The ICO has fined Scottish charity Birthlink £18,000 for the destruction of approximately 4,800 personal records, some of which were irreplaceable. These weren’t just files. They were handwritten letters, photographs, and birth certificates; fragments of identity, belonging, and memory. The loss was not just operational, it was deeply human.
The Data (Use and Access) Act 2025 (DUAA 2025) (1) has officially passed and with it comes a shift in how charities can communicate with their supporters. One of the most talked about changes? Charities can now send certain marketing emails without needing explicit consent from individuals. But before you hit “send,” let’s unpack what is actually allowed.