ICO Video Surveillance guidance

The steady growth of the use of video surveillance systems across public and private sectors, has led to both fixed and mobile cameras becoming more accepted in society. As video surveillance technology becomes more mainstream and affordable, it is now more common to see technologies such as smart doorbells and wireless cameras. Traditional closed circuit […]

Read More… from ICO Video Surveillance guidance

Everything you need to know about a Data Processing Agreement

What is a DPA? A data processing agreement (DPA) is a legally binding document to be entered into between the controller and the processor in writing or in electronic form. It regulates the particularities of data processing – such as its scope and purpose – as well as the relationship between the controller and the […]

Read More… from Everything you need to know about a Data Processing Agreement

Pseudonymization and Anonymization of personal data

One thing that is heavily emphasised in GDPR is the importance of Privacy by Design. Mechanisms to protect personal integrity should be built into IT systems and services. One of the core principles is data minimization. This means that all products and services should be designed so that as little personal data as possible is […]

Read More… from Pseudonymization and Anonymization of personal data

How does GDPR Affect Clinical Trials?

How GDPR impacts the clinical trials industry? The increasing use of the internet, electronic records, and the advancement of clinical trial technologies enabling the collection and use of data, has no doubt played a big part in creation of the GDPR. Big data is becoming increasingly important in clinical research, which also poses new challenges […]

Read More… from How does GDPR Affect Clinical Trials?

Existing customers: the ‘soft opt-in’

Although organizations can generally only send marketing texts or emails with specific consent, there is an exception to this rule for existing customers, known as the ‘soft opt-in’. This means organizations can send marketing texts or emails if:  · they have obtained the contact details during a sale (or negotiations for a sale) of a […]

Read More… from Existing customers: the ‘soft opt-in’

ICO: Accountability framework self-assessment

Hi All, If you have ever been through a GDPRLocal training course you will [hopefully] remember that talking about Accountability is a topic that is discussed about. Accountability is one of the key principles in data protection law – it makes you responsible for complying with the legislation and says that you must be able to […]

Read More… from ICO: Accountability framework self-assessment

5 noticable GDPR statictics from 2021

During the previous year a lot of companies finally got aware of the Data Protection and the GDPR regulations and approached this very seriously. This resulted with very eye-catching statistics regarding the legislation from the previous year. GDPR Local created list of 5 noticable statistics to be shared with our clients and readers to our […]

Read More… from 5 noticable GDPR statictics from 2021

GDPR: What Life Science organisations need to do to comply

Since GDPR became a thing on May 25th 2018, organisations need to be prepared to comply with a whole new set of data protection regulations, or face fines of up to 4% of your worldwide annual revenue. The regulation is set to disrupt businesses across the world, and provide a big data privacy boost for consumers, […]

Read More… from GDPR: What Life Science organisations need to do to comply

The 10 biggest GDPR fines to date – and yes, we are talking hundreds of millions worth of fines

It’s been three years since the introduction of one of the toughest data protection laws – the European General Data Protection Regulation [GDPR]. Since the regulation took effect in May 2018, hundreds of millions of euros worth of fines have been issued across the European Economic Area and the U.K. Any organisation, be it a […]

Read More… from The 10 biggest GDPR fines to date – and yes, we are talking hundreds of millions worth of fines

Subject Access Request (SAR) Empathy

There are many definitions of empathy but the Wikipedia definition is, ‘the capacity to understand or feel what another person is feeling from within their terms of reference’. This is a little deep for a Monday but I think this is a very important consideration when you reply to any sort of GDPR SAR or complaint. […]

Read More… from Subject Access Request (SAR) Empathy