simply trying to navigate data privacy, this one’s for you.

🎯 In this episode, we cover:
• Why businesses need both a privacy notice and a privacy policy
• How each document serves a totally different purpose
• What makes a privacy notice clear, engaging and user friendly
• Real examples from well known brands
• Easy, low cost ways to improve your own privacy notice

If you want practical GDPR guidance without the jargon, give it a watch 👇
🎥 https://youtu.be/8pmlAT97GEA

👍 If you find it useful, please like, comment, and subscribe to support the channel!

26/02/2026

FREE WEBINAR (TOMORROW)
Friday 27th February, 12:30 - 13:30

Sharing Confidential Information: Andrew Mountbatten-Windsor's Arrest and why it matters.

Join Scott Sammons, Cristina Vannini-Goodchild, and me, Emily Overton, to talk about all things Information Sharing.

This webinar will talk about the arrest of Andrew Mountbatten-Windsor for allegedly sharing confidential information while serving in public office. Talking about similar high-profile cases, such as Baron Peter Mandelson.

This webinar will explore the legal, ethical, and governance implications of the arrest and what it means to us in our day-to-day roles. Attendees will gain insight into the responsibilities entrusted to public officials, the frameworks that safeguard sensitive information, and the potential consequences when those boundaries are breached.

Through analysis and discussion, the session will also consider the broader impact on public trust, institutional accountability, and information-security practices within government settings. Participants will leave with a clearer understanding of compliance obligations, risk-mitigation strategies, and the evolving insider threat when dealing with privileged information.

REGISTER HERE:
42350451-dc84-40f8-ab6a-869963006a41@b0e71bbe-af07-417d-8a16-5fb48c2acaff" rel="ugc" target="_blank">https://events.teams.microsoft.com/event/42350451-dc84-40f8-ab6a-869963006a41@b0e71bbe-af07-417d-8a16-5fb48c2acaff

24/02/2026

FREE WEBINAR (THIS FRIDAY)
Friday 27th February, 12:30 - 13:30

Sharing Confidential Information: Andrew Mountbatten-Windsor's Arrest and why it matters.

Join Scott Sammons, Cristina Vannini-Goodchild, and me, Emily Overton, to talk about all things Information Sharing.

This webinar will talk about the arrest of Andrew Mountbatten-Windsor for allegedly sharing confidential information while serving in public office. Talking about similar high-profile cases, such as Baron Peter Mandelson.

This webinar will explore the legal, ethical, and governance implications of the arrest and what it means to us in our day-to-day roles. Attendees will gain insight into the responsibilities entrusted to public officials, the frameworks that safeguard sensitive information, and the potential consequences when those boundaries are breached.

Through analysis and discussion, the session will also consider the broader impact on public trust, institutional accountability, and information-security practices within government settings. Participants will leave with a clearer understanding of compliance obligations, risk-mitigation strategies, and the evolving insider threat when dealing with privileged information.

REGISTER HERE:
42350451-dc84-40f8-ab6a-869963006a41@b0e71bbe-af07-417d-8a16-5fb48c2acaff" rel="ugc" target="_blank">https://events.teams.microsoft.com/event/42350451-dc84-40f8-ab6a-869963006a41@b0e71bbe-af07-417d-8a16-5fb48c2acaff

23/02/2026

Microsoft 365 Education Exposed: What the Austrian DPA Really Found

This time, we take a close look at the Austrian DPA’s ruling on Microsoft 365 Education — a case that raises important questions about transparency, compliance, and how student data is handled across Europe and the UK.

Cristina (CVG Solutions) and Michael Mulholland (Spencer West) discuss:
🔍 Hidden tracking cookies within Microsoft 365 Education
🔍 Why a school couldn’t fulfil a Subject Access Request
🔍 Whether Microsoft acted as a processor or a controller
🔍 Key issues under Articles 13, 14, 15 and 28 GDPR
🔍 The power imbalance between tech giants and smaller organisations
🔍 What this means for education technology and children's data rights

If you work with M365, advise on GDPR, or support schools and SMEs with compliance, this episode offers practical insight into an increasingly relevant issue.

🎧 Watch the full episode:
https://youtu.be/e-4pDpAkmDU

👉 I’d love to hear your views.
👍 If you find the discussion useful, please like, comment, and share.
🔔 Follow for more privacy focused conversations.

Education

GDPR changes are on the horizon — is your organisation ready?In the newest episode of Why Such a Fuss?, I sit down with ...
20/02/2026

GDPR changes are on the horizon — is your organisation ready?

In the newest episode of Why Such a Fuss?, I sit down with data protection expert James Robson to unpack what the upcoming Data Use and Access Act (DUAA) really means for organisations, charities, researchers, and anyone who works with personal data.

We break the changes down clearly and practically, including:
✨ Ethical consent finally aligning with GDPR
✨ New rules for secondary data use in research
✨ Updated cookie banner requirements
✨ Soft opt‑in for charities (and common pitfalls!)
✨ Significant increases to PECR fines
✨ A brand‑new complaints process
✨ How “recognised legitimate interest” will work in practice

The DUAA is going to reshape how data is collected, used, and governed in the UK — and this episode gives you the clarity you need to prepare.

