Consultancy – GDPR Local

Strategic Synergy: Optimising GDPR Compliance through ISO 27001:2022 Controls

Posted on May 30, 2024 (May 30, 2024) by Daniela Atanasovska

In our recent blog ISO 27002: A Comprehensive Guide to Information Security Controls, we underscored the significance of ISO 27002 in fortifying information security practices amidst rising data breaches. Emphasising its role in supporting ISO 27001’s Information Security Management System (ISMS), we explored the framework’s sections on organisational, people, physical, and technological controls. The systematic […]

Understanding Personal Information Under CCPA/CPRA: A Guide for California Businesses

Posted on May 14, 2024 (May 14, 2024) by Sibel Amet

The cornerstone of CCPA and CPRA compliance hinges on correctly understanding what constitutes “personal information.” California’s data privacy laws have a broad definition, making it essential for businesses to know what data points fall under these regulations. Let’s break down the key categories and recent updates that you need to be aware of. What is […]

CCPA/CPRA Compliance: What California Businesses Need to Know

Posted on May 14, 2024 (May 14, 2024) by Sibel Amet

California’s privacy framework demands serious attention from businesses operating in the state. These laws grant consumers extensive control over how their personal information is collected, used, and shared. Failing to comply can expose businesses to significant financial penalties and reputational damage. Proactive compliance with the help of experts can safeguard consumer privacy and protect businesses […]

Decoding EU CTR: GDPR and DPO in the Context of Clinical Trials

Posted on April 3, 2024 (April 3, 2024) by Zlatko Delev

The EU CTR and GDPR intersect in such a way that anyone involved in clinical trials within the European Union needs to know how to navigate them. As regulations tighten, understanding how the General Data Protection Regulation (GDPR) impacts the collection, storage, and usage of data in clinical trials becomes indispensable. With the proliferation of […]

The Future of GDPR: Anticipating GDPR 2.0

Posted on March 28, 2024 (March 28, 2024) by Ana Mishova

Data protection and privacy have become paramount concerns for individuals and organizations alike. The General Data Protection Regulation (GDPR) has been instrumental in safeguarding personal data and empowering individuals with greater control over their information. As we look to the future, the question arises: what lies ahead for GDPR? Will there be a GDPR 2.0? […]

GDPR AI: Your Ultimate Handbook for Building an AI Platform

Posted on March 21, 2024 (March 21, 2024) by Zlatko Delev

In the vast landscape of technology, Artificial Intelligence (AI) continues to be at the forefront, pushing the boundaries of innovation and efficiency. Coupled with the General Data Protection Regulation (GDPR), a data protection law in the European Union (EU), the integration of GDPR AI becomes critical.This juxtaposition of AI’s capabilities, from machine learning to robotics, […]

The Importance of Data Retention

Posted on March 21, 2024 (March 21, 2024) by Marin Milenkoski

Many companies overlook one of the most critical aspects of data processing, which is data retention. They often store vast amounts of data without clear awareness of what they’re keeping or why. This data might sit unused, with little consideration for the individuals whose information it comprises. Data subjects are frequently uninformed about their data […]

The Evolving Role of Data Protection Officers in the Post-GDPR Landscape

Posted on March 19, 2024 (March 19, 2024) by Ana Mishova

Data protection has become a critical concern for organizations handling personal data. The implementation of the GDPR has brought significant changes to the way businesses handle and protect data. As a result, the role of Data Protection Officers (DPOs) has evolved to meet the new requirements and challenges. In this article, we explore the evolving […]

Aligning Canadian Data Protection with EU Standards: A Comprehensive Guide to GDPR and Canada

Posted on March 7, 2024 (March 7, 2024) by Zlatko Delev

As personal data flows across borders with the click of a button, data protection has become a global concern. Two prominent players in this arena are the European Union’s General Data Protection Regulation (GDPR) and Canada’s data protection laws. In this guide, we’ll explore the similarities and differences between these two regulatory frameworks. Our discussion […]

The Complex Relationship Between GDPR and Blockchain: Ensuring Compliance in the Decentralized Landscape

Posted on February 28, 2024 (February 28, 2024) by Zlatko Delev

Blockchain technology has revolutionized various industries by offering enhanced security, transparency, and efficiency. However, as blockchain projects continue to proliferate, it becomes crucial to establish effective regulatory frameworks to ensure compliance. One such framework is the General Data Protection Regulation (GDPR), which aims to protect individuals’ privacy rights. In this article, we will explore the […]