---
title: "Data Protection: What you can and can’t do"
description: Tom Gell from Trust Keith talks to Anthony Rose, Founder of SeedLegals, to help startup founders navigate the dos and don’ts of data protection.
image: https://resources.trustkeith.co/hubfs/Resources%20Webinar%20Data%20Protection%20What%20You%20Can%20And%20Can%E2%80%99t%20Do.png
---
[](https://www.trustkeith.co/)
- Product
- [Privacy OS](https://www.trustkeith.co/product/privacy-os)
- [Dedicated DPO](https://www.trustkeith.co/product/dedicated-dpo)
- [Automated Data Discovery](https://www.trustkeith.co/product/automated-data-discovery)
- [Intelligent Workflows](https://www.trustkeith.co/product/intelligent-workflows)
- [Staff Training](https://www.trustkeith.co/product/staff-training)
- [Global Risks & Controls](https://www.trustkeith.co/product/global-risks-controls)
- [Proportional Policies](https://www.trustkeith.co/product/proportional-policies)
- [Monitoring & Reporting](https://www.trustkeith.co/product/monitoring-reporting)
- Solutions
- [By Industry](https://www.trustkeith.co/solutions/industry)
- [By Team](https://www.trustkeith.co/solutions/team)
- [By Use Case](https://www.trustkeith.co/solutions/use-case)
- [By Privacy Regulation](https://www.trustkeith.co/solutions/regulations)
- [How it works](https://www.trustkeith.co/how-it-works)
- [Customers](https://www.trustkeith.co/customers)
- [Pricing](https://www.trustkeith.co/pricing)
- [Resources](https://resources.trustkeith.co)
- [Company](https://www.trustkeith.co/company)
[](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/24879685/859c2149-73c5-4ae5-a465-6c639d24614f)
[](https://www.trustkeith.co/)
- Product
- [Privacy OS](https://www.trustkeith.co/product/privacy-os)
- [Dedicated DPO](https://www.trustkeith.co/product/dedicated-dpo)
- [Automated Data Discovery](https://www.trustkeith.co/product/automated-data-discovery)
- [Intelligent Workflows](https://www.trustkeith.co/product/intelligent-workflows)
- [Staff Training](https://www.trustkeith.co/product/staff-training)
- [Global Risks & Controls](https://www.trustkeith.co/product/global-risks-controls)
- [Proportional Policies](https://www.trustkeith.co/product/proportional-policies)
- [Monitoring & Reporting](https://www.trustkeith.co/product/monitoring-reporting)
- Solutions
- [By Industry](https://www.trustkeith.co/solutions/industry)
- [By Team](https://www.trustkeith.co/solutions/team)
- [By Use Case](https://www.trustkeith.co/solutions/use-case)
- [By Privacy Regulation](https://www.trustkeith.co/solutions/regulations)
- [How it works](https://www.trustkeith.co/how-it-works)
- [Customers](https://www.trustkeith.co/customers)
- [Pricing](https://www.trustkeith.co/pricing)
- [Resources](https://resources.trustkeith.co)
- [Company](https://www.trustkeith.co/company)
[](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/24879685/859c2149-73c5-4ae5-a465-6c639d24614f)
[](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/24879685/859c2149-73c5-4ae5-a465-6c639d24614f)
 
# Data Protection: What you can and can’t do
Published by [Mitchell Omer](https://resources.trustkeith.co/author/mitchell-omer) on Apr 27, 2023, 2:58:45 PM
## A Trust Keith x SeedLegals event
---
Tom Gell, Head of Delivery at Trust Keith talks to Anthony Rose, Founder of [SeedLegals](https://seedlegals.com/), to help startup founders navigate the dos and don’ts of data protection.
[Watch the full video here](https://youtu.be/H8fazykAhI0).
---
## **DO: Factor data protection in early to reap future benefits**
Many start-up and scale-up businesses fail to consider data protection in the early days of business. Doing so means they miss out on not only legal benefits, but the positive financial impact that comes with building customer trust, winning enterprise accounts and building brand equity and differentiation from competitors.
**Tom, part of the founding team at Trust Keith, stresses the importance of building data protection into your business foundations, as early as possible.**
---
## **DO: Utilise lead generation lists for sales**
In a B2B context, you are able to contact leads with a **business email address**, as long as you have a **legitimate reason to contact.** Often, the legitimate reason is wanting to do business together as you have a solution to a problem you believe they face. Obtaining a list of contacts is a legitimate way to acquire data for B2B companies. If you’re asking the question: Can I still use lead generation lists to find new contacts? The answer is yes.
****
The rules start to change when we talk about **personal email addresses**. You cannot contact someone on a personal email address without their permission. This includes email addresses that may be scraped from a LinkedIn account.
Tom’s disclaimer: These rules apply to the UK and may differ by country. Germany, for example, is stricter.
---
## **DON’T: Use email addresses gathered for one purpose for other reasons**
For any communication, you rely on consent. The rule for which is that it must be **specific** and **informed**. Simply: what they are signing up for is clear and not hidden in a dense privacy notice.
Once you move outside of explicitly stated communications, you’re on shakier ground. If someone provides you their email address because they want X and you give them Y, they are unlikely to be happy about it.
No matter how clear you’ve been, you should always make it easy to unsubscribe. Individuals should have the opportunity to change their mind about what communications they receive at any time - and with ease.
---
## **DON’T: Ignore ‘right to be forgotten’ requests**
Depending on the frequency of which you receive these requests, a conversation to understand the motivation behind it can go a long way. Under the GDPR rules, any customer can write to you and request a record of all the personal data you hold for them.
