Julia Porter18 May 2020New Seven Step Ad Tech Guide from DMA and ISBASeven Step Ad Tech Guide - Support for UK businesses engaged in the programmatic digital advertising to ensure they protect the rights of individuals.Electronic CommunicationsePrivacy RegulationGDPR Simon Blanchard14 May 2020COVID 19 – Privacy under the SpotlightPrivacy and COVID-19. When finding quick solutions and taking rapid decisions, don't forget the privacy impact. Here's our quick tour of aspects to consider. Data SecurityGDPRPrivacy by Design DPN Team15 April 2020DPIAs – What? When? How? Who? Why? [webinar recording]Data Protection Impact Assessments - learn about when you need to conduct a DPIA and how in this webinar hosted by Bristows LLP. Opinion DPN Team04 April 2020Where is my data? How to tackle data discovery & mapping [webinar recording]How improve your data discovery, mapping & compliance Understanding where your data is located across all your systems is an ever-evolving challenge, but forms the bedrock of your data...Opinion Matt Edgar27 February 20205 ways to clean up your data: WhitepaperThe growth of data and its strategic importance to organisations of all sizes has thrust the issue of data quality into the spotlight. The Global Marketing Alliance has published...Direct MarketingGDPR Gemma Johnson13 February 2020Marketers: Will You Need to do a DPIA for that?Why marketers need to understand when they might need to conduct a data protection impact assessment and learn how to do them. Direct MarketingElectronic CommunicationsICO GuidanceMarketing & Data Protection Simon Blanchard11 February 2020Where’s all my data? How to tackle data discoveryUnderstanding where your data is and what it's used for is crucial. But in practice this is challenging. What approach can you take? Opinion Simon Blanchard10 February 2020ePrivacy Regulation – Are we any closer to a final text?Efforts continue to try and agree the final text of the ePrivacy Regulation. Reaching a consensus has proved very challenging since the first draft was published 3 years...Opinion Julia Porter09 February 2020In a Digitally Enabled World, What is Direct Marketing?On 8th January the ICO published a draft code of practice for the marketing community. It’s entitled “Direct Marketing Code of Practice”. The use of the term “Direct Marketing”...Opinion Philippa Donn08 February 2020Refer a Friend – Viral Marketing RulesCan you ask your customers to send on your marketing to their friends? The answer, according to the ICO’s draft Direct Marketing Code, is NO! The regulator says for...Opinion DPN Team29 January 2020Your Views – Survey on draft Direct Marketing CodeA call for your views. The ICO's draft direct marketing code is open for public consultation. The DPN will be providing feedback. Give your comments to further...Opinion Philippa Donn28 January 2020ICO Direct Marketing Code ‘draft’: 12 HighlightsJust when I thought January was feeling dull, I got my hands on the ICO’s much-anticipated draft Direct Marketing Code of Practice! This replaces the Regulator’s existing Direct Marketing...Opinion Philippa Donn28 January 2020Brexit and EU Data FlowsIf you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...Opinion Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Simon Blanchard14 May 2020COVID 19 – Privacy under the SpotlightPrivacy and COVID-19. When finding quick solutions and taking rapid decisions, don't forget the privacy impact. Here's our quick tour of aspects to consider. Data SecurityGDPRPrivacy by Design DPN Team15 April 2020DPIAs – What? When? How? Who? Why? [webinar recording]Data Protection Impact Assessments - learn about when you need to conduct a DPIA and how in this webinar hosted by Bristows LLP. Opinion DPN Team04 April 2020Where is my data? How to tackle data discovery & mapping [webinar recording]How improve your data discovery, mapping & compliance Understanding where your data is located across all your systems is an ever-evolving challenge, but forms the bedrock of your data...Opinion Matt Edgar27 February 20205 ways to clean up your data: WhitepaperThe growth of data and its strategic importance to organisations of all sizes has thrust the issue of data quality into the spotlight. The Global Marketing Alliance has published...Direct MarketingGDPR Gemma Johnson13 February 2020Marketers: Will You Need to do a DPIA for that?Why marketers need to understand when they might need to conduct a data protection impact assessment and learn how to do them. Direct MarketingElectronic CommunicationsICO GuidanceMarketing & Data Protection Simon Blanchard11 February 2020Where’s all my data? How to tackle data discoveryUnderstanding where your data is and what it's used for is crucial. But in practice this is challenging. What approach can you take? Opinion Simon Blanchard10 February 2020ePrivacy Regulation – Are we any closer to a final text?Efforts continue to try and agree the final text of the ePrivacy Regulation. Reaching a consensus has proved very challenging since the first draft was published 3 years...Opinion Julia Porter09 February 2020In a Digitally Enabled World, What is Direct Marketing?On 8th January the ICO published a draft code of practice for the marketing community. It’s entitled “Direct Marketing Code of Practice”. The use of the term “Direct Marketing”...Opinion Philippa Donn08 February 2020Refer a Friend – Viral Marketing RulesCan you ask your customers to send on your marketing to their friends? The answer, according to the ICO’s draft Direct Marketing Code, is NO! The regulator says for...Opinion DPN Team29 January 2020Your Views – Survey on draft Direct Marketing CodeA call for your views. The ICO's draft direct marketing code is open for public consultation. The DPN will be providing feedback. Give your comments to further...Opinion Philippa Donn28 January 2020ICO Direct Marketing Code ‘draft’: 12 HighlightsJust when I thought January was feeling dull, I got my hands on the ICO’s much-anticipated draft Direct Marketing Code of Practice! This replaces the Regulator’s existing Direct Marketing...Opinion Philippa Donn28 January 2020Brexit and EU Data FlowsIf you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...Opinion Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team15 April 2020DPIAs – What? When? How? Who? Why? [webinar recording]Data Protection Impact Assessments - learn about when you need to conduct a DPIA and how in this webinar hosted by Bristows LLP. Opinion DPN Team04 April 2020Where is my data? How to tackle data discovery & mapping [webinar recording]How improve your data discovery, mapping & compliance Understanding where your data is located across all your systems is an ever-evolving challenge, but forms the bedrock of your data...Opinion Matt Edgar27 February 20205 ways to clean up your data: WhitepaperThe growth of data and its strategic importance to