Senior Full Stack Product Engineer

Risk Ledger

ABOUT US Risk Ledger is developing a network of connected organisations, all working together to defend against cybersecurity attacks in the supply chain. Organisations rely on us to establish trust, through sharing their security maturity and visualising the risks posed by their supply chain ecosystem. And we’re already trusted by customers like ASOS, British Airways, BAE Systems and the NHS. We are putting together an amazing and talented team from a diverse set of backgrounds and skillsets to drive us towards our vision. Risk Ledger is built on the respect we have for one another and our users, united by our shared values and mission. Every one of us is still learning: it’s how we grow as individuals. We’re curious. We’re ambitious. And we’re humble and honest. At Risk Ledger, we aim high to find the best solutions we can and always put our users first. THE TEAM: You’ll join a cross-functional department of Software Engineers, Product Managers and Designers, all collaborating together with the wider business to achieve impactful product outcomes. Everyone is involved from day one in shaping opportunities that provide outsized value to both clients and suppliers on Risk Ledger, keeping our users as top priority. We care deeply about building the right thing, in order to fundamentally shift mindsets in the cybersecurity industry. We ship quickly & continuously in order to learn and iterate - whilst always pushing for the highest possible quality bar and keeping security and automation front and centre. The core of our stack is GoLang, AWS, and Vue.js, with modern design philosophies and a cloud-native approach. THIS ROLE Our Product Engineers play a crucial role in our user and product experience. You will be focused on solving innovative end-to-end product challenges in the best manner for our customers. Whilst you may have a natural inclination towards the backend or frontend, we expect you to have a good breadth of knowledge across the stack. You’ll delve into all aspects of our tech stack and product portfolio, having meaningful impact on our customers, and the overall success of the business. As a Senior engineer, you’ll be embedded in a squad, trusted to autonomously lead and own impact in your area with little oversight. You should expect to work across the full stack, taking ownership of mid-to-large initiatives and driving them through to completion. You’ll set a high standard in your squad through the quality of your work and your ability to coach and support those around you. You’ll be collaborating on a daily basis with designers, product managers, other engineers and the wider business to create a great product experience and continuously ship value to our users. You’ll be expected to set a strong example within your squad, championing best practices and helping to level up the engineers around you. You will also contribute to shaping our engineering strategy and practices. IN THE ROLE YOU WILL; * Collaborate to deliver an exceptional product. From understanding initial needs to crafting outstanding solutions, you’ll work directly with product managers and designers to bring ideas to life. And by that, we don’t just mean implement requirements, we expect our engineers to understand our market and customers in order to be able to influence product strategy and challenge assumptions. * Develop high quality systems and code. Working across our stack, you’ll design and develop the systems that underpin the Risk Ledger product and advance us towards our vision. You’ll lead system design efforts, consistently producing high-quality, well-documented and thoroughly tested code that sets the standard for your squad. * Move fast, with an eye for quality. You enjoy moving fast while maintaining an extremely high quality bar through testing, automation, discipline, consistency and best practice, whilst treading a careful line in pragmatism and cost-benefit analysis. * Enjoy being a generalist. We are building an amazing and talented team from a diverse set of backgrounds and skillsets. Our engineers are empowered to work in all areas of our platform, and across all areas of the business, directly contributing to the wider success of the company. * Support the growth of those around you. You will mentor and coach junior and mid-level colleagues, helping them level up their hands-on technical skills, system design thinking and problem-solving approach. * Have an impact. We’re a growing startup - so you’ll have the opportunity to get involved in areas outside of your day to day role. YOU’LL HAVE; * Worked in multiple engineering teams focused on building a customer focused SaaS product; weighing up delivering value to clients against technical excellence. * Deep experience with either backend or frontend development. * Backend language preferably Go; Or something like Java, C# or Python * Frontend: Typescript preferably with VueJS or React * In either case, reasonable additional experience with: * SQL and ‘NoSQL’ Data stores, with deep knowledge of data model design * Containers and Orchestration: Docker / Kubernetes * Cloud providers and cloud native services, preferably AWS * Event driven systems, and messaging services such as SQS/SNS, Kafka or RabbitMQ * Experience leading system design for non-trivial features or projects, evaluating trade-offs and ensuring alignment with team and business goals. * A desire to deeply understand our customers and the problems they face, in order to improve their