👉 Watch the full episode https://youtu.be/F8GFXNsKfqI
👍 Like and subscribe to the podcast for more GDPR and data protection insights
💬 I’d love to know: Which DUAA update do you think will have the biggest impact?

19/02/2026

FREE WEBINAR
Friday 27th February, 12:30 - 13:30

Sharing Confidential Information: Andrew Mountbatten-Windsor's Arrest and why it matters.

Join Scott Sammons, Cristina Vannini-Goodchild, and me, Emily Overton, to talk about all things Information Sharing.

This webinar will talk about the arrest of Andrew Mountbatten-Windsor for allegedly sharing confidential information while serving in public office. Talking about similar high-profile cases, such as Baron Peter Mandelson.

This webinar will explore the legal, ethical, and governance implications of the arrest and what it means to us in our day-to-day roles. Attendees will gain insight into the responsibilities entrusted to public officials, the frameworks that safeguard sensitive information, and the potential consequences when those boundaries are breached.

Through analysis and discussion, the session will also consider the broader impact on public trust, institutional accountability, and information-security practices within government settings. Participants will leave with a clearer understanding of compliance obligations, risk-mitigation strategies, and the evolving insider threat when dealing with privileged information.

REGISTER HERE:
42350451-dc84-40f8-ab6a-869963006a41@b0e71bbe-af07-417d-8a16-5fb48c2acaff" rel="ugc" target="_blank">https://events.teams.microsoft.com/event/42350451-dc84-40f8-ab6a-869963006a41@b0e71bbe-af07-417d-8a16-5fb48c2acaff

Data protection and privacy are no longer “nice to have” — they’re essential. 🔐Over the past decade, we’ve seen signific...
17/02/2026

Data protection and privacy are no longer “nice to have” — they’re essential. 🔐

Over the past decade, we’ve seen significant growth in the way organisations handle personal data. What was once treated as a compliance exercise is now a boardroom priority, driven by regulations such as the General Data Protection Regulation and the California Consumer Privacy Act, alongside growing public awareness of digital rights.
Here’s what’s changing:

📈 Stronger Regulation
Governments around the world are introducing more robust data protection laws, raising expectations around transparency, accountability and individuals’ rights.

🛡️ Privacy by Design
Forward-thinking organisations are embedding privacy into products and services from the outset, rather than adding it as an afterthought.

🤝 Consumer Empowerment
People increasingly expect greater control over how their data is collected, used and shared — and organisations that respect this are building lasting trust.

🔍 Greater Accountability
Data breaches carry serious financial and reputational consequences. As a result, organisations are investing more in cyber security, governance and staff training.
Growth in data protection isn’t simply about avoiding fines — it’s about strengthening trust in a digital-first society. The future belongs to organisations that treat privacy as a core value, not just a regulatory obligation.

⚖️ Court of Appeal Decision Shakes Up GDPR A simple admin mistake… 750 pension statements sent to the wrong addresses…An...
16/02/2026

⚖️ Court of Appeal Decision Shakes Up GDPR

A simple admin mistake… 750 pension statements sent to the wrong addresses…
And now the Court of Appeal has issued a ruling that changes how every UK organisation must handle data breaches. 😳

In this new episode, Cristina from CVG Solutions (Data Protection Consultant) and Michael Mulholland from Spencer West Law unpack the Farley v Paymaster (Equiniti) decision — and what it means for DPOs, privacy teams, HR, IT, customer services, and anyone working with personal data.

🎧 In this episode you’ll learn:
✔️ Why even unopened post can now be a GDPR breach
✔️ How the Court of Appeal has lowered the bar for distress claims
✔️ Why mis sent emails and “near misses” may now need proper recording
✔️ The key updates organisations need in their breach processes

If your organisation handles personal data, you can’t afford to miss this one.
👉 Watch the episode now — and subscribe for more real GDPR cases explained simply.

https://youtu.be/TD4i2mIQC5Q

Ever wondered how political parties get access to your personal data – and what they’re legally allowed to do with it? 🤔...
13/02/2026

Ever wondered how political parties get access to your personal data – and what they’re legally allowed to do with it? 🤔

On the latest episode of Why Such a Fuss, I speak with James Robson, former Data Protection Officer for a UK political party, about the ins and outs of data in politics.

We dive into:
✅ How the electoral register is used
✅ What “democratic engagement” really means under GDPR
✅ How voter data is profiled, retained, and used in campaigning
✅ The legal boundaries between permitted use and misuse

If you’ve ever asked yourself, “How do they know so much about me?”, this episode will give you clarity.

🎧 Watch the full episode on YouTube and stay informed about your data rights! https://youtu.be/thXVE98zOlw

Address

79 Field Drive
Boston
PE217NG

Opening Hours

Monday 9am - 5pm
Tuesday 9am - 5pm
Wednesday 9am - 5pm
Thursday 9am - 5pm
Friday 9am - 5pm

Telephone

+441775660506

Alerts

Be the first to know and let us send you an email when CVG Solutions posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to CVG Solutions:

Share

Data Protention Specialist

We up-skilling business Owners in Data Protection to strengthen their reputation and win new customers. We work with them looking at reducing their risk of exposure to heavy fines and reputational damage. We do this by helping them to implement and maintain compliance pain and hassle free with a range of support services which include a comprehensive training program of 8 +1 modules.