organisations of all sizes has thrust the issue of data quality into the spotlight. The Global Marketing Alliance has published...Direct MarketingGDPR Gemma Johnson13 February 2020Marketers: Will You Need to do a DPIA for that?Why marketers need to understand when they might need to conduct a data protection impact assessment and learn how to do them. Direct MarketingElectronic CommunicationsICO GuidanceMarketing & Data Protection Simon Blanchard11 February 2020Where’s all my data? How to tackle data discoveryUnderstanding where your data is and what it's used for is crucial. But in practice this is challenging. What approach can you take? Opinion Simon Blanchard10 February 2020ePrivacy Regulation – Are we any closer to a final text?Efforts continue to try and agree the final text of the ePrivacy Regulation. Reaching a consensus has proved very challenging since the first draft was published 3 years...Opinion Julia Porter09 February 2020In a Digitally Enabled World, What is Direct Marketing?On 8th January the ICO published a draft code of practice for the marketing community. It’s entitled “Direct Marketing Code of Practice”. The use of the term “Direct Marketing”...Opinion Philippa Donn08 February 2020Refer a Friend – Viral Marketing RulesCan you ask your customers to send on your marketing to their friends? The answer, according to the ICO’s draft Direct Marketing Code, is NO! The regulator says for...Opinion DPN Team29 January 2020Your Views – Survey on draft Direct Marketing CodeA call for your views. The ICO's draft direct marketing code is open for public consultation. The DPN will be providing feedback. Give your comments to further...Opinion Philippa Donn28 January 2020ICO Direct Marketing Code ‘draft’: 12 HighlightsJust when I thought January was feeling dull, I got my hands on the ICO’s much-anticipated draft Direct Marketing Code of Practice! This replaces the Regulator’s existing Direct Marketing...Opinion Philippa Donn28 January 2020Brexit and EU Data FlowsIf you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...Opinion Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team04 April 2020Where is my data? How to tackle data discovery & mapping [webinar recording]How improve your data discovery, mapping & compliance Understanding where your data is located across all your systems is an ever-evolving challenge, but forms the bedrock of your data...Opinion Matt Edgar27 February 20205 ways to clean up your data: WhitepaperThe growth of data and its strategic importance to organisations of all sizes has thrust the issue of data quality into the spotlight. The Global Marketing Alliance has published...Direct MarketingGDPR Gemma Johnson13 February 2020Marketers: Will You Need to do a DPIA for that?Why marketers need to understand when they might need to conduct a data protection impact assessment and learn how to do them. Direct MarketingElectronic CommunicationsICO GuidanceMarketing & Data Protection Simon Blanchard11 February 2020Where’s all my data? How to tackle data discoveryUnderstanding where your data is and what it's used for is crucial. But in practice this is challenging. What approach can you take? Opinion Simon Blanchard10 February 2020ePrivacy Regulation – Are we any closer to a final text?Efforts continue to try and agree the final text of the ePrivacy Regulation. Reaching a consensus has proved very challenging since the first draft was published 3 years...Opinion Julia Porter09 February 2020In a Digitally Enabled World, What is Direct Marketing?On 8th January the ICO published a draft code of practice for the marketing community. It’s entitled “Direct Marketing Code of Practice”. The use of the term “Direct Marketing”...Opinion Philippa Donn08 February 2020Refer a Friend – Viral Marketing RulesCan you ask your customers to send on your marketing to their friends? The answer, according to the ICO’s draft Direct Marketing Code, is NO! The regulator says for...Opinion DPN Team29 January 2020Your Views – Survey on draft Direct Marketing CodeA call for your views. The ICO's draft direct marketing code is open for public consultation. The DPN will be providing feedback. Give your comments to further...Opinion Philippa Donn28 January 2020ICO Direct Marketing Code ‘draft’: 12 HighlightsJust when I thought January was feeling dull, I got my hands on the ICO’s much-anticipated draft Direct Marketing Code of Practice! This replaces the Regulator’s existing Direct Marketing...Opinion Philippa Donn28 January 2020Brexit and EU Data FlowsIf you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...Opinion Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Matt Edgar27 February 20205 ways to clean up your data: WhitepaperThe growth of data and its strategic importance to organisations of all sizes has thrust the issue of data quality into the spotlight. The Global Marketing Alliance has published...Direct MarketingGDPR Gemma Johnson13 February 2020Marketers: Will You Need to do a DPIA for that?Why marketers need to understand when they might need to conduct a data protection impact assessment and learn how to do them. Direct MarketingElectronic CommunicationsICO GuidanceMarketing & Data Protection Simon Blanchard11 February 2020Where’s all my data? How to tackle data discoveryUnderstanding where your data is and what it's used for is crucial. But in practice this is challenging. What approach can you take? Opinion Simon Blanchard10 February 2020ePrivacy Regulation – Are we any closer to a final text?Efforts continue to try and agree the final text of the ePrivacy Regulation. Reaching a consensus has proved very challenging since the first draft was published 3 years...Opinion Julia Porter09 February 2020In a Digitally Enabled World, What is Direct Marketing?On 8th January the ICO published a draft code of practice for the marketing community. It’s entitled “Direct Marketing Code of Practice”. The use of the term “Direct Marketing”...Opinion Philippa Donn08 February 2020Refer a Friend – Viral Marketing RulesCan you ask your customers to send on your marketing to their friends? The answer, according to the ICO’s draft Direct Marketing Code, is NO! The regulator says for...Opinion DPN Team29 January 2020Your Views – Survey on draft Direct Marketing CodeA call for your views. The ICO's draft direct marketing code is open for public consultation. The DPN will be providing feedback. Give your comments to further...Opinion Philippa Donn28 January 2020ICO Direct Marketing Code ‘draft’: 12 HighlightsJust when I thought January was feeling dull, I got my hands on the ICO’s much-anticipated draft Direct Marketing Code of Practice! This replaces the Regulator’s existing Direct Marketing...Opinion Philippa Donn28 January 2020Brexit and EU Data FlowsIf you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...Opinion Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Gemma