Unlock AI Compliance: Master the new EU AI Act with our comprehensive guide.

Protecting Data in Oz: Avoiding Costly Violation Penalties

In the digital age, data is a treasure trove of information that drives businesses and empowers innovation. However, this treasure comes with a caveat – the responsibility to protect it. With Australia’s stringent data protection laws, keeping personal information secure isn’t just good practice, it’s the law. In this blog, we’ll delve into the key […]

Read More… from Protecting Data in Oz: Avoiding Costly Violation Penalties

Exploring Data Protection Beyond GDPR – What You Need to Know About NIS2 Directive

Data protection laws are constantly changing in today’s world, so you can never be sure that you are up-to-date. There are so many of them that it’s sometimes hard to keep up with all. So, let’s introduce you gradually to some of the most important ones. Taking a look at the NIS2 Directive from our […]

Read More… from Exploring Data Protection Beyond GDPR – What You Need to Know About NIS2 Directive

Privacy Wars: Comparing Australia’s Data Protection with GDPR!

As far as data protection is concerned, two juggernauts have emerged – Australia’s robust data protection laws and the European Union’s (EU’s) General Data Protection Regulation (GDPR). These frameworks shape how personal information is handled and shared, but how do they stack up against each other? We will embark on a comparative journey in this […]

Read More… from Privacy Wars: Comparing Australia’s Data Protection with GDPR!

Don’t Get Caught Out: How US Companies Can Comply with the GDPR after the Adequacy decision from the EU

In the recent blog Finally Unlocking Transatlantic Data Flow: How the Adequacy Decision Impacts US and EU Companies we explain how this EU decision unlocked the transatlantic personal data flow from EEA and in near future UK and Switzerland to the US. But what does this unlocked flow mean for US companies that receive personal […]

Read More… from Don’t Get Caught Out: How US Companies Can Comply with the GDPR after the Adequacy decision from the EU

Instagram fined for violating GDPR regulations

The Irish Data Protection Commission fined Instagram in amount of €405 million euros for breaching the privacy rights of children under the EU General Data Protection Regulation. The investigation focused on how the platform allowed users aged between 13 to 17 years to operate accounts which showed their phone numbers and email addresses. This is […]

Read More… from Instagram fined for violating GDPR regulations

Transcend partnering with GDPR Local

If you need an advanced Privacy Request management solution, take a look at this product from our partners at Transcend.io – this product is designed to automate the return, deletion and modification of user data across yourtech stack.  Transcend has over 1300+ integrations and data connectorsto allow you to connect to any location where user […]

Read More… from Transcend partnering with GDPR Local

Accountability Tracker

As your Article 27 Representative we will always help if you receive a SAR, RTE, or other data protection complaint. It is always best to avoid these all together but most companies will receive GDPR requests at some point.  Disgruntled ex-employees, annoyed customers, malicious compensation-scammers are common sources of SARs and unfortunately these can result […]

Read More… from Accountability Tracker

How to handle a Subject Access Request

We have said this previously but we are still seeing a huge number of Subject Access Requests [SARs]. A SAR is a request made by or on behalf of the data subjects which grants the right to obtain a copy of all the personal data that an organization has collected about them. These are pretty […]

Read More… from How to handle a Subject Access Request

Right to Erasure and how to handle it

Summary: The Right to Be Forgotten is one of the fundamental rights defined in GDPR.  Also known as a Right to Erasure this principle defined in Article 17. It is vital that companies recognize these requests and understand how to deal with them. Most importantly the Right to Erasure is not an absolute right and […]

Read More… from Right to Erasure and how to handle it

What Does GDPR Mean For Companies Based Outside The EU?

The implications for companies based outside the EU are exactly the same as those for EU countries, if they process personal data from the EU. That’s because GDPR applies to the personal data of people based in the EU. If you want to process it, e.g. to sell to customers in the EU, you have […]

Read More… from What Does GDPR Mean For Companies Based Outside The EU?