After ten years navigating data protection in the charity sector, I can confidently say (as i did in a recent article linked here) GDPR wasn’t just another box-ticking exercise. When the regulations landed in May 2018, they fundamentally transformed how we handle donor information – and frankly, that transformation was long overdue.