day-to-day experience. * An ability to thrive in ambiguity, tackling problems that might not be well defined and without obvious solutions, and comfortable operating autonomously. * A keen sense of curiosity, with a natural drive to learn and grow. * A passion to work collaboratively with others. We like to work as a team, not a collection of individuals and we expect you to have the same mindset. Passion for pairing, mobbing and other XP principles are a strong plus. YOU MIGHT HAVE; * Experience mentoring or coaching other engineers, helping them grow their technical skills and confidence. * A startup/scale-up background. We’re not concerned if you have not worked in this environment, as long as you are willing to get stuck into the ambiguity of an early stage company. * Experience of data processing, machine learning, AI or integrating large datasets into a product. * Worked with observability solutions (Kibana, Grafana, Sentry). The perks: * 💰Competitive base salary * 📈Generous EMI equity package * 👌Private pension * ✈️28 days annual leave + bank holidays * 🏖Additional 30 days of unpaid leave per year to use as you wish * 🎆Ad-hoc companywide time off over the festive period * 🏥Private healthcare with AXA Insurance - including enhanced mental wellbeing coverage * 🏠Hybrid working policy, typically 2-3 days in the office * 👶Enhanced family (parental) leave - gender-neutral policy, 12 weeks paid leave * 👪5 days Caretaker's leave * 😷Enhanced occupational sick pay * 💻£500 WFH budget * 📚All the learning resources and books you want to aid in your personal development * 🎉 Regular socials to unwind and have some fun   Salary range £90,000—£120,000 GBP

CUBE

CUBE are a global RegTech business defining and implementing the gold standard of regulatory intelligence for the financial services industry. We deliver our services through intuitive SaaS solutions, powered by AI, to simplify the complex and everchanging world of compliance for our clients.    Why us? 🌍 CUBE is a globally recognized brand at the forefront of Regulatory Technology. Our industry-leading SaaS solutions are trusted by the world’s top financial institutions globally. 🚀 In 2024, we achieved over 50% growth, both organically and through two strategic acquisitions. We’re a fast-paced, high-performing team that thrives on pushing boundaries—continuously evolving our products, services, and operations. At CUBE, we don’t just keep up we stay ahead. 🌱 We believe our future is built by bold, ambitious individuals who are driven to make a real difference. Our “make it happen” culture empowers you to take ownership of your career and accelerate your personal and professional development from day one. 🌐 With over 700 CUBERs across 19 countries spanning EMEA, the Americas, and APAC, we operate as one team with a shared mission to transform regulatory compliance. Diversity, collaboration, and purpose are the heartbeat of our success. 💡 We were among the first to harness the power of AI in regulatory intelligence, and we continue to lead with our cutting-edge technology. At CUBE, You will work alongside some of the brightest minds in AI research and engineering in developing impactful solutions that are reshaping the world of regulatory compliance. PURPOSE: This role owns product strategy and execution for CUBE’s RegPlatform and PoweredBy Apps portfolio — Modular Apps, Agentic Apps, the MicroApps platform, and the CUBE App Store — the application surfaces through which enterprise clients and partners experience CUBE’s regulatory intelligence within the systems and workflows they already use. We are looking for a full-stack product builder — someone who obsesses over customer problems, drives discovery deeply, sets strategy, and ships. The role leads the Apps squad, owns the 0–1 rollout of CUBE’s MicroApps architecture, and brings agentic AI applications to market in partnership with CUBE’s agentic AI product team. It acts as the primary product voice for the Apps portfolio, engaging directly with enterprise clients and partners and contributing to commercial success and retention across both motions. KEY RESPONSIBILITIES: * Own product strategy and roadmap for CUBE’s RegPlatform and PoweredBy Apps portfolio, translating business priorities into quarterly delivery plans that serve both direct enterprise and partner-channel motions. * Lead deep customer and partner discovery to identify the most valuable problems to solve, validate solution direction, and ensure every meaningful product decision is grounded in evidence. * Lead the 0–1 rollout of CUBE’s MicroApps architecture, partnering with engineering and design to establish the foundational application capability that unlocks downstream use cases, agentic applications, and native integrations at pace. * Bring agentic AI applications to market, productising capabilities from CUBE’s agentic AI product team into application experiences that deliver measurable value to enterprise clients and partners, and set the bar for AI-powered regulatory workflows. * Deliver native lighthouse integrations into the collaboration and productivity platforms enterprise users and partners already operate in, bringing CUBE’s regulatory intelligence into the surfaces where regulatory work actually happens. * Establish and grow the CUBE App Store as a coherent, navigable surface that exposes the breadth of the Apps portfolio to enterprise customers and partners. * Drive user experience excellence across the Apps portfolio, ensuring application design meets platform standards