Requirements of Implementing and Developing an Appropriate Policy Document (APD) for UK Data Protection Compliance

GDPR requires companies processing special categories of data and criminal offense data to always protect that data and to respect the rights of the data subjects.  There is little known requirement defied in the Data Protection Act which requires companies to complete a very specific document to demonstrate compliance with these requirements. Failure to comply […]

Read More… from Requirements of Implementing and Developing an Appropriate Policy Document (APD) for UK Data Protection Compliance

GDPR – Why US Businesses Need an EU GDPR Consultant

If you’re part of a US business that handles the data of EU citizens, you need to comply with the EU GDPR. But how do you know exactly what to comply with and how to do it? In this post, GDPR Local looks at how working with an EU GDPR consultant can help protect your […]

Read More… from GDPR – Why US Businesses Need an EU GDPR Consultant

GDPR – Why UK Businesses Need an EU GDPR Consultant

If you’re part of a UK business that handles the data of EU citizens, you need to comply with the EU GDPR. But how do you know exactly what to comply with and how to do it? In this post, GDPR Local explores the ways in which working with an EU GDPR consultant can help […]

Read More… from GDPR – Why UK Businesses Need an EU GDPR Consultant

Use of Facebook’s tracking pixels in the EU

In a decision made by the Austrian Data Protection Authority (DSB), using Facebook tracking pixels directly violates GDPR, and fortifies the reasoning behind the “Schrems II” decision on transatlantic data transfers. Other European data protection authorities also share this view as we can see in recent published decisions. Background The “Schrems II” decision stipulated that […]

Read More… from Use of Facebook’s tracking pixels in the EU

GDPR – Age-Appropriate Design

How To Ensure the Data Protection of Children During Product Design Nowhere is data protection more vital than in products aimed at or used by children. That’s why the age-appropriate design code was introduced, but what does it mean for product and service designers? In 2020 the Information Commissioner’s Office (ICO) introduced a code of […]

Read More… from GDPR – Age-Appropriate Design

Change to UK Data Protection

GDPR Changes: What’s Happening With the Digital Protection and Digital Information Bill? The UK Data Protection Bill is back and much of it offers hope for UK businesses. If it can make it through Parliament, that is… something its predecessor failed to achieve. GDPR Local founder Adam Brogden looks at the challenges and opportunities it […]

Read More… from Change to UK Data Protection

GDPR Local: Supplier Evaluation

How Do You Know Your Suppliers Are GDPR Compliant? We explain why you should make GDPR evaluation a crucial part of your supplier onboarding. You’re working with a new supplier. Or, perhaps, you’re simply reviewing an existing relationship. The service level agreement is in place. They’ve signed the non-disclosure agreement. If your suppliers process personal […]

Read More… from GDPR Local: Supplier Evaluation

GDPR – Onboarding Process

How to Onboard Your GDPR Article 27 Representative You’re based outside the EU or UK and you’re processing the data of EU or UK citizens. You know you need an Article 27 EU/UK representative to comply with data protection laws. But how do you go about bringing one onboard? When it comes to GDPR Article […]

Read More… from GDPR – Onboarding Process

Does Brexit Mean Your GDPR Policies Are Out Of Date?

When did you last review your company’s GDPR compliance? If you haven’t given it a second thought since Brexit became a reality, it’s time you did. We explain why. The General Data Protection Regulation (GDPR) celebrates its seventh anniversary in 2023. Post-implementation, most organisations collecting or using the data of EU subjects to carry out […]

Read More… from Does Brexit Mean Your GDPR Policies Are Out Of Date?

Do Third Parties Process Your Data? Why You Need a DPA & SCC

If a third party processes data on your behalf, you’ll need a Data Processing Agreement in place to protect your customers and your business – and you could be fined if you don’t get one. Our GDPR Local Experts can explain you why. You run an organisation that wields a lot of data. Sometimes you […]

Read More… from Do Third Parties Process Your Data? Why You Need a DPA & SCC