
For example, charities must ensure ethical implementation, especially when dealing with vulnerable individuals. The authors urge charities to update privacy notices, segment databases, and conduct legitimate interest assessments.
While the sector welcomes the move, it follows years of scrutiny over intrusive fundraising. The authors stress that legacy supporters’ data cannot be repurposed under the new rule and that charities must tread carefully to avoid reputational harm. The Information Commissioner's Office is expected to issue further guidance before the law takes effect.