Data Protection

Organisations are always looking for ways to improve their cyber security defences, but they often overlook the value of enrolling their employees on cyber security training courses. According to a study by Centify, 77% of UK workers say they have never received any form of cyber skills training Given that,…

The 2018 British Airways data breach was one of the first to occur under the GDPR (General Data Protection Regulation), so the ICO (Information Commissioner’s Office)’s investigation into the incident was seen as a test case. It was therefore unsurprising that when the regulator announced its intention to fine British…

HR plays a crucial role in an organisation’s GDPR (General Data Protection Regulation) compliance. The department is full of personal data, whether it’s of employees, their next of kin or candidates responding to job adverts. With such an active role in processing sensitive information, HR staff must make sure they’re…

You might be surprised to learn that CCTV footage is subject to the GDPR (General Data Protection Regulation). The Regulation isn’t just about written details, like names and addresses; it applies to any information that can identify someone. That includes pictures and videos, which is why you should be careful…

The European Court of Justice has ruled that Google doesn’t have to apply the right to be forgotten globally. The right, which was enshrined in EU law in 2014, allows data subjects to request that organisations delete personal data related to them if it’s no longer accurate or relevant. A…

Among the uncertainty surrounding GDPR (General Data Protection Regulation) compliance – particularly with Brexit complicating things – the UK government has been a reliable source for advice. The ICO (Information Commissioner’s Office), which oversees data protection rules in the country, and gov.uk, regularly provide guidance to help organisations make sense…

The run-up to Brexit has seen increased discussion in the UK about the need for an EU representative under the GDPR (General Data Protection Regulation). Organisations must appoint an EU representative if they are based outside the EU and monitor the behaviour of, or provide goods or services to, EU residents.…

Under the GDPR (General Data Protection Regulation), all organisations that process EU residents’ personal data must meet a series of strict requirements. We’ve produced eight free resources to help you understand what the GDPR requires you to do: 1. GDPR webinar series Our GDPR webinar series covers topics such as accountability,…

Under the GDPR, DPIAs (data protection impact assessments) are mandatory for data processing that is “likely to result in a high risk to the rights and freedoms of data subjects”. Effectively a type of risk assessment, DPIAs assess how these high-risk processing activities could impact data subjects. Failure to adequately…