Series

Compliance for Small Business

A series on the compliance obligations small businesses get asked about: what GDPR and NIS2 cover, how to assess the vendors you depend on, when a breach has to be reported, and what belongs in a privacy policy. Educational, not legal advice.

1. NIS2 Requirements and GDPR for Small Business: What the NIS2 requirements are, how they sit alongside GDPR, and which parts realistically reach a small business, including the supplier questions that arrive from customers inside the directive's scope.
2. What Is the NIS2 Directive? Scope, Sectors and Deadlines: What the NIS2 directive is, which sectors and company sizes it covers, what it asks organisations to do, and how its rules reach small businesses through their customers.
3. Vendor Risk Assessment: A Practical Walkthrough: How to run a vendor risk assessment without a procurement team: which suppliers to assess, what to ask them, how to score the answers, and what to do when a critical vendor scores badly.
4. Data Breach Notification Requirements: Who to Tell and When: Who a small business may need to notify after a data breach and how quickly: regulators, affected individuals, insurers, and customers. What the common timelines are, and how to decide before an incident forces it.
5. Privacy Policy Template for Small Business: What to Include: What a small business privacy policy needs to contain, section by section, and why a generated template usually needs editing before it describes what your business does with data.