Johnson13 February 2020Marketers: Will You Need to do a DPIA for that?Why marketers need to understand when they might need to conduct a data protection impact assessment and learn how to do them. Direct MarketingElectronic CommunicationsICO GuidanceMarketing & Data Protection Simon Blanchard11 February 2020Where’s all my data? How to tackle data discoveryUnderstanding where your data is and what it's used for is crucial. But in practice this is challenging. What approach can you take? Opinion Simon Blanchard10 February 2020ePrivacy Regulation – Are we any closer to a final text?Efforts continue to try and agree the final text of the ePrivacy Regulation. Reaching a consensus has proved very challenging since the first draft was published 3 years...Opinion Julia Porter09 February 2020In a Digitally Enabled World, What is Direct Marketing?On 8th January the ICO published a draft code of practice for the marketing community. It’s entitled “Direct Marketing Code of Practice”. The use of the term “Direct Marketing”...Opinion Philippa Donn08 February 2020Refer a Friend – Viral Marketing RulesCan you ask your customers to send on your marketing to their friends? The answer, according to the ICO’s draft Direct Marketing Code, is NO! The regulator says for...Opinion DPN Team29 January 2020Your Views – Survey on draft Direct Marketing CodeA call for your views. The ICO's draft direct marketing code is open for public consultation. The DPN will be providing feedback. Give your comments to further...Opinion Philippa Donn28 January 2020ICO Direct Marketing Code ‘draft’: 12 HighlightsJust when I thought January was feeling dull, I got my hands on the ICO’s much-anticipated draft Direct Marketing Code of Practice! This replaces the Regulator’s existing Direct Marketing...Opinion Philippa Donn28 January 2020Brexit and EU Data FlowsIf you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...Opinion Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Simon Blanchard11 February 2020Where’s all my data? How to tackle data discoveryUnderstanding where your data is and what it's used for is crucial. But in practice this is challenging. What approach can you take? Opinion Simon Blanchard10 February 2020ePrivacy Regulation – Are we any closer to a final text?Efforts continue to try and agree the final text of the ePrivacy Regulation. Reaching a consensus has proved very challenging since the first draft was published 3 years...Opinion Julia Porter09 February 2020In a Digitally Enabled World, What is Direct Marketing?On 8th January the ICO published a draft code of practice for the marketing community. It’s entitled “Direct Marketing Code of Practice”. The use of the term “Direct Marketing”...Opinion Philippa Donn08 February 2020Refer a Friend – Viral Marketing RulesCan you ask your customers to send on your marketing to their friends? The answer, according to the ICO’s draft Direct Marketing Code, is NO! The regulator says for...Opinion DPN Team29 January 2020Your Views – Survey on draft Direct Marketing CodeA call for your views. The ICO's draft direct marketing code is open for public consultation. The DPN will be providing feedback. Give your comments to further...Opinion Philippa Donn28 January 2020ICO Direct Marketing Code ‘draft’: 12 HighlightsJust when I thought January was feeling dull, I got my hands on the ICO’s much-anticipated draft Direct Marketing Code of Practice! This replaces the Regulator’s existing Direct Marketing...Opinion Philippa Donn28 January 2020Brexit and EU Data FlowsIf you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...Opinion Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Simon Blanchard10 February 2020ePrivacy Regulation – Are we any closer to a final text?Efforts continue to try and agree the final text of the ePrivacy Regulation. Reaching a consensus has proved very challenging since the first draft was published 3 years...Opinion Julia Porter09 February 2020In a Digitally Enabled World, What is Direct Marketing?On 8th January the ICO published a draft code of practice for the marketing community. It’s entitled “Direct Marketing Code of Practice”. The use of the term “Direct Marketing”...Opinion Philippa Donn08 February 2020Refer a Friend – Viral Marketing RulesCan you ask your customers to send on your marketing to their friends? The answer, according to the ICO’s draft Direct Marketing Code, is NO! The regulator says for...Opinion DPN Team29 January 2020Your Views – Survey on draft Direct Marketing CodeA call for your views. The ICO's draft direct marketing code is open for public consultation. The DPN will be providing feedback. Give your comments to further...Opinion Philippa Donn28 January 2020ICO Direct Marketing Code ‘draft’: 12 HighlightsJust when I thought January was feeling dull, I got my hands on the ICO’s much-anticipated draft Direct Marketing Code of Practice! This replaces the Regulator’s existing Direct Marketing...Opinion Philippa Donn28 January 2020Brexit and EU Data FlowsIf you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...Opinion Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Julia Porter09 February 2020In a Digitally Enabled World, What is Direct Marketing?On 8th January the ICO published a draft code of practice for the marketing community. It’s entitled “Direct Marketing Code of Practice”. The use of the term “Direct Marketing”...Opinion Philippa Donn08 February 2020Refer a Friend – Viral Marketing RulesCan you ask your customers to send on your marketing to their friends? The answer, according to the ICO’s draft Direct Marketing Code, is NO! The regulator says for...Opinion DPN Team29 January 2020Your Views – Survey on draft Direct Marketing CodeA call for your views. The ICO's draft direct marketing code is open for public consultation. The DPN will be providing feedback. Give your comments to further...Opinion Philippa Donn28 January 2020ICO Direct Marketing Code ‘draft’: 12 HighlightsJust when I thought January was feeling dull, I got my hands on the ICO’s much-anticipated draft Direct Marketing Code of Practice! This replaces the Regulator’s existing Direct Marketing...Opinion Philippa Donn28 January 2020Brexit and EU Data FlowsIf you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...Opinion Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn08 February 2020Refer a Friend – Viral Marketing RulesCan you ask your customers to send on your marketing to their friends? The answer, according to the ICO’s draft Direct Marketing Code, is NO! The regulator says for...Opinion DPN Team29 January 2020Your Views – Survey on draft Direct Marketing CodeA call for your views. The ICO's draft direct marketing code is open for public consultation. The DPN will be providing feedback. Give your comments to further...Opinion Philippa Donn28 January 2020ICO Direct Marketing Code ‘draft’: 12 HighlightsJust when I thought