If you read the GDPR (General Data Protection Regulation) from cover to cover, you will find almost 100 mentions of “appropriate technical and organisational measures”. But as frequently as the concept is discussed in the Regulation, the text doesn’t provide a...
Under the GDPR (General Data Protection Regulation), organisations are required to adopt the principles of data protection by design and default. These concepts are not new to the GDPR; they previously fell under the umbrella of ‘privacy by design’. The change...
A cookie is a small piece of data created by a web server and placed on a user’s device. Depending on the purpose of the cookie, it might contain personal data and therefore be subject to the requirements of the GDPR...
Last year, John Edwards was confirmed to as Elizabeth Denham’s successor as head of the UK’s data protection authority, the ICO (Information Commissioner’s Office). Edwards, who joins on a five-year term, spent the past eight years as the New Zealand Privacy...
Now more than ever, organisations understand the importance of information security and data governance. The GDPR (General Data Protection Regulation) and similar laws have imposed strict rules on the ways organisations must protect the information they process. Anyone who fails to...
Last week, Meta was fined €17 million (about £14.2 million) for breaching EU data protection rules. The Irish DPC (Data Protection Commission) said that the tech giant, formerly known as Facebook, failed to properly document appropriate technical and organisational measures that...
When the GDPR (General Data Protection Regulation) took effect in May 2018, many organisations feared that non-compliance would result in huge fines that could put them out of business. Among the organisations most concerned were those that conduct telemarketing. The GDPR...
Organisations in the UK are being urged to bolster their data protection measures as the Russian invasion of Ukraine continues. The incursion has been accompanied by a flurry of cyber attacks from hackers on both sides of the conflict. Russia has...
Supply chain management is an essential component of any data protection and cyber security programme. A BlueVoyant report found that 97% of organisations have been impacted by a breach in a supply chain. In many cases, this involves the loss of...
Your relationship with third parties comes with countless risks: they can breach the terms of your contract, suffer a data breach or incur business disruptions affecting your supply chain. These occur a lot more often than you might think. A 2021 Ponemon...