and delivers intuitive workflows for regulatory professionals. * Partner with engineering squads to define requirements, prioritise backlogs, and ensure timely delivery of application capabilities that meet quality and performance standards. * Engage directly with enterprise clients (Tier 1 financial institutions) and partners to understand application usage, gather requirements, and validate product direction through discovery workshops and feedback sessions. * Conduct competitive analysis on enterprise application design, agentic AI experiences, app marketplaces, and collaboration-embedded regulatory tooling, contributing market intelligence to inform platform differentiation and feature prioritisation. * Own product analytics for the Apps portfolio, defining and tracking adoption, engagement, and workflow effectiveness metrics that demonstrate value across both motions. * Collaborate across product and engineering teams to ensure consistency, shared component reuse, and a cohesive CUBE experience across application surfaces. * Support commercial activities by contributing to client and partner demonstrations, value propositions, and go-to-market materials for the Apps portfolio. * Leverage AI tools to accelerate product delivery and documentation, contributing to the team’s AI-enhanced working practices and bringing demonstrable judgement on how agentic experiences should be designed, evaluated, and brought to market. SKILLS & COMPETENCIES: * End-to-End Product Ownership: A full-stack product builder — owns the whole product arc from discovery and strategy through to delivery, launch, analytics, and iteration. Not a delivery-only or feature-only PM. * Customer Discovery: Obsesses over customer problems. Demonstrably skilled in problem discovery, user interviews, jobs-to-be-done thinking, and translating ambiguous customer pain into clear product opportunities. Discovery is treated as a continuous practice, not a kick-off phase. * Domain Expertise: Develops deep knowledge of enterprise application design, microapp / micro-frontend architectures, agentic application patterns, app store dynamics, and the collaboration ecosystems in which enterprise users and partners operate. Becomes a subject matter expert for the Apps portfolio. * Agentic AI Product Building: Strong understanding of LLM and agentic AI capabilities applied to enterprise software. Brings substantive judgement on how agentic experiences should be scoped, designed, evaluated, productised, and brought to market — including the gap between AI capability and production readiness. * Strategic Execution: Translates platform strategy into detailed roadmaps and delivery plans. Balances 0–1 foundational build (MicroApps architecture) with shipping concrete application lighthouses that prove the architecture in market. * Requirements & Delivery: Defines clear product requirements, manages backlogs effectively, and ensures consistent delivery quality aligned with platform standards. * Data & Analytics: Defines and tracks product metrics, analyses usage patterns, and uses data to inform prioritisation and demonstrate product value across both motions. * Market & Competitive Awareness: Monitors the enterprise application, agentic AI, app marketplace, and collaboration-platform landscape, identifies market trends, and contributes intelligence to platform differentiation strategy. * Stakeholder Management: Builds effective relationships with engineering, design, and commercial stakeholders. Engages confidently with enterprise clients and partners, including in agentic AI discovery contexts. * AI-Augmented Working: Proficient with AI tools for productivity and delivery acceleration, using them strategically to compress cycle times and raise output quality. REQUIRED EXPERIENCE & QUALIFICATIONS: * Multiple years of product management experience in enterprise software, B2B SaaS, or platform applications. * Demonstrable track record as a full-stack product builder — owning the whole arc from discovery through to delivery and outcomes, not just one phase. * Strong customer discovery skills with concrete examples of finding meaningful customer problems and translating them into shipped products. * Hands-on experience building and shipping agentic AI products in an enterprise context — not just adjacent to AI features, but accountable for them: scoping, evaluating, productising, and taking them to market. * Experience shipping application products built on micro-frontend or modular application architectures, or a demonstrable track record of leading a 0–1 foundational application capability. * Experience with GRC platforms, regulatory technology, or financial services software preferred. * Proven track record of shipping application features that drive user adoption and measurable business outcomes. * Experience working directly with enterprise clients and partners, including discovery sessions and feedback workshops. * Strong analytical skills with experience defining and tracking product metrics. * Demonstrated proficiency with AI productivity tools for product management workflows. Interested? If you are passionate about leveraging technology to transform regulatory compliance and meet the qualifications outlined above, we invite you to apply. Please submit your resume detailing your relevant experience and interest in CUBE. CUBE is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Ophelos

