Can you refuse to comply with a Data Subject Access Request [SAR]?

The right of access under GDPR gives data subjects the right to obtain a copy of their personal data. It helps them understand how and why you are using their data and whether you do it lawfully. However, GDPR, DPA 2018 and ICO recognise that, in some circumtances, you might have a legitimate interest for […]

Read More… from Can you refuse to comply with a Data Subject Access Request [SAR]?

Opt-in and privacy rules in EU and USA: key differencies

While opt-in rules in the U.S. and the EU differ, the intent remains the same. These laws aim to protect consumers against unwanted marketing communications. Because data privacy is not a privilege, it is a right. Before engaging in email marketing activities, it is crucial to follow the regulations and market’s best practices to avoid enforcement […]

Read More… from Opt-in and privacy rules in EU and USA: key differencies

USA e-mail marketing rules

In the United States, direct marketing by e-mail is regulated by the federal Controlling the Assault of Non-Solicited Pornography and Marketing Act or so-called CAN-SPAM Act. The Congress passed the CAN-SPAM Act to address the problem of unwanted/spam emails. Its compliance is monitored by the Federal Trade Commission. The CAN-SPAM Act covers all commercial messages, which […]

Read More… from USA e-mail marketing rules

What US-based companies need to know about GDPR

The EU General Data Protection Regulation [GDPR] is designed to strengthen and unify the protection of personal data of EU data subjects i.e., EU citizens, residents and even, perhaps visitors. For this purpose, the regulation is extraterritorial in scope. That ultimately means that almost every major corporation in the world needs a GDPR compliance strategy. […]

Read More… from What US-based companies need to know about GDPR

GDPR: What Life Science organisations need to do to comply

Since GDPR became a thing on May 25th 2018, organisations need to be prepared to comply with a whole new set of data protection regulations, or face fines of up to 4% of your worldwide annual revenue. The regulation is set to disrupt businesses across the world, and provide a big data privacy boost for consumers, […]

Read More… from GDPR: What Life Science organisations need to do to comply

The 10 biggest GDPR fines to date – and yes, we are talking hundreds of millions worth of fines

It’s been three years since the introduction of one of the toughest data protection laws – the European General Data Protection Regulation [GDPR]. Since the regulation took effect in May 2018, hundreds of millions of euros worth of fines have been issued across the European Economic Area and the U.K. Any organisation, be it a […]

Read More… from The 10 biggest GDPR fines to date – and yes, we are talking hundreds of millions worth of fines

Subject Access Request (SAR) Empathy

There are many definitions of empathy but the Wikipedia definition is, ‘the capacity to understand or feel what another person is feeling from within their terms of reference’. This is a little deep for a Monday but I think this is a very important consideration when you reply to any sort of GDPR SAR or complaint. […]

Read More… from Subject Access Request (SAR) Empathy

Why should accountants take notice of GDPR?

Billed as the “most important change in data privacy regulation in 20 years”, GDPR took affect on 25 May 2018. So what is the regulation and why should accountants take notice? What are the implications for accountants? Accountants handle a vast amount of data – both client and employee – on a daily basis. Firms will need […]

Read More… from Why should accountants take notice of GDPR?

Getting management to care about GDPR

The GDPR is seen as the gold standard for data privacy and protection around the world. If breached, the enforcement can be harsh, to say the least. Infringement of some of the GDPR laws can result in fines, big fines. For example, a €20 milion or 4% of global annual turnover fine (whichever is greater) […]

Read More… from Getting management to care about GDPR

How does GDPR affect Financial Services?

Not long ago, before smartphones, bank transactions were made face to face. People did not have to think too much about passwords, data theft, hackers and cyber criminals were not in the category of risk that people should consider. With the technology advancements this risk for data theft has significantly increased, so did the need […]

Read More… from How does GDPR affect Financial Services?