Instagram fined for violating GDPR regulations

The Irish Data Protection Commission fined Instagram in amount of €405 million euros for breaching the privacy rights of children under the EU General Data Protection Regulation. The investigation focused on how the platform allowed users aged between 13 to 17 years to operate accounts which showed their phone numbers and email addresses. This is […]

Read More… from Instagram fined for violating GDPR regulations

GDPR checklist on legal requirements for websites

Hello everyone, We hope you are having a great and successful day. We would like to share with you something very beneficial. The topic for today is, how to comply with the GDPR requirements for your website and what is the most important that you would need to be careful about.  We are sharing with you […]

Read More… from GDPR checklist on legal requirements for websites

Transcend partnering with GDPR Local

If you need an advanced Privacy Request management solution, take a look at this product from our partners at Transcend.io – this product is designed to automate the return, deletion and modification of user data across yourtech stack.  Transcend has over 1300+ integrations and data connectorsto allow you to connect to any location where user […]

Read More… from Transcend partnering with GDPR Local

Cookie Compliance

On 9th August 2022, noyb.eu lodged 226 GDPR complaints with 18 authorities against websites that use the popular cookie banner software (“OneTrust”) with deceptive settings. Following a first batch of complaints in May 2021 many websites using OneTrust have adapted their settings and added “reject” buttons. OneTrust also changed the standard settings to be more […]

Read More… from Cookie Compliance

Do I need to register with the ICO?

UK companies who collect, store, or process personal data may need to register with the ICO however registration is not always necessary and there are several exemptions which may apply. Where applicable registration is a legal obligation and the ico can issue pretty serious fines if you fail to register and pay the appropriate fee. […]

Read More… from Do I need to register with the ICO?

Do I need an Article 27 Representative? Understanding Your GDPR Obligations in 2024

european union flags, gdpr, article 27 representative

Article 27 of the General Data Protection Regulation (GDPR) remains one of its most misunderstood requirements, even as we move into 2024. This article is a crucial part of your GDPR compliance, especially if your business operations fall outside the European Union (EU) or the United Kingdom (UK) but involve processing data from these regions. […]

Read More… from Do I need an Article 27 Representative? Understanding Your GDPR Obligations in 2024

Accountability Tracker

As your Article 27 Representative we will always help if you receive a SAR, RTE, or other data protection complaint. It is always best to avoid these all together but most companies will receive GDPR requests at some point.  Disgruntled ex-employees, annoyed customers, malicious compensation-scammers are common sources of SARs and unfortunately these can result […]

Read More… from Accountability Tracker

How to handle a Subject Access Request

We have said this previously but we are still seeing a huge number of Subject Access Requests [SARs]. A SAR is a request made by or on behalf of the data subjects which grants the right to obtain a copy of all the personal data that an organization has collected about them. These are pretty […]

Read More… from How to handle a Subject Access Request

Right to Erasure and how to handle it

Summary: The Right to Be Forgotten is one of the fundamental rights defined in GDPR.  Also known as a Right to Erasure this principle defined in Article 17. It is vital that companies recognize these requests and understand how to deal with them. Most importantly the Right to Erasure is not an absolute right and […]

Read More… from Right to Erasure and how to handle it