January was feeling dull, I got my hands on the ICO’s much-anticipated draft Direct Marketing Code of Practice! This replaces the Regulator’s existing Direct Marketing...Opinion Philippa Donn28 January 2020Brexit and EU Data FlowsIf you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...Opinion Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team29 January 2020Your Views – Survey on draft Direct Marketing CodeA call for your views. The ICO's draft direct marketing code is open for public consultation. The DPN will be providing feedback. Give your comments to further...Opinion Philippa Donn28 January 2020ICO Direct Marketing Code ‘draft’: 12 HighlightsJust when I thought January was feeling dull, I got my hands on the ICO’s much-anticipated draft Direct Marketing Code of Practice! This replaces the Regulator’s existing Direct Marketing...Opinion Philippa Donn28 January 2020Brexit and EU Data FlowsIf you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...Opinion Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn28 January 2020ICO Direct Marketing Code ‘draft’: 12 HighlightsJust when I thought January was feeling dull, I got my hands on the ICO’s much-anticipated draft Direct Marketing Code of Practice! This replaces the Regulator’s existing Direct Marketing...Opinion Philippa Donn28 January 2020Brexit and EU Data FlowsIf you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...Opinion Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn28 January 2020Brexit and EU Data FlowsIf you’ve not yet planned or even considered the data protection impact of Brexit, and specifically data transfers with the European Union, you can breathe a temporary sigh of...Opinion Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn11 December 2019Regulatory Enforcement Action Update Since GDPR came into force more than eighteen months ago, data protection authorities across Europe have been taking action and issuing fines against organisations found to be in...European Data ProtectionGDPR Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn10 December 2019Subject Access Requests & Proof of IDSubject Access Requests – What is ‘proportionate’ to ask for? When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...Individual Privacy Rights DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team10 December 20192020 Vision – Privacy PredictionsPrivacy Predictions for 2020 - what's in store for us next year? The trends, enforcement and organisational imperatives - What do our esteemed DPN Advisory Board believe is in...Opinion Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Debbie McElhill03 December 2019ePrivacy Regulation – Is there still life in it, as the European Commission steps in? In a bid to find consensus the European Commission has announced it’s preparing a revamped ePrivacy proposal. This follows the recent rejection by EU member states of the...Opinion DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team03 December 2019Data Retention: Are you keeping personal data longer than you need it?Ensuring you don’t store personal data for longer than you require it, is a core data protection principle – one which we all know is both complex and challenging...Opinion Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Julia Porter27 November 2019Harnessing the Power of Responsible MarketingWhat is responsible marketing? What core values should you embrace and what type of projects can marketers apply these values to? Here are my six pillars of responsible marketing;...Opinion DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team28 October 2019Rewarding Privacy By Design Have you or your team gone the extra mile to ensure a privacy aware, customer focused approach to a project, initiative or marketing campaign? Or do you know...Opinion DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team24 October 2019Protecting Children’s Privacy Online How do organisations protect children’s privacy online? What are your legal and ethical responsibilities? In this webinar one of the country’s leading privacy lawyers, Robert Bond from Bristows...Opinion Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Debbie McElhill21 October 2019Personal Data Breaches – to notify or not to notify? As the dark, creeping realisation dawns that a personal data breach may have occurred, staff who think something has gone wrong are faced with an urgent and important...Opinion Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn18 October 2019Data Breach Class Actions – Has the risk increased? In the run up to ‘GDPR Day’ on 25th May 2018 there were warnings data protection was set to become the new PPI and fears spread of ‘ambulance...Opinion Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn18 October 2019Marketing Message & Service Message: Where to draw the lineIs your ‘Service’ Message actually a Marketing one? A common (but incorrect) myth which spread with GDPR was that consent was required for almost everything – including all communications...Direct Marketing Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn02 October 2019Opt-in for marketing abandoned by RNLIHas opt-in suffered a blow? It’s now official that opt-in for all forms of direct marketing has not proven a success for the RNLI, despite earlier reports to the...Opinion Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Debbie McElhill18 September 2019ePrivacy Regulation – what’s happening?ePrivacy Regulation – first draft 2017, so what’s happening two years on? The ePrivacy Regulation is set to replace the 2002 ePrivacy Directive (and subsequent amendments) which currently sits...Opinion Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Debbie McElhill18 September 2019Personal Data Breaches: Prevention & PlanData Breach! Are you ready should the worst happen? We’ve all seen the headlines, data breaches are weekly if not daily news. Regulators across Europe are busy wading through...Opinion DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team16 September 2019Data Governance – Getting to know your DataData Governance – the what, why & how? Data Governance has long been recognised as a method of protecting the business, mitigating risk, increasing operational efficiencies and managing customer...GDPRPolicies and Processes Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn12 September 2019The DPN Rosemary Smith Award for Responsible MarketingThis award has been launched to recognise a contribution made to Responsible Marketing, giving a team or an individual credit for a creative and privacy aware project or initiative.Opinion Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn04 September 2019Brexit No Deal Data Protection GuideNo-deal Brexit – what’s the data protection impact? What steps should organisations take to prepare? This guide aims to cover the key areas organisations should consider, and