OUR MISSION At Ophelos, we believe in a different way to deal with debt. One that puts empathy and understanding front and centre, approaching our customers as individuals — no matter what they’re going through. For too long, people in debt have borne the brunt of poor industry practices. Intimidating tactics, time-consuming customer service and a one-size-fits-all approach that overlooks the reasons anyone can fall into debt in the first place. Meanwhile, businesses suffer too. Poor customer experience translates to poor customer satisfaction, high churn rates, bad brand reputation and ultimately missed opportunities. That’s why we’re taking a radically different approach. Pioneering an industry-first AI-native collections platform, we build products that help individuals clear their debts in a way that suits them, whilst providing businesses with an improved customer experience and game-changing insights into their customer base. Since our launch in 2021, we’ve worked with some of the UK’s leading companies, including Octopus, Scottish Power and Philips — helping millions of people move toward a more stable, debt-free future. In 2023, we were acquired by Intrum, Europe’s biggest credit management service and have begun the next phase in our growth — expansion into 17 European markets over the next two years. SENIOR PRODUCT ENGINEER (FULL STACK) We are seeking an enthusiastic and ambitious Senior Product Engineer with a keen eye for quality to join our growing Engineering function. You will be joining our Payments squad, responsible for building out our cross-market flexible Payments capability. This is a team which has recently transitioned to being "LLM-first" in their working style, so you would be joining at a critical moment to shape our ways of working and our approaches to LLM-based tooling. At Ophelos, we don't have traditional product or design functions — our engineers own the full problem, from identifying what needs to be built through to shipping and iterating on it. If you're energised by that kind of end-to-end ownership and want to operate closer to the product than most engineering roles allow, this is the role for you. In this role, you'll get to: * Design, implement and deliver software features with full ownership from start to finish — from problem definition through to production. * Take genuine product ownership: identify user and business needs, define solutions, and make pragmatic trade-offs — not just execute on a brief handed to you. * Have real opinions about how things should be built, and back them up. We want engineers who push back — on a design pattern, a tool choice, or a suggestion from an AI agent — when the second- and third-order consequences don't stack up. * Work in an environment that's largely backend-heavy right now (though that mix will evolve), with the autonomy to shape how it's built. * Collaborate as part of a close & multi-disciplinary team. Your work will have meaningful and measurable impact on our organisation and products. * Own business-critical components and ensure their stability and maintainability — and know how to prove it, through the numbers you track. * Mentor other members of the team to ensure technical excellence and continuously raise the bar when it comes to engineering standards. * Share your ideas with the team and build products that make an incredibly impactful difference to society and people's lives. Ophelos is an AI-first technical organisation and effective use of LLMs is central to how our engineers work. Claude Code and other agentic tools are critical to our toolbox, and we're as interested in engineers who bring their own AI-assisted workflows and habits to the team as we are in engineers who already use ours. The right person for this role is excited by this world, uses it daily in their own work — professionally or personally — and enjoys helping others get better at it too. Stack-wise, we run TypeScript, Python, and Ruby at various levels. For this role we're really seeking a polyglot Software Engineer for whom specific implementation language is not critical. More broadly, our stack includes: * A modern web application framework (we use FastAPI; comparable experience elsewhere is fine) * A relational database layer (we use PostgreSQL) * Workflow orchestration and data infrastructure tooling * AWS and container-based cloud infrastructure * Claude Code for LLM-first software engineering * Datadog for monitoring & observability Ophelos operates hybrid working, and believes face-to-face working time is essential for planning and alignment. Our teams spend three days each week working in-person from our comfortable office near Liverpool Street in London. ABOUT YOU More than anything we are interested in your general experience as a software developer and your approach to solving problems. The ideal candidate thinks like a product owner and builds like an engineer — someone who is energised by ambiguity, comfortable shaping the problem as much as solving it, and who takes personal pride in the real-world impact of what they ship. Some experience in the following is important for this role: * At least 5 years of experience in full stack engineering, with real depth somewhere in your backend work - this role skews backend-heavy today. * Experience with TypeScript, Python, Ruby, or a similarly high-level language, and comfort designing and integrating APIs - particularly in environments where data sensitivity or regulation raises the stakes. * Breadth across problems and systems tends to serve people better here than narrow specialisation in one area - we'd rather hear about the