Understanding the Mailing Preference Service: What It Is (and When You Need It)

By |2025-11-12T13:47:06+00:00November 12th, 2025|

The Mailing Preference Service (MPS) is one of the most important suppression files in UK direct mail. Managed by the Data & Marketing Association (DMA), MPS allows consumers to opt out of receiving unsolicited mail, that is, marketing they did not ask for and from companies they have no existing relationship with. In short, if you are sending cold mailings, the MPS is your best friend. It protects consumers’ preferences and keeps you compliant with best practice and data protection principles. When You Need to Use MPS Any business using third-party or prospect data for direct mail campaigns must screen against the MPS before mailing. This ensures that anyone who has opted out of receiving unsolicited marketing is removed from [...]

The Software Bureau Retains ISO 27001:2022 Certification

By |2025-10-09T11:27:26+00:00October 9th, 2025|

We’re proud to announce that The Software Bureau has once again successfully retained its ISO 27001 certification. This achievement isn’t just a piece of paper on the wall for us. It’s a reflection of how deeply Information Security runs through everything we do. We take data protection seriously because we know the devastating impact that a breach of GDPR can have on any business – including our own. Protecting information isn’t just about compliance; it’s about trust, integrity and responsibility. Our dedicated Information Security team leads the charge. They hold senior positions within the business and carry significant responsibility to ensure our processes, systems and people remain aligned with the highest standards of security. Their expertise and vigilance mean our [...]

What’s Going on with the Data (Use and Access) Bill?

By |2025-05-14T11:02:06+00:00May 14th, 2025|

On 14th May 2025, the UK’s Data (Use and Access) Bill reached a critical stage in Parliament, following heated debate over its implications for AI, copyright, and how data is shared. While the headlines have focused on creative rights and artificial intelligence, there’s a bigger picture emerging — one that matters to anyone involved in managing, using, or maintaining quality data. Originally introduced in late 2024, the bill aims to improve how data is accessed and used across the public and private sectors. It supports initiatives like digital ID systems and encourages wider data sharing to unlock innovation. But as it moves between the House of Commons and the Lords, disagreement over specific provisions — particularly a new transparency requirement [...]

Data Governance Update: New Data Bill Aims to Shape the Future of the UK Data Landscape

By |2024-10-29T11:02:35+00:00October 29th, 2024|

It’s been a while since we’ve provided an update on data governance and the long awaited DPDI, because since the election there has been little in the way of news. However, last week it was announced that under the new government, DPDI has morphed into the Data Use and Access Bill. Unveiled by the Department for Science, Innovation, and Technology, this bill is positioned to integrate technology and data protection into the economy’s core, fostering economic growth, streamlining public services, and enriching lives. With an expected £10 billion economic boost projected over a decade, the Bill is set to transform how data is used across sectors. The DMA has actively participated in discussions around the Bill, advocating for provisions that [...]

A Data Protection Update

By |2024-06-04T08:32:56+00:00June 4th, 2024|

Last week marked the sixth anniversary of the General Data Protection Regulation (GDPR), a landmark in data protection that revolutionised how personal data is handled across Europe. However, as many people reflect on GDPR's impact, the future of data protection regulation in the UK hangs in the balance following the recent mothballing of the Data Protection & Digital Information Bill (DPDI). The Demise of DPDI The Government’s decision to exclude the DPDI from its “wash up” process, a fast-track mechanism for essential legislation before Parliament is dissolved, has led to significant uncertainty. Initially introduced in 2021, the DPDI aimed to modernise the UK's data protection framework. However, it was still navigating the committee stage in the House of Lords when [...]

Those most likely to donate as a result of Direct Mail

By |2023-07-21T09:18:23+00:00July 21st, 2023|

A new study, The Future of Direct Mail 2023, reinforces the effectiveness of direct mail, with the overwhelming finding that 81% of people engaging with direct mail in some way. Almost two thirds were found to have purchased a physical product as a result of receiving a piece of DM, 43% took advantage of a discount or special offer that was promoted through the mail, 35% applied for a financial product whilst 25% donated to charity as a direct result of a call to action within a mail pack. With charity fundraising suffering as a result of the cost-of-living crisis, understanding the impact of direct mail and who is most likely to respond is incredibly valuable. The report finds that, [...]

Data processing security is key data concern for 2023

By |2023-07-11T13:01:31+00:00July 11th, 2023|

Our latest review of the GDPR enforcements undertaken by the ICO over the past 12 months reveals that data processing security and right of access are the most common infringements since July 2022. Almost a third (30 per cent) of the 30 recorded infringements this year pertained to Article 5, the principles relating to data processing and of these 21 per cent were for Article 5 (f) which specifies that personal data must be processed in a manner that ensures appropriate security. Sixteen per cent contravened Article 15: Right of Access by the data subject and 15 per cent were non-compliant to Article 12 (data transparency) and Article 32 (security of processing). Last year the lion’s share of enforcements (61 [...]

Has MOVEit made you think more seriously about data governance?

By |2023-06-19T13:04:59+00:00June 19th, 2023|

If not, it should and here’s why As the days roll by it is becoming increasingly clear that the MOVEit vulnerability which was discovered earlier this month is having very, very far-reaching repercussions. A growing list of UK companies have been affected by the cyberattack on payroll service provider Zellis, which occurred via one of its third-party suppliers (Moveit), this has resulted in hundreds of thousands of staff members at these organisations having their personal information posted on the dark web. The hack was first made public when US-based firm Progress Software identified that hackers had discovered a method of breaking into its MOVEit Transfer tool, a widely used software which enables users to move files from one place to [...]

Go to Top