Data Protection Archive
Many people mistakenly think that organisations must get consent to process personal data, but consent is one of six lawful grounds for processing data, and you’d be advised to seek it only if none of the other grounds apply.
The EU General Data Protection Regulation (GDPR) outlines six data protection principles that organisations need to follow when collecting, processing and storing individuals’ personal data. The data controller is responsible for complying with the principles and must be able to …
The EU General Data Protection Regulation (GDPR) requires organisations to adopt the principles of “privacy by design and by default”. These concepts require organisations to embed security measures into their systems at the outset, rather than applying features retroactively. It …
Under the GDPR, certain organisations are required to appoint a DPO (data protection officer). Organisations are also required to publish the details of their DPO and provide these details to their national supervisory authority.
If you run a website, the chances are that you collect EU residents’ personal data. Perhaps you collect names and email addresses so visitors can subscribe to your newsletter, take payment card details for an online store or use cookies …
Cyber attacks and data breaches are clearly huge risks for organisations. It’s important to do everything possible to prevent incidents, but it’s just as important to have a plan in case disaster strikes.
some of the most effective data protection methods are relatively inexpensive and easy to implement. Here are five simple solutions to help keep your data secure and reduce the risk of a data breach.
DPIAs (data protection impact assessments) help organisations identify, assess and mitigate privacy risks to data processing activities. They are particularly important when introducing new data processes, systems and technologies.
Data privacy is one of the biggest problems that organisations and individuals face in modern business. Customers are increasingly striving for personalised services – whether that’s recommendations tailored to their interests, account customisation, reports based on previous activity or countless …
The GDPR (General Data Protection Regulation) outlines six conditions under which organisations can process personal data. Contractual requirements, legal obligations, vital interests and tasks carried out in the public interest are all relatively self-explanatory, leaving consent and legitimate interest that …
