Data protection remains high on the agenda, as the ICO continues to take action against organisations who fail to fulfil their obligations under the law. Victoria Cetinkaya provides a timely reminder of data controller obligations under the current law, together with a look at the changes (and uncertainties) afoot for the future data protection framework in the UK. The session was part of Secure South West 7 at Plymouth University on 5 October 2016. [(CC) BY-NC-SA 2.0 UK]