Three things arriving at once, explained properly.
A data protection law with commencement dates that have started, ESG questionnaires arriving from customers, and the question nobody asks until the morning it matters. Each of these gets a hub: what the primary sources actually say, what a system has to be able to do, what it costs, and a check you can run in two minutes.
What the Act and the notified Rules actually require, and what a system has to be able to do.
Read the hub ↗SRSustainability readinessWhere supplier ESG requests really come from, what is voluntary, and what answering costs.
Read the hub ↗CRContinuity readinessWhat breaks, how long you can stand it, and whether the restore has ever actually been run.
Read the hub ↗What a hub is, and what it is not
Each one is written from primary sources — the Act, the notified Rules, the circular, the standard — and every source is listed at the bottom of the page it is used on. Where we have not measured something, the page says so rather than borrowing somebody else’s number.
None of it is legal advice, and we are not anybody’s lawyers. We are an engineering studio. What we can tell you is what a system has to be able to do; whether you meet an obligation is a question for counsel, and it depends on facts about your business that a web page does not have. The checks on these pages report what is in place and what is not. They do not issue verdicts, and they are built so that they cannot.
The checklists are free and there is no form in front of them. If you want to talk, the diagnostic call is thirty minutes and there is no pitch on it — tell us what you are dealing with.