range of things you've owned than the depth of one niche. * You enjoy learning new technologies and are passionate about experimenting to figure out how to build things in a better way. * You're comfortable working from a problem statement rather than a fully specced brief - you can move from ambiguity to a clear technical approach independently, and you actively contribute to shaping what gets built, not just how. * Genuine enthusiasm for using the latest LLM tools — Claude Code, Cursor, Codex or similar — is critical, as is the intent to keep developing your skills as the agentic software engineering landscape evolves. Bonus points if you've helped teammates or a wider team get better at this too. * You don't just ship - you measure. You can point to how you know something you built actually worked, whether that's a business number, a reliability metric, or both. * Attention to detail, intellectual curiosity & a willingness to embrace the changing technical landscape we find ourselves in. * You are excited about Ophelos' mission to support households and businesses to break the vicious debt cycle. Experience in fintech, or in regulated or compliance-heavy environments more broadly, is a genuine bonus - but we've hired brilliant people here without it, so don't rule yourself out if that's not your background. ABOUT OUR TEAM Ophelos launched in June of 2021, backed by investors such as AlbionVC, Connect Ventures and Fly Ventures. In 2023, we were acquired by Intrum, Europe’s biggest credit management service. Our growing team has team helped build some of the world’s most successful businesses, including the likes of Monzo, Google, Oracle, ASAPP, IBM and more — in addition to pioneering innovative products, sitting at the intersection of enterprise, financial technology, artificial intelligence and academia, working with institutions such as Oxford University, the University of Amsterdam and the University of Hong Kong. OUR VALUES Supporting customers and businesses to improve their financial health is a long-term mission. Our company values act as our north star, steering our every move as an organisation and are the backbone of our unique company culture. Our values and culture allow us to stay true to our larger purpose, even as we continue to grow at a rapid pace. Customers and Clients first – We exist to help real people move through debt and to get clients paid back. This commitment drives how we design products, deliver services, and interact with customers and clients daily. Dream big – We have ambition and drive to succeed - we’re not just raising the bar, we’re confidently asserting ourselves as the benchmark. Get it done – We’re decisive and embrace a sense of urgency; we don’t let opportunities get away from us. We’d rather act quickly and take informed risks, iterating and learning as we go.  Win as one - We work as one team, supporting each other and aiming for shared goals. At Ophelos, the team isn’t just individual departments - it’s all of us together.  We challenge and support each other because we care about everyone’s growth and success.  Ophelos is committed to creating a diverse work environment and is proud to be an equal opportunity workplace, providing equal employment and advancement opportunities to all team members. We are building an environment where every Ophelos team member can thrive, feel a sense of belonging, and do the best work of their careers. We value diversity and recruit, hire, and promote individuals solely based on talent, qualifications, competence, and merit. We evaluate candidates without regard to race, colour, religion, age, sex, sexual orientation, gender identity, national origin, disability, or other protected characteristics as required by law and as a matter of our company values. GDPR NOTICE  When you apply to a job on this site, the personal data contained in your application will be collected by Ophelos ("Controller"), located at 1 Finsbury Ave, London EC2M 2PF, and can be contacted by emailing support@ophelos.com. Controller's data protection contact is Kofi Barnes, who can be contacted at support@ophelos.com. This notice explains how we process your personal data throughout our recruitment process, including at the interview stage described below. Applying for a role with Ophelos is subject to the practices described in this notice — it is not a separate agreement you sign, but a description of how the recruitment process works. You won't be given a separate notice at each stage; Ophelos retains discretion over which of the described tools and processes are applied to any given application or interview, within the purposes set out below. This discretion does not extend to introducing automated decision-making without human review — that is addressed separately below. What we use your data for Your personal data will be processed for the purposes of managing Controller's recruitment-related activities, which include reviewing applications, setting up and conducting interviews and tests, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring process. As part of this process, we use software tools — including AI-assisted tools — to help us organise, screen, and evaluate applications and interviews. This includes: * Automated analysis of CVs and application materials to identify relevant skills and experience * Automated analysis of interview transcripts to help summarise and score responses (see "Interviews" below) * Generating scores, summaries, or insights to assist our recruiters Currently, these