provide...GDPRInternational Data Protection Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn23 August 2019Data Sharing 10 TipsMany companies need to share personal data with other organisations. This might be reciprocal or one-way, it could be providing another company’s staff with access to your data for...GDPRICO Guidance DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team22 August 2019Data Innovation & Compliance: Impact ReportData Innovation: The Challenges, risks & approaches Companies are increasingly being asked to innovate in a smart but more considerate, privacy-friendly manner. The DPN & Global Marketing Alliance and...Data Governance & SecurityGDPR Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Gemma Johnson22 August 2019DPIA – How to assess projects in an Agile environmentDPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...Data Governance & SecurityGDPRPolicies and Processes Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn14 August 2019GDPR Right of Access – PhD student claims privacy risksCould the Right of Access leave consumers open to privacy risks? News that an Oxford University PhD student and cyber security researcher, managed to collect personal data about his...Opinion Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Julia Porter09 July 2019ICO cookie guidance and the impact on website analyticsCookie guidance updated Last week, the ICO published their updated guidance on the use of cookies and other similar technologies. This is to be welcomed as there were some...Opinion Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn09 July 2019GDPR regulatory action so far in the UK and EU (July 2019)GDPR Regulatory Action The UK’s data protection regulator has made its first hefty announcements since GDPR became law in 2018. With news British Airways and Marriott could face massive...GDPRInternational Data ProtectionUncategorized DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team05 July 2019GDPR: Impact Report 2019The impact of GDPR More than a year on from enforcement day, where are we now with GDPR? The Global Marketing Alliance and the DPN teamed up with global...Direct MarketingGDPRUncategorized Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Mark Bridges05 July 2019CCPA – Californian Consumer Privacy Act: 5 Key ImpactsCCPA: What businesses need know The Californian Consumer Privacy Act (CCPA) ushers in new rights for Californian residents and compels companies that operate in California to implement changes or...Opinion DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team05 July 2019Adtech: The challenging compliance landscape – webinar recordingPublishers, advertisers, adtech firms, start-ups and privacy activists are all united in a strong interest in online advertising and programmatic delivery . After all, it represents the lion’s share...Opinion Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Julia Porter21 June 2019Cookies, Consent & Compliance: 10 takeaways from the ICO’s update report into AdTech and RTB10 Takeaways from ICO’s Update Report The ICO has published an Update Report on AdTech and Real Time Bidding (RTB). The clue is in the word “update” in that...Opinion Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn22 May 2019Why GDPR is not a fuss over nothingWe’ve heard the comparison with the millennium bug – the sky didn’t fall in on 25th May… ‘where are these game-changing fines? This is the Y2K bug all over...Opinion Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn21 May 2019‘Performance of a contract’- is this lawful basis being too broadly interpreted?EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...Data Governance & SecurityDirect MarketingEuropean Data ProtectionGDPR Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Simon Blanchard20 May 2019Getting your Supplier Contracts RightA GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...Data Governance & SecurityData Protection for SMEsGDPR Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn18 April 2019Data Protection Awareness & Training – Your Achilles Heel?Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...Data Governance & SecurityGDPR DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team15 April 2019Remembering RosemarySadly the Data Protection Network and Opt-4 lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the...Direct MarketingUncategorized Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn02 April 2019Prospects, Leads, Bought-in lists … Don’t forget the right to be informedTransparency, Control and the Right to be Informed Let me take you back a year, to April 2018 – a time when there was a considerable flurry to ensure...Opinion Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Simon Blanchard20 March 2019Like Gin and Tonic – Why GDPR and Data Governance were made for each otherWhy GDPR and Data Governance go hand in hand Like G&T, data governance is not a new concept. It has been recognised for years as a method of protecting...Opinion Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Gemma Johnson08 March 2019Why 59 Charities were referred to the ICO by the Fundraising RegulatorThe Fundraising Regulator has warned that 59 charities could be in breach of data protection law for failing to apply suppression requests made via the Fundraising Preference Service (FPS)...Opinion Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Julia Porter07 March 2019Do Smaller Customer Databases Spell Disaster?10 tips for making sure your customer database is match fit GDPR provided a golden opportunity for companies to reduce the size of their databases. It was often surprising...Opinion DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team06 March 2019120 Data Protection Officers reveal…Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...Data Protection for SMEsGDPR Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn05 March 2019Digital advertising & real-time bidding: Are we on the verge of a seismic shift or not?GDPR put a significant spanner in the world of digital advertising, which disparate parties with different vested interests have been grappling with now for months. How can organisations provide...Opinion Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Gemma Johnson04 March 2019Brexit Data Response PlanWhat Does Brexit Mean for Data Flows? Get Your Organisation Ready With March 29th looming and no decision yet on whether the UK will leave the EU without a...GDPRInternational Data Protection DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team25 January 2019Data Protection Officers: DPO InsightsData Protection Officers – What are the challenges? What areas would DPOs like more guidance on? Do you have what it takes to be a DPO? “GDPR impacted every...Opinion Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn22 January 2019Legitimate Interests: It’s legit, isn’t it?