Managing data protection risks in the context of sensitive documentaries and productions can be extremely challenging and, to date, there has been little industry guidance or precedent to assist. In this linked article, we look at the lessons to learn from the UK Information Commissioner's Office enforcement action against True Visions Productions.