Insights
Briefings for regulated practices
Precise, senior analyses of what your regulator requires of the web and email estate behind your practice, and how to hold it to that standard. Written to be read by a partner, not skimmed by a marketer.
Cornerstone briefings
NTSELAT · Estate agents
Why your UK estate agency website probably fails the NTSELAT Material Information rules (2026)
UK estate agency listings carry NTSELAT Material Information duties most agency-built sites quietly fail, plus a data-residency gap on valuation forms. What a regulated-grade estate puts right.
23 Jun 2026
ICAEW · Accountancy practices
Why your UK accountancy website probably fails ICAEW confidentiality
ICAEW Section 114 confidentiality, AML duties, and UK GDPR: why agency-built UK accountancy websites silently breach the confidentiality duty on enquiry forms and client-document portals — and what a regulated-grade estate puts right.
1 Jun 2026
ICO / UK GDPR · Clinics
Why your UK clinic's website probably breaks GDPR
UK GDPR for clinics: most agency-built websites silently fail data-controller duties around special-category health data. Where a typical site breaks the rules — and what a regulated-grade estate puts right.
1 Jun 2026
SRA · Law firms
Why your UK law firm's website probably fails SRA confidentiality
SRA confidentiality and UK GDPR: why agency-built UK solicitor websites silently breach Rule 6 on enquiry forms and document uploads — and what a regulated-grade estate puts right.
1 Jun 2026
KCSIE · Schools
Why your UK school's website probably fails KCSIE
KCSIE safeguarding and child-data duties trip up most UK school websites built by agencies. Where a typical site breaks the rules — and what a regulated-grade estate puts right.
1 Jun 2026
Law firms
SRA · Law firms
The SRA clickable digital badge: what it is, why you must display it, and what it signals
A guide to the SRA digital badge (the clickable logo) for UK law firms: that displaying it is mandatory, what a visitor sees when they click it, who provides it, and how a firm registers for and embeds it correctly.
3 Jul 2026
SRA · Law firms
The SRA Transparency Rules: what solicitors must publish on their website
A plain-English guide to the SRA Transparency Rules for UK law firms: which practice areas are in scope for price publication, what cost and service information must appear, the complaints and regulatory information required, and where the SRA reads it all.
3 Jul 2026
SRA · Law firms
SRA Transparency Rule 6 implementation: the 2026 website checklist
The SRA Transparency Rules are checked against the public website, not the firm's internal records. This is the 2026 implementation checklist for Rules 1 to 6 — every clause named, the markup that satisfies it, and the structured-data signal that compounds it.
3 Jun 2026
Accountancy practices
MLR 2017 / HMRC AML · Accountancy practices
Anti-money-laundering for accountants: client due diligence, onboarding, and what your website intake must do
How the Money Laundering Regulations 2017 shape client onboarding for UK accountancy firms: when customer due diligence bites, the measures Regulation 28 requires, the before-you-start timing rule, five-year record-keeping, and what it all means for the intake form on your website.
3 Jul 2026
ICAEW · Accountancy practices
ICAEW Section 114 disclosures: what UK accountancy websites must show
ICAEW Section 114, AML, and PII rules set what every UK accountancy website must publish. The 2026 disclosure checklist: each clause, markup, and the fix.
3 Jun 2026
Clinics
CQC / ICO · Clinics
A CQC-ready clinic website: what to publish and what to keep private
What a CQC-registered clinic must publish on its website, what it must never publish, and where the line sits: Regulation 20A display of ratings, the duty of candour, and the UK GDPR limits on testimonials, photos, and patient data.
3 Jul 2026
NHS DSPT · Clinics
Does your private clinic need the NHS Data Security and Protection Toolkit (DSPT)?
A clear decision guide to the NHS DSPT for private UK clinics: who must complete it, who does not, how NHS contracts and NHSmail pull you into scope, what changed in Version 8, and the 30 June deadline.
3 Jul 2026
ICO / UK GDPR · Clinics
Health data on your clinic website: UK GDPR special-category rules in plain English
Special-category health data under UK GDPR, in plain English for UK clinics: the two-part lawful-basis test, why consent is usually the wrong basis for care, what a website form should never collect, and where the rules actually bite.
3 Jul 2026
ICO / UK GDPR · Clinics
Online booking for clinics without breaking data rules
How a UK clinic can offer online booking without breaking UK GDPR: why a booking is special-category health data, why the US-cloud booking tools most clinics use are the weak point, and what booking kept in UK and EU jurisdiction looks like.
3 Jul 2026
NHS DSPT · Clinics
DSPT compliance for UK clinics — the website-side checklist 2026
DSPT compliance checklist for UK clinics: private GPs, dentists, and physios in the NHS supply chain inherit DSPT website obligations most agencies never read.
3 Jun 2026
Schools
DfE · Schools
What every UK school must publish on its website: the DfE statutory list
A plain-English guide to what UK maintained schools, academies, and trusts must publish online under the Department for Education's statutory guidance: the required items, the deadlines, the academy-only additions, and the paper-copy duty.
3 Jul 2026
KCSIE · Schools
KCSIE-aligned school website audit: the 2026 checklist
KCSIE school website audit checklist 2026: the eight explicit website requirements UK schools must meet, each with its audit-pass marker and concrete fix.
3 Jun 2026