GDPR has empowered people like never before to control their own personal data. One year in, it’s clear that the full impact of GDPR still hasn’t been felt and that there is very real feeling that we will soon start seeing companies of all sizes being brought to book for failing to adhere to legislation. […]
A new report out raises fresh questions over Facebook’s data-sharing deals. According to The Intercept, advertisers are able to use Facebook-provided data to target ads based on a user’s credit score. Worryingly, there are claims that Facebook may be trying to boost ad sales by handing over user data. It is also claimed Facebook has
Credit scores used to tailor ads from Facebook data Read More »
UK organisations are required to pay the Information Commissioner’s Office (ICO) an annual data protection fee unless they are exempt. The fee payable depends on the tier of the organisation, and ranges from £40 to £2,900. Companies could also be fined a massive £4,350 if “aggravating factors” are present, and the funds thus recovered go
No excuses for non-payment of Data Protection Fees says ICO Read More »
Uber drivers are threatening to take legal action over claims the company has refused to disclose personal information it holds on them under the General Data Protection Regulation (GDPR). Four drivers claim the company is simply failing to comply with EU data disclosure obligations. They say the driver hailing app has failed to disclose the
Uber faces legal action for GDPR non-compliance Read More »
The HMRC has started deleting the voice biometric data of five million taxpayers collected unlawfully but say they still plan to continue using the system despite the controversy. The UK’s Information Commissioner’s Office (ICO) has ruled the collection of voice biometric data from five million people by the UK’s tax authority is in violation of
HMRC forced to delete five million voice files Read More »
One important element of the legislation is the requirement for data controllers to enter into a Data Processing Agreement (DPA) with data processors. Most businesses rely on third parties to process personal data. Whether it’s an email client, a cloud storage service, or website analytics software, you must have a data processing agreement with each
What is a GDPR data processing agreement (DPA)? Read More »
GDPR certification refers to becoming legally compliant with the European Union’s (EU) General Data Protection Regulation (GDPR). This is a feature of GDPR law that allows people or entities to receive certification from approved certification bodies to show both the EU and consumers that they are in compliance with GDPR. Certification is scalable and can be different for organizations of differing size and
GDPR Certification Read More »
The implementation of the General Data Protection Regulations (GDPR) means that organizations must protect the personal data of EU citizens and covers any data that could feasibly be used to identify an individual. This can include medical records, genetic information or economic information. The Right to be Forgotten, also known as right to erasure, is
What is the Right to Be Forgotten? Read More »
GDPR was implemented to help protect people’s privacy. One of the most important concerns for people today is their privacy and the risk of losing important personal information. Research carried out on 7,500 consumers in France, Germany, Italy, the UK and the U.S by RSA Data Privacy & Security Report revealed that 80% of consumers said lost
Is Facebook GDPR compliant? Read More »
Ever since the referendum to leave the EU in 2016, pundits have been speculating as to how Brexit will affect Britain’s General Data Protection Regulation (GDPR). Even though the UK is planning to leave the EU, the UK will still need to comply with the GDPR. One reason for this is the cross-over period between
How will GDPR be affected post Brexit? Read More »
