gdpr

ICO Exemptions on Exam Scripts Because of the Covid-19 pandemic, most school and university exams have been abandoned. Teachers and lecturers will be conducting and submitting pupil assessments. These will form the basis of grades. We’re getting a lot of questions regarding the rights of the pupils and students, under the General Data Protection Regulations (GDPR). What people want to know is, can you use the GDPR to find out what has been submitted by the institution about a student or pupil?

Substack Privacy Policy Update Email Blunder

By Dave McKay in privacy

July 29, 2020

A Simple Human Error Exposes Email Addresses Substack, a subscription newsletter service sent an email to its users telling of them of a change of terms, and an updated privacy policy. Which is fine, that’s required practice. But they pasted about 500 emails into the cc field, instead of the bcc field. That meant that everyone on the email saw all of the other recipients’ email addresses. In an email about a privacy policy - whoops.

CJEU Invalidates EU-US Privacy Shield Agreement

By Dave McKay in compliance

July 18, 2020

Privacy Shield No Longer Adequate The Court of Justice of the European Union has invalidated the EU-U.S. Privacy Shield agreement, which allowed data to be transmitted out of the EU to the US, if the receiving company operated under the strictures of the Privacy Shield scheme. If a country is not in the European Union (EU), and not within the European Economic Area (EEA), it is considered to be a third country.

Case Study: Doorstep Dispensaree

By Dave McKay in compliance

July 13, 2020

It’s Not Just About Digital The ICO fined Doorstep Dispensaree Ltd £275,000 for, among other things, failing to keep sensitive data securely and failing to provide an adequate privacy policy to data subjects. What They Did Wrong Doorstep Dispenaree provide pharmaceutical dispensary services to carehomes. They had c. 500,000 documents containing personally indentifiable data in unlocked containers behind their premsises. They were being investigated by the Medicines and Healthcare Products Regulatory Agency (MHRA) regarding alleged unlicensed and unregulated storage of medicines.

One in Ten Home Workers Not GDPR Compliant

By Dave McKay in compliance

July 11, 2020

Working From Home and GDPR COVID-19 has seen unprecedented numbers of usuall office based workers forced to work from home. Scarily, a report from IT support firm ILUX, in which 2,000 home workers were surveyed, found that one in ten thought they were expected to work in non-GDPR compliant conditions. James Tilbury, MD at ILUX said: “Whilst, as business owners, we may be busy, stressed and frankly trying to keep our heads above water, it is not a time to be complacent.

2020 Set to Break Records for Data Breaches

By Dave McKay in compliance

July 11, 2020

2020 Is Shaping Up - Badly Six months in and 2020 is on track to set a new data breach record. Healthcare, technology, software, social media and more have all been targeted by cybercriminals, reaping about 16 billion personal records. What’s Going On? It’s partly due to the coronavirus pandemic which gave cybercriminals new ways to mask threats. Phishing scams and social engineering were the most common threats. Online dating Online dating apps always seem to be built with security as an after thought, nothing like the security by design principle we’re all supposed to be adopting.

ICO Enforcements in the First Half of 2020

By Dave McKay in compliance

July 11, 2020

ICO Enforcements in the First Six Months of 2020 The Information Commissioner’s Office (ICO) has issued the following fines in the first half of 2020. Interestingly, two of them were against individuals, not businesses. Two of the fines issued to businesses were for one half of a million pounds. Ouch. Decision Technologies Limited 2nd July Price comparison and technology company fined £90,000 for a contravention of Regulation 22 of the Privacy and Electronic Communications (EC Directive) Regulations 2003.

What Is Cyber Essentials?

By Dave McKay in cybersecurity

July 11, 2020

Demonstrate Your Commitment to Data Protection CyberEssentials is a government-backed and industry-recognised scheme. It helps businesses protect themselves against the most common cyber attacks and threats. Compliance to the standard ensures that a set of basic technical and organisational controls—that’s policies and procedures—are in place, providing a common sense and valuable level of protection. The National Cyber Security Centre manage the scheme on behalf of the government. What Is Involved?

A searchable copy of the GDPR

By Dave McKay in compliance

July 10, 2020

An Online, Searchable Version of GDPR The GDPR regulation can be impenetrable, off-putting, and downright intimidating. It’s 88 pages long … There are 11 chapters … There’s 99 articles scattered through those chapters … And there’s 173 recitals that you have to wrestle with too! Thankfully, Intersoft Consulting have put together an online, searchable and free copy of the GDPR regulations. You can search by word or phrase like “legitimate interest”, or by section name like “article 14”.

ICO Exam Exceptions for Data Access Requests

Substack Privacy Policy Update Email Blunder

CJEU Invalidates EU-US Privacy Shield Agreement

Case Study: Doorstep Dispensaree

One in Ten Home Workers Not GDPR Compliant

2020 Set to Break Records for Data Breaches

ICO Enforcements in the First Half of 2020

What Is Cyber Essentials?

A searchable copy of the GDPR

Categories

Tags