Insights
Briefings for regulated practices
Precise, senior analyses of what your regulator requires of the web and email estate behind your practice — and how to hold it to that standard. Written to be read by a partner, not skimmed by a marketer.
Cornerstone briefings
NTSELAT · Estate agents
Why your UK estate agency website probably fails the NTSELAT Material Information rules (2026)
UK estate agency listings carry NTSELAT Material Information duties most agency-built sites quietly fail, plus a data-residency gap on valuation forms. What a regulated-grade estate puts right.
23 Jun 2026
ICAEW · Accountancy practices
Why your UK accountancy website probably fails ICAEW confidentiality
ICAEW Section 114 confidentiality, AML duties, and UK GDPR: why agency-built UK accountancy websites silently breach the confidentiality duty on enquiry forms and client-document portals — and what a regulated-grade estate puts right.
1 Jun 2026
ICO / UK GDPR · Clinics
Why your UK clinic's website probably breaks GDPR
UK GDPR for clinics: most agency-built websites silently fail data-controller duties around special-category health data. Where a typical site breaks the rules — and what a regulated-grade estate puts right.
1 Jun 2026
SRA · Law firms
Why your UK law firm's website probably fails SRA confidentiality
SRA confidentiality and UK GDPR: why agency-built UK solicitor websites silently breach Rule 6 on enquiry forms and document uploads — and what a regulated-grade estate puts right.
1 Jun 2026
KCSIE · Schools
Why your UK school's website probably fails KCSIE
KCSIE safeguarding and child-data duties trip up most UK school websites built by agencies. Where a typical site breaks the rules — and what a regulated-grade estate puts right.
1 Jun 2026
Law firms
SRA · Law firms
The SRA clickable digital badge: what it is, why you must display it, and what it signals
A guide to the SRA digital badge (the clickable logo) for UK law firms: that displaying it is mandatory, what a visitor sees when they click it, who provides it, and how a firm registers for and embeds it correctly.
3 Jul 2026
SRA · Law firms
The SRA Transparency Rules: what solicitors must publish on their website
A plain-English guide to the SRA Transparency Rules for UK law firms: which practice areas are in scope for price publication, what cost and service information must appear, the complaints and regulatory information required, and where the SRA reads it all.
3 Jul 2026
SRA · Law firms
SRA Transparency Rule 6 implementation: the 2026 website checklist
The SRA Transparency Rules are checked against the public website, not the firm's internal records. This is the 2026 implementation checklist for Rules 1 to 6 — every clause named, the markup that satisfies it, and the structured-data signal that compounds it.
3 Jun 2026
Accountancy practices
MLR 2017 / HMRC AML · Accountancy practices
Anti-money-laundering for accountants: client due diligence, onboarding, and what your website intake must do
How the Money Laundering Regulations 2017 shape client onboarding for UK accountancy firms: when customer due diligence bites, the measures Regulation 28 requires, the before-you-start timing rule, five-year record-keeping, and what it all means for the intake form on your website.
3 Jul 2026
ICAEW · Accountancy practices
ICAEW Section 114 disclosures: what UK accountancy websites must show
ICAEW Section 114, AML, and PII rules set what every UK accountancy website must publish. The 2026 disclosure checklist: each clause, markup, and the fix.
3 Jun 2026
Clinics
CQC / ICO · Clinics
A CQC-ready clinic website: what to publish and what to keep private
What a CQC-registered clinic must publish on its website, what it must never publish, and where the line sits: Regulation 20A display of ratings, the duty of candour, and the UK GDPR limits on testimonials, photos, and patient data.
3 Jul 2026
NHS DSPT · Clinics
Does your private clinic need the NHS Data Security and Protection Toolkit (DSPT)?
A clear decision guide to the NHS DSPT for private UK clinics: who must complete it, who does not, how NHS contracts and NHSmail pull you into scope, what changed in Version 8, and the 30 June deadline.
3 Jul 2026
ICO / UK GDPR · Clinics
Health data on your clinic website: UK GDPR special-category rules in plain English
Special-category health data under UK GDPR, in plain English for UK clinics: the two-part lawful-basis test, why consent is usually the wrong basis for care, what a website form should never collect, and where the rules actually bite.
3 Jul 2026
ICO / UK GDPR · Clinics
Online booking for clinics without breaking data rules
How a UK clinic can offer online booking without breaking UK GDPR: why a booking is special-category health data, why the US-cloud booking tools most clinics use are the weak point, and what EU and UK-sovereign booking looks like.
3 Jul 2026
NHS DSPT · Clinics
DSPT compliance for UK clinics — the website-side checklist 2026
DSPT compliance checklist for UK clinics: private GPs, dentists, and physios in the NHS supply chain inherit DSPT website obligations most agencies never read.
3 Jun 2026
Schools
DfE · Schools
What every UK school must publish on its website: the DfE statutory list
A plain-English guide to what UK maintained schools, academies, and trusts must publish online under the Department for Education's statutory guidance: the required items, the deadlines, the academy-only additions, and the paper-copy duty.
3 Jul 2026
KCSIE · Schools
KCSIE-aligned school website audit: the 2026 checklist
KCSIE school website audit checklist 2026: the eight explicit website requirements UK schools must meet, each with its audit-pass marker and concrete fix.
3 Jun 2026