Why The Software Bureau Should Be Your First Choice for Data Processing, Cleansing & Postal Sortation Software

By |2025-11-04T06:48:18+00:00November 4th, 2025|

Choosing a software provider for data processing and mail sortation is not just about ticking boxes. It is about ensuring your business is protected, supported, and future proofed. The Software Bureau has earned its place as a trusted partner for organisations across the UK. Our software processes over 2 billion items annually, powering more than 75% of all UK advertising mail. That scale is no accident. It is the result of years of refinement, investment, and industry insight. Led by Experience Our management team brings together over 100 years of hands-on experience in software development, direct mail, data management, and production. We understand the pressures and complexities of the sector because we have worked in it. That experience shapes every [...]

Third Party Data Breaches Highlight the Need for Strong Vendor Security

By |2025-10-20T16:16:30+00:00October 20th, 2025|

At The Software Bureau, we take information security seriously. Our recent retention of the ISO 27001:2022 certification reflects our ongoing commitment to protecting sensitive data and maintaining the highest standards of security across our operations. However, the recent data breach involving LNER’s customer communications database, managed by a third party supplier - https://www.printweek.com/content/news/lner-data-accessed-in-customer-comms-breach, is a stark reminder that security must extend beyond internal systems. Reports indicate that unauthorised access was gained through a supplier, compromising customer data and raising serious concerns about vendor oversight. This incident reinforces a critical point. Your organisation’s data security is only as strong as the weakest link in your supply chain. While The Software Bureau does not share any customer data with third parties, we [...]

The Software Bureau Retains ISO 27001:2022 Certification

By |2025-10-09T11:27:26+00:00October 9th, 2025|

We’re proud to announce that The Software Bureau has once again successfully retained its ISO 27001 certification. This achievement isn’t just a piece of paper on the wall for us. It’s a reflection of how deeply Information Security runs through everything we do. We take data protection seriously because we know the devastating impact that a breach of GDPR can have on any business – including our own. Protecting information isn’t just about compliance; it’s about trust, integrity and responsibility. Our dedicated Information Security team leads the charge. They hold senior positions within the business and carry significant responsibility to ensure our processes, systems and people remain aligned with the highest standards of security. Their expertise and vigilance mean our [...]

Update on the UK Data (Use & Access) Act – and Why Clean Data Is More Crucial Than Ever

By |2025-06-18T11:26:49+00:00June 18th, 2025|

On 11 June 2025, UK Parliament completed the final round of “ping‑pong” over the Data (Use and Access) Bill in the House of Lords, paving the way for Royal Assent and its conversion into the Data (Use and Access) Act 2025 This is a major milestone in updating the UK’s data protection landscape post‑Brexit—and it signals that smart, responsible data use is now firmly on the national agenda. What You Should Know The Act introduces several important refinements: A staggered roll‑out of updated UK GDPR provisions, including relaxed rules around cookies, Data Subject Access Requests (DSAR), automated decision‑making, and strengthened provisions for scientific research A formal category of “recognised legitimate interests”, clarifying when data can be used without a full [...]

The Data Breach Epidemic: A Wake-Up Call for Data Hygiene 

By |2025-06-02T14:59:09+00:00June 2nd, 2025|

Earlier this month, cybersecurity researcher Jeremiah Fowler uncovered an unsecured database containing over 184 million login credentials. This trove included usernames and passwords for major platforms such as Google, Apple, Microsoft, Facebook, Instagram, and Snapchat, as well as sensitive data from bank accounts, health services, and government portals. Alarmingly, the database was unencrypted and publicly accessible, making it a "cybercriminal's dream".  Closer to home, you can’t fail to have missed M&S’ significant cyberattack, leading to the theft of customer data, including contact details and order histories. The breach disrupted online operations and is projected to cost the company approximately £300 million in lost operating profit. The attack was reportedly executed by the cybercriminal group Scattered Spider, exploiting vulnerabilities in third-party [...]

Data Powers Progress – But People Still Make It Happen

By |2025-04-01T12:54:21+00:00April 1st, 2025|

We’re living in a data-first world. Whether it’s driving marketing campaigns, optimising customer experiences, or ensuring regulatory compliance, data is the fuel behind every smart decision. But while automation and AI are accelerating what’s possible, it's the human element that ensures data is collected properly, understood, and turned into action. Striking the right balance between automation and human insight is now a defining trait of high-performing organisations. Machines can process at speed and scale, but people provide context, creativity, judgement, and communication. That balance is also reflected in LinkedIn’s latest report on the 15 fastest-growing skills in the UK. Unsurprisingly, AI literacy and the ability to work with large language models are rising rapidly. But so too are deeply human [...]

23andMe Collapse Sparks Urgent Questions About Data Responsibility

By |2025-03-26T11:15:47+00:00March 26th, 2025|

Once a Silicon Valley darling, DNA testing company 23andMe has now gone into administration—leaving behind not just a troubled balance sheet, but a trove of highly sensitive personal data. Millions of customers entrusted the firm with their genetic information, family histories, and health predispositions. Now, the burning question: what happens to that data? The debate has ignited fears over data ownership, consent, and corporate accountability. In the UK, administrators are bound by GDPR, but the worry remains that valuable genetic data could be sold to settle debts, repurposed without consent, or exposed through weak security controls. This situation highlights a deeper issue: data stewardship isn’t just a technical obligation—it’s a moral one. Companies handling sensitive personal data, especially of the [...]

Why Data Hygiene Should Be a Top Priority for Local Councils

By |2025-03-03T11:15:34+00:00March 3rd, 2025|

Local councils handle vast amounts of personal data, from council tax records to voter registration and social services. Yet, poor data hygiene remains a widespread issue, leading to inefficiencies, wasted resources, and non-compliance with data protection laws. Only recently one local council hit the headlines for all the wrong reasons - mistakenly telling one of their constituents that he was dead! Mistakes happen, but at a time when public sector budgets are stretched, councils simply cannot afford to overlook data accuracy. Every inaccurate record comes at a cost, whether through: Wasted communications – Sending letters to people who have moved or passed away is not just inefficient, it reflects poorly on the council’s ability to manage records. Delayed services – [...]

ICO launches Direct Marketing Advice Generator

By |2025-02-12T10:58:31+00:00February 12th, 2025|

The ICO has launched a Direct Marketing Advice Generator, designed to help organisations quickly understand their obligations under the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. By answering a few simple questions, businesses can receive tailored compliance advice in minutes, covering everything from email and SMS marketing to social media, telemarketing, and direct mail. Why Does This Matter? Failure to comply with marketing laws doesn’t just lead to disgruntled customers—it can result in hefty fines and reputational damage. In recent enforcement action, the ICO fined Money Bubble Ltd and Breathe Services Ltd a total of £290,000 after they collectively made over 4.5 million nuisance phone calls to people who had opted out. Another investigation led to Quick [...]

Charities Potentially Secure £290m Boost Following Data Bill Amendment

By |2025-01-24T10:51:10+00:00January 24th, 2025|

Charity marketers are celebrating a major win after the UK Government backed an amendment to the Data (Use & Access) Bill, extending the ‘soft opt-in’ provision to third-sector fundraising. This development follows a robust lobbying campaign led by the DMA. Soft-opt in becoming a reality for charities The ‘soft opt-in,’ a rule allowing organisations to send marketing emails to individuals who have previously engaged with them, was initially excluded from the new bill after being present in its predecessor, the Data & Digital Information Bill. In response, the DMA issued a letter in November to the Secretary of State for Science, Innovation & Technology, Peter Kyle, urging the Government to reconsider. Research prepared to support the amendment found that  charities [...]

Go to Top