The GDPR has been in force for 12 months and the anniversary passed with much less fanfare than a year ago. What has happened and what has changed? Our MD, Howard Freeman looks back and discusses the last year, in the exciting world of GDPR. A year...
Archives
GDPR
Mumsnet data breach
Perhaps as many as 4,000 users affected Howard Freeman – 4th March 2019 Parenting website Mumsnet has revealed that a data breach occurred during a software update. This happened between 5th and 7th February,...
Data breaches increase across UK education sector
Howard Freeman – 1st March 2019 A worrying rise in data breaches being reported across the UK education sector was revealed by a recent freedom of information request. The EU GDPR (General Data Protection Regulation) mandates data breaches must...
Internal Data Protection Policy
Howard Freeman – 28th February, 2019 The Creation of an Internal Data Protection Policy is a good way to start your compliance journey with the General Data Protection Regulation (GDPR). As interpretation of the regulation can be complex and challenging for most...
Company Director receives a 4-year ban following PECR breach
Howard Freeman – 14th February 2019 The ICO (Information Commissioner’s Office) has banned a businessman from starting or managing a business for four years following his breach of the PECR (Privacy and Electronic Communications Regulations). The director at Lad...
Directors face up to £500,000 fines as PECR amendment comes into force.
The UK government’s amendment to the PECR (Privacy and Electronic Communications Regulations) came into effect on 17th December 2018, with an increase in the maximum fine violations to £500,000. The PECR cover several areas, including electronic marketing,...
Why Education Establishments Need Data Protection Officers
The ICO announced this week that a former headteacher has been fined over £1000 by a magistrate’s court for unlawfully obtaining children’s personal data from previous schools where he had been employed. Darren Harrison, took the information from two primary schools...
Data Breaches
We are often asked about data breaches and the damage they can and do cause. The way to limit such damage is to spot them quickly or to stop them happening in the first place. This is not easy to do but here are some practical tips to help you stay safe and we look at...
Data Retention and the GDPR
The GDPR (General Data Protection Regulation) states that any organisation must not keep data for any longer than it is needed. Article 5(1)(e) states: “Personal data shall be: kept in a form which permits identification of data subjects for no longer than is...
Is Size Important?
The Consequences of Data Breaches for all Sizes of Organisations Data breaches can happen to any business. Incidents at large organisations – such as Dixons Carphone, Superdrug and most recently BA, all hit the headlines. This would give anyone the impression that...
PECR Legislation
STATUTORY INSTRUMENTS 2018 No. 1189 ELECTRONIC COMMUNICATIONS The Privacy and Electronic Communications (Amendment) Regulations 2018 Made 15th November 2018 Laid before Parliament 16th November 2018 Coming into force 17th December 2018 The Secretary of State is a...
The GDPR Legislation and Associated Articles
General Data Protection Regulation GDPR Chapter 1 – General provisions Article 1 – Subject-matter and objectives Article 2 – Material scope Article 3 – Territorial scope Article 4 – Definitions Chapter 2 – Principles Article 5 – Principles relating to processing of...
GDPR: The Risks for Franchisors
A fundamental change under data protection laws, in this case, The GDPR – the new data protection regulation which came into force in May – will have particular relevance for anyone involved in a franchisor/franchisee relationship. Why? Because of the way in which...
Another Example of Email Misuse…
Why you should educate your employees on email misuse Yet another example of an email misuse using the CC (carbon copy) field instead of the BCC (blind carbon copy) field. This time, it was Premiership side West Ham United Football...
Data Protection Officer as a Service
Why do you need a Data Protection Officer and why would you have a Data Protection Officer as a service? A key requirement of the GDPR is demonstrable compliance and having a DPO is one of the key ways of achieving this. The GDPR Compliance Consultancy can provide the...
Why use a Specialist GDPR Practice?
Get the peace of mind that you’ve got everything covered with our GDPR Practice. There may be no need to employ your own staff to look after your data protection issues relating to the GDPR. The business benefits of getting your data protection right reduces risk....
A Guide to the GDPR
The EU General Data Protection Regulation is an impressive piece of legislation. Like all legislation, the GDPR is complex and open to interpretation. This is where we can help you. We can help you understand how it applies to your business. Guidance on what steps you...
Requirements of the GDPR
The EU GDPR introduces the Accountability Principle. This states that the data controller is responsible for, and must be able to demonstrate compliance with, all of the requirements of the GDPR (including the principles of Lawfulness and Transparency, Purpose...