A voluntary welfare organisation (VWO) provides welfare services and/or services that benefit the community at large. Well-known examples of VWOs include worldwide organisations such as Red Cross and the Salvation Army and local examples such as charities that provide social and welfare services to the community. The services they provide mean that they frequently collect a very wide range of personal data. Often this includes sensitive health and financial information.
Here is a list of common data protection mistakes made by VWOs that I have observed.