Data Protection

An organisation’s ability to respond promptly to security incidents has a huge impact on the costs it incurs. According to Ponemon Institute’s Cost of a Data Breach Report 2020, organisations that are able to detect and respond to an incident within 200 days save about $1 million (about £770,000) on…

The concept of data controllers and data processors has been around for years, but the roles come with clearly defined responsibilities under the GDPR (General Data Protection Regulation). In this blog, we take a close look at what a data controller and processor does and how they fit into your…

Since the start of the COVID-19 pandemic, experts have warned that the switch to remote working would negatively affect organisations’ ability to detect and contain security incidents. Of course, many employers didn’t have a choice. Government guidelines in the UK and many other parts of the world urged people to…

England’s coronavirus lockdown will all but end on 4 July, with the government allowing pubs, restaurants, cinemas, museums and hotels to reopen. The decision comes after steady progress in mitigating the spread of COVID-19 and the partial reopening of other sectors over the previous six weeks. But it doesn’t exactly…

Contrary to what you might have heard, cyber criminals pose a much bigger threat to organisations than employees. This is the stand-out finding in Verizon’s 2020 Data Breach Investigations Report, debunking speculation that internal actors should now be organisations’ top priority. The confusion perhaps stems from the fact that incidents…

The GDPR (General Data Protection Regulation) gives individuals more control over how their personal data is used. If your organisation processes personal data, the Regulation requires you to provide data subjects with certain information. This typically takes the form of a data privacy statement or privacy notice. But what is a data privacy…

Under the GDPR (General Data Protection Regulation), organisations must be vigilant about how long they retain personal information. If you keep sensitive data for too long – even if it’s being held securely and not being misused – you may still be violating the Regulation’s requirements. That might sound overly…

Twitter has suspended the dating app Grindr from its ad platform after discovering ‘insane violations’ of the GDPR (General Data Protection Regulation). According to a study by the NCC (Norwegian Consumer Council), Grindr shared significant amounts of sensitive personal data with advertisers without the explicit consent of users. The app’s…

If your organisation didn’t suffer a data breach last year, consider yourself one of the lucky few. The insurance firm Hiscox found that 61% of organisations were compromised in the past 12 months. This represents a 16-percentage-point increase over the past year, demonstrating how quickly the threat of data breaches…

Organisations are always looking for ways to improve their cyber security defences, but they often overlook the value of enrolling their employees on cyber security training courses. According to a study by Centify, 77% of UK workers say they have never received any form of cyber skills training Given that,…