The 10 biggest GDPR fines to date – and yes, we are talking hundreds of millions worth of fines

It’s been three years since the introduction of one of the toughest data protection laws – the European General Data Protection Regulation [GDPR]. Since the regulation took effect in May 2018, hundreds of millions of euros worth of fines have been issued across the European Economic Area and the U.K. Any organisation, be it a […]

Read More… from The 10 biggest GDPR fines to date – and yes, we are talking hundreds of millions worth of fines

Subject Access Request (SAR) Empathy

There are many definitions of empathy but the Wikipedia definition is, ‘the capacity to understand or feel what another person is feeling from within their terms of reference’. This is a little deep for a Monday but I think this is a very important consideration when you reply to any sort of GDPR SAR or complaint. […]

Read More… from Subject Access Request (SAR) Empathy

Why should accountants take notice of GDPR?

Billed as the “most important change in data privacy regulation in 20 years”, GDPR took affect on 25 May 2018. So what is the regulation and why should accountants take notice? What are the implications for accountants? Accountants handle a vast amount of data – both client and employee – on a daily basis. Firms will need […]

Read More… from Why should accountants take notice of GDPR?

Getting management to care about GDPR

The GDPR is seen as the gold standard for data privacy and protection around the world. If breached, the enforcement can be harsh, to say the least. Infringement of some of the GDPR laws can result in fines, big fines. For example, a €20 milion or 4% of global annual turnover fine (whichever is greater) […]

Read More… from Getting management to care about GDPR

What is Schrems II and how does it affect your international data transfer

On July 16, 2020 the Court of Justice of the European Union [CJEU] issued its judgement in the Data Protection Commissioner vs. Facebook Ireland Limited, Maximilian Schrems (C-311.18) – the Schrems II case. In this landmark decision, the CJEU declared the European Commission’s Privacy Shield – one of the most widely used primary data transfer […]

Read More… from What is Schrems II and how does it affect your international data transfer

Is buying data legal and GDPR compliant?

This is a complicated question, but in short, using bought data is legal and in line with GDPR (General Data Protection Regulations). HOWEVER, this is only the case if it has been purchased in the right way, from the right source. GDPR states that, to contact an individual, you need explicit consent from them. Most […]

Read More… from Is buying data legal and GDPR compliant?

When can we refuse to comply with a SAR (Subject Access request) ?

A lot of companies are receiving SAR’s almost every day. Not all of the SAR’s are relevant and a lot of them might be from the people that are issuing them for a private reasons of to gain some financial revenue. Check this article and find out what are the situtations that you can refuse […]

Read More… from When can we refuse to comply with a SAR (Subject Access request) ?

Marketing calls and the rules that you need to know for making them.

Marketing calls are one of the most used way of contacting people and offering your services to them. But while this is a good method, you must not forget about the rules of making the calls. We’ll share some rules in order to be compliant and to not face a fine or possible investigation by […]

Read More… from Marketing calls and the rules that you need to know for making them.

Children code came into force in September- What’s next ?

The transition year is up and the Children’s code came fully into force on 2 September. It’s a ground breaking code that creates a better internet for children by ensuring online services likely to be accessed by children, respect a child’s rights and freedoms when using their personal data. As you’d expect it’s already having an impact […]

Read More… from Children code came into force in September- What’s next ?

Special category data

Special category data is personal data that needs more protection because it is sensitive.In order to lawfully process special category data, you must identify both a lawful basis under Article 6 of the UK GDPR and a separate condition for processing under Article 9. These do not have to be linked.You need to complete a data […]

Read More… from Special category data