AI-assisted outputs are advisory only. A human recruiter reviews every application and every AI-generated score or summary before any decision is made, and no application is filtered out or rejected by an automated process alone. We may in future use automated tools to make, or take part in making, decisions about your application without human review at that stage, if we do so in a way that complies with applicable law at the time — for example, by obtaining your explicit consent, or where the decision is necessary for entering into a contract with you, and in either case only with appropriate safeguards, including your ability to request human review of, and to contest, that decision. If we intend to introduce this, we will update this notice and separately inform you before it applies to your application — this notice alone does not authorise it. We also use historical, aggregated recruitment data to improve our processes generally — for example, to better understand which factors tend to be associated with successful hires. Where this involves data from past applicants, it is anonymised or aggregated before use, and is not used to make any decision about a specific individual. Such processing is legally permissible under Art. 6(1)(f) UK/EU GDPR as necessary for the legitimate interests pursued by the Controller: the solicitation, evaluation, and selection of applicants for employment, and the improvement of Controller's recruitment processes. Interviews — recording and transcription If you're invited to an interview conducted by video or phone call, it will be recorded and automatically transcribed as a standard part of our recruitment process — this is described in this notice, which applies to your application as explained above. Where an interview is recorded: * The interview will be recorded and transcribed using our video-calling provider (Google Meet). * The transcript will be processed by AI tools (including models provided by Anthropic and Google) to help generate a summary and structured notes for the interview panel, and to help train and improve our own recruitment tools as described above. * The recording, transcript, and any AI-generated summary will be stored on Ophelos's systems (hosted via Cloudflare) and in Greenhouse. * A human interviewer/panel always reviews the AI-generated summary as part of forming their own assessment — it is a starting point for the panel, not a decision in itself. Recording and transcribing interviews in this way is necessary for us to evaluate all candidates fairly and consistently, and is carried out under our legitimate interests (Art. 6(1)(f) GDPR) in running a fair, well-documented recruitment process. Who we share your data with Your personal data will be shared with the following processors, engaged by Controller to help manage its recruitment and hiring process: * Greenhouse Software, Inc. — applicant tracking system (United States) * Google LLC — video interview hosting/recording (Google Meet), and AI models used to help analyse application and interview materials (United States) * Anthropic, PBC — AI models used to help analyse and summarise application and interview materials (United States) * Cloudflare, Inc. — infrastructure and data storage supporting our recruitment tools [confirm storage region before publishing] We use application and interview data, including through AI-assisted tools, to train and improve our own internal recruitment tools and models — for example, to refine how we identify relevant skills and experience, and to better understand what tends to be associated with successful hires. This is part of how we evaluate and improve our recruitment process on an ongoing basis. The third-party AI providers who process this data on our behalf do not use it to train their own general-purpose AI models — it is used only to generate the specific outputs described in this notice. International data transfers Because the above providers are located in or transfer data to the United States, if you are located outside the United States, your personal data will be transferred to the United States once you submit it or once your interview is processed. Where the European Commission has not made an adequacy determination covering such a transfer, it is subject to appropriate safeguards, including Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework where the recipient is certified. You can obtain a copy of the relevant safeguards by contacting support@ophelos.com. How long we keep your data Your personal data, including any interview recordings, transcripts, and AI-generated summaries, will be retained for the duration of the recruitment process and for 24 months afterwards, to allow us to consider you for other roles and manage any related legal claims, after which it will be deleted or anonymised. You can request earlier deletion at any time by contacting support@ophelos.com. Your rights Under the GDPR, you have the right to request access to your personal data, to request that it be rectified or erased, and to request that processing be restricted. You also have the right to data portability and the right to object to processing based on legitimate interests, including interview recording — though for the reasons explained above, we may not be able to progress an application where a candidate objects to standard recording of the interview stage. In addition, you may lodge a complaint with an EU or UK supervisory authority (in the UK, the Information Commissioner's Office).