This can be an onerous task - particularly if you store data in multiple systems, like a customer management system, email marketing software and across social platforms. The law is clear, **you must be thorough with these requests.** It’s an example where prevention is better than a cure - setting up good systems from the off makes it far easier to process these requests easily and compliantly.
There are other factors in a request to be forgotten - there is no absolute as it’s balanced across a lot of different laws. Anything that is considered to be necessary to defend against future legal claims for example, does not need to be deleted.
Time is of the essence for these requests, you want to act quickly so you are not seen to be deliberately delaying. However, you can go back to the individual making the request to understand what they are specifically looking for - they may not want 20 years of data for example, but rather everything relating to a specific instance.
---
#### **Looking for specific help navigating data compliance? [Reach out to the Trust Keith team today](https://meetings-eu1.hubspot.com/mitchell/website-talk-to-us-web-form-) to find out how we can help you scale your business with confidence.**
#### **About Trust Keith**
[Trust Keith](https://www.trustkeith.co/) helps founders save the time, energy and ambiguity of managing data protection themselves. We know first hand the importance of getting it right and at the same time not allowing it to overtly impact business-as-usual. We’re here to change the conception that data compliance is “boring” and “unsexy”, helping fast-growth scale-ups effortlessly navigate the complex world of compliance and focus on scaling their business with confidence.
#### **About SeedLegals**
[SeedLegals](https://seedlegals.com/) is the UK market standard for companies raising investment, incentivising teams with share options, applying for SEIS/EIS, and managing their cap table. With 1 in 6 early-stage funding rounds closed on SeedLegals, and more cap tables and EMI option schemes set up and managed on SeedLegals than on any other platform in the UK, we're proud that we've transformed the way companies start, grow and scale.
## Related Articles
## [Data Protection Audit: How to Assess Where Your Business Really Stands](https://resources.trustkeith.co/why-do-i-need-a-data-protection-audit-including-free-audit-assessment)
Quick answer: A data protection audit is a structured review of what personal data your business...
[Read More](https://resources.trustkeith.co/why-do-i-need-a-data-protection-audit-including-free-audit-assessment)
## [How Scale-Ups Can Get Privacy Right: Lessons from 100’s of Privacy Audits](https://resources.trustkeith.co/how-scale-ups-can-get-privacy-right-lessons-from-100s-of-privacy-audits)
For scaling businesses, privacy is often on the radar, and they want to get it right, but it’s not...
[Read More](https://resources.trustkeith.co/how-scale-ups-can-get-privacy-right-lessons-from-100s-of-privacy-audits)
## [Hiring With AI: How to Keep Recruitment Fast, Fair and Compliant](https://resources.trustkeith.co/how-to-stay-compliant-when-hiring-with-ai-trust-keith)
AI has quickly become part of most hiring processes. It’s summarising interviews, drafting job...
[Read More](https://resources.trustkeith.co/how-to-stay-compliant-when-hiring-with-ai-trust-keith)
## Curious how Trust Keith can help take data compliance off your plate?
[](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/24879685/859c2149-73c5-4ae5-a465-6c639d24614f)
[](https://www.trustkeith.co/)
[](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/24879685/859c2149-73c5-4ae5-a465-6c639d24614f)
- Features
- [Comply with data regulations](https://www.trustkeith.co/product/comply-with-regulations)
- [Discover your data risks](https://www.trustkeith.co/product/discover-data-risks)
- [Expert Advice](https://www.trustkeith.co/product/expert-advice)
- [Govern your data protection programme](https://www.trustkeith.co/product/govern-data-protection)
- [Manage breaches and incidents](https://www.trustkeith.co/product/manage-breaches-and-incidents)
- [Train your staff](https://www.trustkeith.co/product/train-your-staff)
- Product
- [How it works](https://www.trustkeith.co/how-it-works)
- [Marketplace](https://www.trustkeith.co/marketplace)
- [Pricing](https://www.trustkeith.co/pricing)
- [Customers](https://www.trustkeith.co/customers)
- Trust Keith
- [Company](https://www.trustkeith.co/company)
- [Talk to us](https://www.trustkeith.co/talk-to-us)
- [LinkedIn](https://www.linkedin.com/company/trustkeith/)
- [Privacy policy](https://trustkeith.trustkeith.co/)
© Trust Keith 2026. Trust Keith Ltd is a company registered in England and Wales number 12283797.
```json
{
"@context" : "https://schema.org",
"@id" : "https://resources.trustkeith.co/data-protection-what-you-can-and-cant-do#blogposting",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Mitchell Omer"
},
"dateModified" : "2024-04-03T16:07:32+0000",
"datePublished" : "2023-04-27T13:58:45+0000",
"description" : "Tom Gell from Trust Keith talks to Anthony Rose, Founder of SeedLegals, to help startup founders navigate the dos and don’ts of data protection.",
"headline" : "Data Protection: What you can and can’t do",
"inLanguage" : "en-GB",
"isPartOf" : {
"@id" : "https://resources.trustkeith.co/#blog",
"@type" : "Blog",
"name" : "Trust Keith Resources Blog",
"publisher" : {
"@id" : "https://www.trustkeith.co/#organization"
}
},
"mainEntityOfPage" : {
"@id" : "https://resources.trustkeith.co/data-protection-what-you-can-and-cant-do",
"@type" : "WebPage"
},
"publisher" : {
"@id" : "https://www.trustkeith.co/#organization",
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://cdn.prod.website-files.com/5f462e8160aa877216f7d4b7/642bcbad7735490755580d8d_trust-keith-logo.svg"
},
"name" : "Trust Keith",
"url" : "https://www.trustkeith.co/"
}
}
```