A DPO Take On The Global PHP Flaw
Critical PHP flaws were disclosed on 21 October 2026, and fixes exist. From that point, a controller running unpatched PHP cannot say the risk was unknown. Here is what Article …
It is not about compliance – it is about being a lawful, ethical and profitable business
Clients we have helped achieve and maintain compliance
At iCompli, we support businesses who are serious about compliance, with teams that operate across borders, adopt new technologies like AI, and want to do so responsibly.
We provide specialist advice and training on data protection (GDPR), advertising standards, ethical marketing, and responsible, ethical AI use. Our clients range from UK-based organisations to international teams who need to ensure their marketing practices meet both local and global regulatory requirements.
We understand assessing vendor risk, adapting to AI-driven tools, and maintaining transparency in increasingly complex environments. Our strength lies in making these demands manageable.

We bring decades of experience from legal, digital, and operational roles. We focus on how compliance works in practice. Whether you’re evaluating the use of generative AI in customer journeys, reviewing cross-border data transfers, or contentious subject access requests, we’ll give you advice that’s clear, practical, and actionable.
You are not alone. Get the support you need and use one of our CIPP/E certified data protection officers
Discover how we can make your compliance training deliver real insight and value.
Direct access to specialists who understand data protection, digital marketing and risk.
Providing a complete Global SSPA assessment service. Don’t let you Supplier Status ‘Go Red’
Need to edit CCTV for a subject access request? Do you have the time, expertise and auditing capability? We can help.
Haymarket C&IT “You made such sense and were, by far, the best speaker I have heard on the subject. And I’ve heard a lot recently as I try and grapple with the GDPR beast!”
F KerridgeReuters (UK) “Very clear and relevant to marketers – helps balance the ‘can’t be done’ approach.”
K C Leitch, Direct Marketing ManagerBarclays Bank “This course was very useful and the lecturer was excellent.”
P DewarRIAA Barker Gillette “I just wanted to say that Duncan Smith’s GDPR Presentation yesterday was absolutely super. He has a unique and engaging presentation style which made a daunting topic both understandable and accessible”
A HollweyIART “I just wanted to say that our session with Duncan went extremely well today. He was absolutely brilliant and I couldn’t recommend him highly enough.”
Mark ChapmanTowergate “For a working knowledge of legal matters relating to online marketing, don’t miss one of these briefings. Very Good.”
Martyn RoweAXA PPP Healthcare “Very good content, excellent speaker”
Anna-Louise Marsh-ReesLloyds TSB “Duncan is a very knowledgeable and very engaging and passionate speaker, a positive spin on a perceived negative subject”
Critical PHP flaws were disclosed on 21 October 2026, and fixes exist. From that point, a controller running unpatched PHP cannot say the risk was unknown. Here is what Article …
When responding to subject access requests, redaction of CCTV images can be very time consuming. There’s an alternative.
When Capita suffered a ransomware attack in March 2023, exposing the personal data of 6.6 million people, the outsourcing giant tried every defence in the book. They argued they were …
Schedule a 30 minute call with us to explore what you need,
and let’s see if we can help.
Or drop us an email at info@icompli.co.uk
