Why you need a UK Representative under Article 27 GDPR Under Article 27 of the UK GDPR, a UK representative is needed, if you are a data controller or processor located outside the UK and offer goods or services to, or monitor the behavior of, UK residents, and you lack an establishment in the UK.
Article 27 GDPR UK Representative Read More »
News
What is a Personal Data Breach Under GDPR? Under the General Data Protection Regulation (GDPR), a personal data breach is defined as a violation of security that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data. This broad scope encompasses more than just hacking incidents; it includes
Preparing for a Data Breach Read More »
News
Data Sharing – when and how to share Data sharing is central to the continuation of commerce in both the public and private sectors. However, what you can share is governed by the DPA 2018. The DPA 2018 doesn’t stop you sharing data, but it does mean that you must ensure that your data sharing
Privacy Culture Understanding the Importance of Privacy Culture Within Your Organization In today’s digital landscape, cultivating a strong privacy culture within an organization is essential for the protection of personal data and the overall integrity of the business. A privacy culture encompasses the shared beliefs, practices, and values concerning data privacy among all employees. Its
Privacy Culture Within Your Organization Read More »
News
Privacy culture Why Develop a privacy culture? Establishing a robust privacy culture within your organisation is essential for fostering a shared understanding of how personal data can be utilised effectively to support business objectives. A strong privacy culture not only enhances compliance with regulations but also empowers employees across various teams to recognise the significance
Building and Implementing a Privacy Culture Read More »
NewsRecords of Processing Activities – RoPA is a record of all the processing activities involving personal data that your organisation carries out. It includes all areas where personal data is held e.g. Sales & Marketing, HR, Finance, Procurement, Customer Services.
Records of Processing Activities (RoPA) Read More »
News
Data Transfer Rules under GDPR If you want to transfer personal data outside of the EEA then there are rules that you must adhere to. These rules apply no matter the size the data transfer and regardless of the number transfers that are carried out. So how do you make a restricted transfer under GDPR?
Data Transfer Rules under GDPR Read More »
News
The Privacy Management Programme The accountability framework set out in the UK GDPR is recognised as a key building block for any organisation to be able to demonstrate compliance. The framework comprises the accountability principle (Article 5) GDPR and together with other requirements is designed to help organisations demonstrate compliance, however for some organisations it
UK Data Protection Change – Consultation Read More »
News
For those organisations that have to transfer data to third countries with no adequacy decision it can be a bumpy ride. With the Schrems 11 and the demise of Privacy Shield, it can be a burdensome journey. Although new SCCs are now in place it can still be a difficult area for many organisations.
Draft International Data Transfer Agreement Read More »
News
In the last few days the Department for Digital, Culture, Media and Trade has issued a consultation on changes to the UK GDPR. The overall aim is to drive economic growth and innovation but continue to strengthen public trust in the way that personal data is used. The measures proposed set out to be both adaptable and sensible and ease some of the burden that the GDPR has placed on businesses.
UK Data Protection Change Consultation – Summary Read More »
News