What is a DPIA(Data Protection Impact Assesment) and why are DPIA’s important?

What is a DPIA? A DPIA is a process designed to help you systematically analyse, identify and minimise the data protection risks of a project or plan. It is a key part of your accountability obligations under the GDPR, and when done properly helps you assess and demonstrate how you comply with all of your data […]

Read More… from What is a DPIA(Data Protection Impact Assesment) and why are DPIA’s important?

GDPR ist drei Jahre alt!

With all that’s changed in the world, the arrival of the third anniversary of the General Data Protection regulation may seem trivial, even irrelevant. But dismissing it would be a mistake. This is actually an opportune moment to take stock of what effect it’s had on data protection and whether your organization has managed to […]

Read More… from GDPR is Three Years Old!

Das Büro des Informationsbeauftragten (ICO)

The ICO is the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals. The ICO is responsible for: Promoting good practice in handling personal data and giving advice and guidance on data protection. Ensure data controllers pay the appropriate data protection fee and […]

Read More… from The Information Commissioner’s Office (ICO)

Datenschutzbeauftragter - Rolle und Aufgaben

Data Protection Officer (DPO) is a new leadership role that is created with the enforcement of the General Data Protection Regulation (GDPR) DPO is a cornerstone of accountability and appointing a DPO can facilitate compliance and competitive advantage for businesses- highly attractive traits. The GDPR sets minimum responsibilities for a DPO that revolve around supervising the implementation of a data protection strategy, assuring compliance with GDPR, and […]

Read More… from Data Protection Officer – Role and responsibilities

What is a GDPR data processing agreement?

Virtually every business relies on third parties to process personal data. Whether it’s an email client, a cloud storage service, or website analytics software, you must have a data processing agreement with each of these services to achieve GDPR compliance. What needs to be in a data processing agreement GDPR Article 28 Section 3, explains […]

Read More… from What is a GDPR data processing agreement?

Changes in the Data protection after UK has left the EU .

Following the UK’s departure from the European Union, these are the latest updates on how this affects GDPR and the sensitive issue of data protection. Overview of the current situation: The General Data Protection Regulation (GDPR) has been retained in UK law and will continue to be read alongside the Data Protection Act 2018, but […]

Read More… from Changes in the Data protection after UK has left the EU .

EU/UK representative services

Article 27: Article 27 of the GDPR includes the requirement for companies that provide goods and services to EU citizens should provide an EU based Representative so that data subjects and Regulators can easily contact companies to raise data protection issues or concerns. Now that the UK has left the EU the situation becomes slightly […]

Read More… from EU/UK representative services

Was ist eine gültige Zustimmung?

Die Datenschutz-Grundverordnung setzt hohe Standards für die Einwilligung, die eindeutig sein und eine klare bestätigende Handlung (ein Opt-in) beinhalten muss. Sie verbietet ausdrücklich das Ankreuzen von Opt-in-Kästchen. Sie verlangt auch verschiedene ('granulare') Zustimmungsoptionen für verschiedene Verarbeitungsvorgänge. Die Einwilligung sollte von anderen Bedingungen und Konditionen getrennt sein und im Allgemeinen keine Vorbedingung für die Unterzeichnung sein [...]

Mehr lesen... von Was ist eine gültige Zustimmung?