The Data Support Agency was shocked to learn today that more than half of all schools are not fully compliant with new data laws. A recent poll shows 80% of schools fear they are at risk of fines for not being fully compliant with GDPR and are concerned about the significant impact it would have […]
Half of UK schools and colleges are ‘not fully compliant with GDPR’ Read More »
One important element of the legislation is the requirement for data controllers to enter into a Data Processing Agreement (DPA) with data processors. Most businesses rely on third parties to process personal data. Whether it’s an email client, a cloud storage service, or website analytics software, you must have a data processing agreement with each
What is a GDPR data processing agreement (DPA)? Read More »
When the General Data Protection Regulation (GDPR) was introduced, it was the largest piece of data regulation ever passed by the European Union. GDPR is important because it improves the protection of European data subjects’ rights and clarifies what companies that process personal data must do to safeguard these rights. All companies and organisations that deal with data relating
Why is GDPR Important? Read More »
Under the GDPR, the definition of ‘personal data’ means “any information relating to an identified or identifiable natural person”. Sensitive personal data relates to information which requires extra care. A business cannot process any information falling within the list above without taking extra precautions. This is particularly relevant in relation to employees, as many personnel
What is Sensitive Personal Data? Read More »
GDPR defines a data controller as: “a natural or legal person, which alone or jointly with others, determines the purposes and means of personal data processing.” … The data controller will decide the purpose for which personal data is required and what personal data is necessary to fulfil that purpose The data controller determines the purposes for which and the means by which personal data is processed. So, if your company/organisation decides
What is a Data Controller? Read More »
The GDPR strengthens the rights that individuals have regarding personal data relating to them and seeks to unify data protection laws across Europe, regardless of where that data is processed. Google’s website makes a very clear statement about GDPR: “You can count on the fact that Google is committed to GDPR compliance across Google Cloud
Is Google GDPR Compliant? Read More »
GDPR certification refers to becoming legally compliant with the European Union’s (EU) General Data Protection Regulation (GDPR). This is a feature of GDPR law that allows people or entities to receive certification from approved certification bodies to show both the EU and consumers that they are in compliance with GDPR. Certification is scalable and can be different for organizations of differing size and
GDPR Certification Read More »
The implementation of the General Data Protection Regulations (GDPR) means that organizations must protect the personal data of EU citizens and covers any data that could feasibly be used to identify an individual. This can include medical records, genetic information or economic information. The Right to be Forgotten, also known as right to erasure, is
What is the Right to Be Forgotten? Read More »
Many people are still unsure what exactly the term ‘personal data’ refers to, even though it forms the core of the EU General Data Protection Regulation (GDPR). The EU-wide GDPR, which was brought into UK law on 25 May 2018, broadened the definition of what counts as personal data. When we think of personal data, things like name,
What constitutes personal data for GDPR? Read More »
There are seven key GDPR principles: Lawfulness, fairness and transparency. Purpose limitation. Data minimisation. Accuracy. Storage limitation. Integrity and confidentiality (security). Accountability. Lawfulness, fairness and transparency The first principle of GDPR requires that the data controller provide the data subject with information about his/her personal data processing in a concise, transparent and intelligible manner, which
What are the 7 GDPR Principles Read More »
