EDPB: ICO too strict on data protection impact assessments
The opinion, issued by the European Data Protection Board (EDPB), differs from guidance the UK’s Information Commissioner’s Office (ICO) has […]
guidance
How to draft a GDPR-compliant retention policy
You need to be able to clearly define the period for which personal data will be stored or, if not […]
How to comply with the right to erasure
Now that the General Data Protection Regulation has come into force, organizations need to be able to process requests to […]
Managing a data hack: the dos and don’ts
Panic is not an effective data security tool. When your company’s defences have been breached and your confidential information is […]
Latest bits on privacy and cybersecurity #2
This is latest collection of most interesting articles, reports and publications on privacy, data protection and cyber-security.
UK’s DPA Clarifies Position in Respect of International Transfers Under the GDPR
The UK’s supervisory authority for data protection, the Information Commissioner’s Office (“ICO“), has published guidance in relation to international transfers […]
Three frequently asked questions about data breach reporting
One of the key reasons that organisations are anxious about the General Data Protection Regulation (GDPR) is its strict data […]
Classified: The Art of Restricting Personal Data
Despite our hesitation, we routinely provide the very same personal information to both critical and noncritical requests. We shouldn’t. Personal […]
Do I need a Data Protection Impact Assessment to avoid GDPR fines?
Essentially, Data Protection Impact Assessment (DPIA) is a tool that is proposed under the General Data Protection Regulation (GDPR) for […]
ICO publishes new guide for students to demand more information about their exam results
The United Kingdom’s Information Commissioner’s Office has published a new guide for students on demanding more information about their exam […]
Faces as data: A guide to video surveillance and the GDPR
With personal data and its protection, we usually think about names, addresses, phone numbers birthdates etc. first, then other sensitive […]
A look at data transfers under different data protection regulations
Organizations are subject to different regulations to protect personal data that they communicate to overseas recipients for various reasons, including […]