GDPR Advice

Currently there is no general responsibility for companies who process data of EU citizens to report a data breach to data subjects, although some companies do send notifications as a matter of course. Once the […]

There has been some confusion regarding what is defined as personal data, under the General Data Protection Regulation (GDPR). This is despite the fact that the term “personal data” is defined in Article 4 of […]

When the General Data Protection Regulation (GDPR) comes into force on 25 May 2018, rules for obtaining consent are going to be more stringent than they are at present. Business owners and data protection specialists […]

When the General Data Protection Regulation (GDPR) comes into force, on 25 May 2018, there will be a requirement for businesses and organizations that deal with mass people monitoring, or large amounts of sensitive personal […]

The procedures for requesting a Subject Access Request (SAR) are set to change very little with the introduction of the General Data Protection Regulation (GDPR), in May 2018. But, the process for providing a response […]

Call recording is a process that is widely used by businesses and organizations across the globe, but the process which companies follow to record calls will change with the introduction of the GDPR on May […]

You may have heard a lot about consent, in relation to the General Data Protection Regulation (GDPR), which becomes a reality in May 2018. But, this is not the only reason organizations and companies may […]

It is a common misconception that the General Data Protection Regulation (GDPR), which comes into force on May 25th 2018, only applies to businesses and organizations which are based within the EU and that international […]

When the General Data Protection Regulation (GDPR) comes into force, in May 2018, its protections will apply to any individual who is living in the EU at the time. This means that any business that […]

Any business which employs more than 250 people, and processes personal data,  is required to have a Data Protection Officer (DPO) under GDPR rules. Businesses will need to be compliant with this rule once the […]

The introduction of the General Data Processing Regulation (GDPR), on 25 May, 2018, will regulate the way different member states of the EU deal with the protection of personal data of individuals in the EU. […]

The simple answer to the question, “does GDPR apply to employees?”, is that yes it does. Businesses cannot only think about complying with the General Data Protection Regulation (GDPR) in respect of clients, it applies […]

Currently the Personal Information Protection and Electronic Documents Act (PIPEDA) is in place, to ensure the free flowing of personal data from companies within the EU to companies in Canada and vice versa. It is […]

Data protection has become an ever more important issue as use of the Internet has grown. The more data that is collected online, the more potential there is for the data to be compromised. For […]

Click to view infographic You have more than likely heard about the General Data Protection Regulation (GDPR), but you may not know how it is going to affect your business, and what it means for […]

The General Data Protection Regulation (GDPR) will come into force on May 25, 2018 and many are wondering how it will work with existing privacy arrangements, such as the Privacy Shield. One of the stipulations of […]

Many people make the mistake of believing that the upcoming General Data Protection Regulation (GDPR) only applies to businesses and organisations that are based within the EU. This is not the case. GDPR applies to […]

When you first think about GDPR and employee engagement, they may not seem as though they are related in any way. However this is not the case. There is actually a strong connection between the […]

The first thing to say is that the General Data Protection Regulation (GDPR) does not provide specific rules for the handling and archiving of emails, but it does make a big difference to the way […]

You only need to look at the results of surveys by Exchange Wire, Calligo and McAfee, among others, to see that many data professionals, and their organisations, are not fully prepared for the General Data […]

Under the existing Data Protection Directive – which will be replaced by the General Data Protection Regulation (GDPR) on May 25 – companies and organisations are not authorized to retain or continue processing personal data […]

In order to process personal data in compliance with GDPR a legal basis is mandatory. Consent is but one of the 6 Legal Bases for processing personal data under the GDPR. With regard to the […]

Legal tech firm Axiom reported that its research had shown that FTSE 100 and Fortune 500 companies could end up paying around £800 million in order to scrutinise contracts, to ensure compliance with the General […]

Businesses that are as yet unprepared for the introduction of the General Data Protection Regulation on May 25th may want to know what the GDPR penalties are, how they are enforced and what other consequences […]

GDPR’s data breach notification requirements will be significantly different from the existing ones. The regulation tends to move away from the current general notifications and introduces a new practice that embraces policies and procedures. Under […]

It is has been almost two decades since the introduction of the Data Protection Acts (DPAs). As technology develops, business operations and human activities keep changing. The laws governing these activities must keep pace with […]

Europe is a couple of months away from enforcing the General Data Protection Regulation. With this limited time, several studies still show that most companies are not prepared for the new requirements. The fact remains […]

The two-year grace period for organizations to align their systems and processes to General Data Protection Regulation (GDPR) requirements has almost come to an end. This has left many organizations fighting to adjust their processes […]

The European Union’s approach to online privacy sets new requirements for communications between email marketing companies and their existing customers. The new General Data Protection Regulation (GDPR) legislation, to be introduced on May 25 2018, […]

When the General Data Protection Regulation (GDPR) legislation is enacted by the European Union on May 25 2018, firms that have established a safe information management process that incorporates offsite workers will be in a position […]

The EU’s General Data Protection Regulation (GDPR) unifies different email laws from across member states. The new law is set to bring greater consistency to how businesses use and store data. GDPR modifies various critical […]

The primary objective of the GDPR is to safeguard the European Union citizens from data breaches. This is particularly important since the world is increasingly becoming data-driven and the conditions are largely different from the […]

The right for individuals, including employees, to access their own personal data which is held by their employers is a fundamental principle of the current data protection regulation. This tenet will continue to be important […]

A recently convened roundtable called to discuss digital storage could not have been arranged at a more opportune time. The panel of UK based data experts was put together in the main for a broad […]