The implementation of the General Data Protection Regulations (GDPR) means that organizations must protect the personal data of EU citizens and covers any data that could feasibly be used to identify an individual. This can include medical records, genetic information or economic information. The Right to be Forgotten, also known as right to erasure, is […]
What is the Right to Be Forgotten? Read More »
Many people are still unsure what exactly the term ‘personal data’ refers to, even though it forms the core of the EU General Data Protection Regulation (GDPR). The EU-wide GDPR, which was brought into UK law on 25 May 2018, broadened the definition of what counts as personal data. When we think of personal data, things like name,
What constitutes personal data for GDPR? Read More »
There are seven key GDPR principles: Lawfulness, fairness and transparency. Purpose limitation. Data minimisation. Accuracy. Storage limitation. Integrity and confidentiality (security). Accountability. Lawfulness, fairness and transparency The first principle of GDPR requires that the data controller provide the data subject with information about his/her personal data processing in a concise, transparent and intelligible manner, which
What are the 7 GDPR Principles Read More »
Businesses must acknowledge that being transparent about how data is used and protected is now required by law. Each organization (including charities and public sector entities) must define a scope for which they collect specific data. You should only collect personal information that is needed to provide the service or product and nothing more. Also,
What are my options for maintaining GDPR compliance? Read More »
DPO The GDPR introduces a duty for you to appoint a data protection officer (DPO) if you are a public authority or body, or if you carry out certain types of processing activities. DPOs assist you to monitor internal compliance, inform and advise on your data protection obligations, provide advice regarding Data Protection Impact Assessments
DPO vs GDPR Software: the benefits and drawbacks of both Read More »
The first thing to consider is whether your business requires a Data Protection Officer (DPO). It is not the size of an organisation that determines who needs a DPO, but rather the size and scope of data handling. Unfortunately, GDPR does not specifically define what they consider to be “large scale” data handling. There are
What are the alternatives to hiring a DPO for GDPR Compliance? Read More »
GDPR came into effect on May 25, 2018. However, some organizations still struggle to both understand and comply with GDPR and its complexities. The primary objective of the GDPR is to give citizens back control of their personal data. GDPR is a regulation that requires businesses to protect the personal data and privacy of EU
What is GDPR Compliance and how can my business be compliant? Read More »
The simple answer is that every company who processes personal data about people in the European Union (EU) is affected by the General Data Protection Regulations (GDPR). The regulations came into effect in May 2018. A wide-ranging set of legislation designed to protect the privacy of individuals in the EU and give them control over
Who is affected by GDPR Regulations? Read More »
Organisations must ensure personal data is securely disposed of when no longer needed. This will reduce the risk that it will become inaccurate, out of date or irrelevant. Checklist This checklist from the Information Commissioner’s Office (ICO) bout personal data storage will make sure you comply with GDPR: You must not keep personal data for
How do I comply with GDPR when storing customers’ personal data? Read More »
GDPR compliance isn’t a one-off – it must be maintained. You might believe that you can relax and can put the rules to the back of your mind. But compliance is not a one-time exercise, and if you want to stay within the law your company needs to constantly reassess its security procedures and practices.
How is your organisation maintaining its GDPR compliance? Read More »