“Legitimate interests is the most flexible lawful basis for processing, but you cannot assume it will always be the most appropriate” UK Information Commissioner’s Office Let’s say you want...Opinion DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team20 December 2018Data Protection Officer SurveyThis survey closed on 12th February 2019. DOWNLOAD: DPO Survey Results Report Calling all DPOs! This research survey is being conducted to ask DPOs about their experience and to...Opinion DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team17 December 2018Privacy Baubles & Data Tinsel2018 data protection highlights, surprises and amusing moments, in 50 words or less, from our DPN board members and friends. We also have some predictions for the year ahead…...Opinion DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team04 December 2018Data Subject Access Requests – your burning questions answeredThe right of access is nothing new, but GDPR has caused a surge. The sheer volume of requests presents a challenge, as do the more privacy-savvy questions being asked....Opinion Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Stef Elliott21 November 2018“The cookies law is clear – well that takes the biscuit”The ePrivacy Regulation was originally planned to come into force simultaneously with the GDPR on 25th May 2018. The delay and the ongoing debate regarding the Regulation, as highlighted...Electronic CommunicationsePrivacy RegulationGDPR Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Gemma Johnson20 November 2018GDPR FAQsData protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions. Here are some handy answers...GDPRIndividual Privacy Rights Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Debbie McElhill19 November 2018Brexit Withdrawal Agreement – Data Protection UpdateAlthough it may be rejected amid the political maelstrom raging around Brexit, there are some key aspects of the draft EU-UK Withdrawal Agreement which concern data protection. What’s encouraging,...Opinion Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Julia Porter18 November 2018Privacy International’s GDPR complaints shine a spotlight on 7 data companiesOn November 8th, Privacy International (PI) filed complaints under the GDPR with data protection regulators in UK, France and Ireland against data brokers Oracle and Acxiom, credit reference agencies...Opinion Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Simon Blanchard18 November 2018ePrivacy Regulation is not ready and could be stalled even furtherAs those in the know recognise, data protection is not just about GDPR. Many of us have been waiting for GDPR’s EU counterpart, the new ePrivacy Regulation for a...Opinion Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Simon Blanchard24 October 2018How the Morrisons liability case increases risks for employersThe Court of Appeal has ruled this week that Morrisons must pay compensation to thousands of employees who were victims of a data beach in 2014. The supermarket chain...Opinion Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Gemma Johnson23 October 2018GDPR and Children’s Privacy Rights – What brands need to knowAs a mother of three children under the age of 12 years old and working in the data protection industry, I have the fortunate position of wearing ‘two-hats’ whilst...Opinion Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn22 October 2018GDPR: The Seven Deadly (Data Protection) SinsWe hear much about good GDPR compliance, and how to meet the seven data protection principles – to be accountable, transparent, lawful and so on. But sometimes, in order...Opinion Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Michael Bond22 October 2018GBBO (read GDPR): No Soggy Bottoms Here!The current season of the hit Channel 4 show The Great British Bake Off has, like previous years, gripped the imagination of the British public, with millions tuning in...Opinion Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Matt Edgar02 October 2018Spam crusader or vigilante victim – what happens if you are blacklisted unfairly?Finding spam a nuisance and being anti-spam is a default setting for all of us these days. Even as technology evolves and our mailboxes become smarter in reducing this...Opinion Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Stef Elliott01 October 2018Cookies: GDPR and ePrivacy (video)Cookie notices, splash pages and various consent management platforms are everywhere. If you’re struggling to wade through the mire that is cookie compliance, watch our cookie webinar with Robert...Opinion Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Simon Blanchard25 September 2018Brexit, GDPR and data protection: What happens if the UK becomes a third country?The impact of Brexit Data protection is unlikely to be foremost in people’s minds when considering the impact of Brexit, whether it be soft or hard, deal or no...GDPRInternational Data Protection Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn18 July 2018ePrivacy Regulation updateA first draft of a new ePrivacy Regulation was published back in January 2017 when it had been hoped it would be implemented alongside GDPR. This clearly became far...Opinion Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn17 July 201810 GDPR Survival TipsGDPR-weariness has flourished after the frenetic preparations in the run-up to 25th May. However, GDPR isn’t about quick fixes and compliance doesn’t stop after the sparkly new privacy notice...Opinion Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Jenny Moseley09 July 2018Legitimate Interests: A wasted marketing opportunity?In the run-up to GDPR enforcement day, many thought the only game in town when it came to lawful bases for processing personal data was Consent. It seemed Article...Opinion Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Mark Bridges09 July 2018California gets tough on privacyFollowing hot on the heels of the General Data Protection Regulation (GDPR) in Europe, Californian lawmakers have passed perhaps the strictest privacy legislation in the United States to date....Opinion Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn29 May 2018GDPR: The defence of not relying on Consent begins…I knew there would be confused messages about the GDPR, given the scale and ambition of the legislation. With that in mind, I warned clients the public’s initial understanding...Opinion Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn14 May 2018GDPR Data Protection Impact Assessments Guide – DPIAsData Protection Impact Assessments – Why? When? How? The principle of ‘privacy by design’ is not new but it is embedded within the EU General Data Protection Regulation. At...GDPRPolicies and ProcessesPrivacy by Design Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn13 May 2018GDPR: The Right of AccessThe Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...GDPRIndividual Privacy Rights Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Charles Ping12 May 2018GDPR – Soon it’ll be June. Don’t expect a restWe’re now in the final stretch. Just days to go to “that date”. I’d like to think that regular visitors to the Data Protection Network have all laughed at...Opinion DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team07 April 2018DPN Legitimate Interests Guidance – GDPR (Version 2.0)Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...GDPR Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Robert Howells19 February 2018GDPR compliance: how America is tackling new EU data protection rulesHow U.S. based companies are tackling GDPR compliance and how they can decide which sources of guidance will help not hinder their efforts Whether it is the release of...Opinion Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Robert Bond08 February 2018GDPR and Data Processing AgreementsAny business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...GDPRInternational Data Protection Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn05 February 2018GDPR: Marketers don’t forget PECR!With time running out everyone is feverishly trying to ensure compliance with the GDPR. But while focusing on the GDPR, are the current rules surrounding electronic marketing communications being...Opinion Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Rosemary Smith18 December 2017GDPR and people powerDespite several months until the GDPR implementation articles are already appearing in the press, focussing on the data rights individuals will have. Many of these are inaccurate (I saw...Opinion Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn14 December 2017GDPR – When will we get final guidance on Consent?Rumours are circulating that the final Consent Guidance from the Information Commissioner’s Office may be further delayed, it had been anticipated early in the New Year. This presents an...Opinion Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Karima Saini04 December 2017GDPR Compliance: the EU-US Privacy Shield AdvantagePrivacy Shield adherent companies cannot underestimate the rigours required to comply with the GDPR, however they may have less work ahead of them than others. The General Data Protection...GDPRInternational Data ProtectionUncategorized Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn27 November 2017Legitimate Interests and Direct Marketing“This is so brilliant. It’s like Gardener’s Question Time for GDPR enthusiasts!” When and how might you be able to rely on Legitimate Interests as the lawful basis for...Opinion Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn17 November 2017ePrivacy Regulation, latest developments and fearsWhile the data protection community has been busy grappling with the GDPR, another piece of legislation could have an even more significant impact. This is the new ePrivacy regulation,...Opinion Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Rosemary Smith15 November 2017GDPR and the legacy data dilemmaAre you preparing to roll out new permission statements to collect personal data to a GDPR standard, but wondering what to do about your existing data? Can it be...Opinion Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Debbie McElhill14 November 2017GDPR Privacy Policy GuideA Guide to Writing Privacy Policies All organisations should review their privacy policies in the light of the EU General Data Protection Regulation (GDPR). At the heart of the...GDPR Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Debbie McElhill02 November 2017GDPR Data Retention Quick GuideThe EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, brings in stricter requirements regarding how long personal data may be retained. Organisations will...GDPR Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn05 October 2017ePrivacy – Proposed Amendments (Estonia Text – Sept 2017)The European Council has published proposed amendments to the first draft (published in January 2017). These changes focus on the Articles not the Recitals and it has been stressed...ePrivacy Regulation Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn05 October 2017New UK Data Protection Bill – DPN FactsheetThe UK Government published a new Data Protection Bill in September 2017, paving the way for a new Data Protection Act which will replace the existing DPA 1998. This...Data Protection ActGDPR DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team04 October 2017Using Legitimate Interests legitimatelyIn our webinar on 12th September 2017, our panel discussed and took questions on the use of Legitimate Interests as a lawful basis for processing personal data under the...Opinion DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team03 October 2017GDPR Derogations ListThe GDPR became UK law on 25 May 2018. The regulation contains a number of derogations, where EU member states can exercise a degree of discretion (flexibility) over how...Data Protection ActGDPR Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Karima Saini25 September 2017GDPR 10 Point Checklist for MarketersAll UK businesses were required to be compliant with the EU General Data Protection Regulation (GDPR) from the implementation date on 25th May 2018. The GDPR introduces a number of...Direct MarketingElectronic CommunicationsGDPR Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Rosemary Smith20 September 2017The ICO – why we need a well-resourced RegulatorWe are all clamouring for advice about the GDPR; why hasn’t the Information Commissioner’s Office provided us with comprehensive guidance on consent, profiling, children’s data, accountability? And, so the...Opinion Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn13 September 2017GDPR and Data Breaches: Are you prepared?GDPR – Data Breach requirements and notification regimes Recent high-profile data breaches demonstrate how critical it is to be ready to handle a breach. Advance planning will ensure you...Data Governance & SecurityGDPR Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Simon Blanchard04 September 2017GDPR – Data Processor liability, what’s changing?Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...GDPR Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn03 August 2017UK Data Protection Bill expected after Parliament’s Summer breakAs final ICO guidance on consent gets pushed back to the end of the year and we still await the final text of the proposed ePrivacy Regulation, we can...Opinion Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Rosemary Smith25 July 2017GDPR and Consent – Please, give us a clue?Back in March there was a clamour of excitement, with the ICO publishing draft guidance on consent under the forthcoming GDPR. The Regulator also began a consultation, for organisations...Opinion Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Simon Blanchard20 July 2017GDPR – Impact on database & marketing platformsHow do database and marketing platforms change under the GDPR? The new General Data Protection Regulation (GDPR) came into force on 25th May 2018. There are several ways in...Direct MarketingElectronic CommunicationsGDPR DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team11 July 2017How to use Legitimate Interests Legitimately? New GuidanceThe DPN publishes its highly anticipated guidance on Legitimate Interest under the GDPR In the face of tighter rules surrounding consent under the forthcoming GDPR, many organisations are looking...Opinion Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Karima Saini11 July 2017GDPR: 51 ways to get into trouble with the GDPR (and it will cost you millions)Unless you were just rescued from being a castaway on a deserted island for the past two years, you will be aware of the headline grabbing news about how...Opinion Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Simon Blanchard06 July 2017FPS launches enabling the public to block direct marketing from named charitiesFor nearly twenty years individuals have been able to sign up to the Mailing Preference Service (MPS) or the Telephone Preference Service (TPS) to prevent unwanted marketing mail or...Opinion DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team05 July 2017Data sharing – how do you tell your customers the benefits? (Video)Data sharing can have positive benefits for consumers. However, little has been done to inform them of the value they might gain when their data is shared. This has...Opinion Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn23 June 2017The UK’s new Data Protection Bill and the GDPR go hand in handIn the Queen’s Speech (outlining the new UK Government’s programme) a new Data Protection Bill has been announced. But don’t think this gets you off the hook with the...Opinion Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn05 June 2017GDPR – Organisations on tenterhooks awaiting regulatory guidanceFor most organisations trying to ensure compliance and manage budgets, guidance on key areas of the GDPR can’t come soon enough. Susan Corless, Client Relationship Manager at TwentyCi says...Opinion DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team30 May 2017GDPR Countdown: Will your marketing be legal?With less than a year to go until the EU General Data Protection Regulation is enforced, what do organisations need to do to ensure their marketing activities will be...Direct MarketingGDPR Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn24 May 2017ePrivacy Regulation – what you need to knowData protection laws are undergoing a significant transformation. In the UK, the key pieces of law governing data protection are the Data Protection Act (1998) and the EU ePrivacy...ePrivacy Regulation Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Jenny Moseley12 May 2017The use of personal data for Market Research purposesWhen using personal data for market research purposes, what constitutes “true” market research? Section 33 of the Data Protection Act 1998 exempts processing of personal data for “Research, History...Direct Marketing Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn12 May 2017Direct Marketing Code of Practice – good practice no longer optionalAhead of the forthcoming UK General Election the Digital Economy Act has been passed and it brings with it a fundamental change for Direct Marketing. At present organisations can...Opinion Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn08 May 2017GDPR Individual Rights – how to handle them?Handling individuals’ rights to control their data From its inception, the GDPR (which came into force on 25th May 2018) was designed to strengthen the privacy rights of EU...GDPRIndividual Privacy Rights Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn08 May 2017GDPR Legal Grounds for Processing – Consent? Legitimate Interests?Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....GDPR Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn08 May 2017ICO Charity Fines – Wealth-screening, Data Sharing and AppendingCharities, be very aware! You need to inform your supporters if you carry out wealth-screening, you need opted-in consent to share their data; clearly saying who you might share...Opinion Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Rosemary Smith24 April 2017Time to conduct a GDPR Impact Assessment?The GDPR will become a reality on 25 May 2018, but do you really know what it will mean for your business? We are beginning to get a clearer...Opinion Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn24 April 2017Clarity on Consent under the GDPR urgently sought‘Active’ Opt-in is a near certainty – but how can obtaining ‘granular’ consent be achieved in a clear and concise manner? Will there really be no ‘grace’ period after...Opinion Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Simon Blanchard21 April 2017Legitimate Interests under the GDPR – guidance coming soonThe use of Legitimate Interests as a legal ground for processing personal data under the EU General Data Protection Regulation poses a number of questions – When might they...Opinion Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn03 March 2017GDPR and Consent – ICO Draft GuidanceThe ICO have finally issued their much anticipated guidance on consent under the EU General Data Protection Regulation. The highlights are that consent will require an opt-in and third...Opinion Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Philippa Donn01 March 2017GDPR Data Governance – demonstrating you take compliance seriouslyWho protects your data? How will your organisation govern itself? The General Data Protection Regulation (GDPR) became UK law on 25th May 2018. GDPR specifically highlights the requirement for...GDPR DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team01 March 2017GDPR Compliance Ladder – Step up and complyThe changes the EU General Data Protection Regulation (Regulation (EU) 2016/679) ushers in shouldn’t be underestimated. It is a substantial piece of legislation with wide-ranging consequences. Are you ready?...Opinion Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
Simon Blanchard28 February 2017Charity Fundraising – The ICO’s Fundraising and Regulatory ConferenceIt’s crucial for charities to focus on ensuring they have appropriate consent from their supporters. New guidance has been published by the Fundraising Regulator on handling personal information and...Opinion DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
DPN Team23 February 2017DPN’s GDPR Compliance LadderThe Data Protection Network has produced practical guides, which we hope you will find useful in your work in complying with the EU General Data Protection Regulation, which came...GDPRInternational Data Protection
