Articles

What steps to take to tackle your international transfers. Our expert panel discusses UK adequacy, new SCCs and shares some handy tips.

Targeted advertising via various social media platforms is widely used. But are we being open and upfront about it?

Have you got your cookies in order? If not, does it matter? Find out what good looks like when it comes to cookie compliance

Do you know where your data breach risks lie? Are you prepared for the worst? We share some valuable tips for your incident planning...

Sent an attachment to the wrong person? Left a laptop on a train? Human error is a major cause of data breaches. What can we do?

How do the new SCCs work? What do 'supplementary measures look like? Get the low down on international transfers post Brexit & Schrems II...

How can you minimise the volumes of data you keep whilst also maintaining good levels of marketing permissions?

Data breaches can affect anyone - the stats are concerning and we've all seen the headlines. Why being prepared is crucial...

Are you suffering from consent confusion? We dispel the myths about consent under GDPR, share some tips and handy checklist...

Getting rid of personal data your business no longer needs is a really simple concept, but in practice it can be rather tricky to achieve!

We spoke to the Online Dating Association about privacy matters - here are our ten data protection lessons

Erasure requests proving a challenge? Get some top tips on how to get your Right to Erasure process on track.

How to track your business’s privacy performance and make sure data is being successfully managed across the business.

What data protection challenges has Covid raised? What difficult decisions do we face? Listen to our expert panel discuss...

International data transfers: A draft adequacy decision has been published which would allow for the free flow of data from EEA to UK.

How the pandemic raises a number of privacy challenges and means taking difficult decisions on the collection and use of personal data.

Is the proposed EU ePrivacy Regulation, which will give us new rules for cookies and electronic communications, a step closer?

Take control of your data! How a data governance framework means you can meet business objectives without taking unnecessary risks.

UK email marketing rules - when do you need consent? what's the soft opt-in and when can you lawfully use an opt-out?

Listen in as we discuss the challenges of handling employee-related data subject access request, with some tips on how to be more efficient.

As the ICO resumes its investigation into adtech and RTB, what steps should advertisers and players in this market be taking?

How well-crafted easy to read data protection policies help to make sure your staff know how do the right thing

What does good data protection training look like? Why one-off sessions will not cut it and how to keep the momentum going...

What data protection and ePrivacy law applies in the UK post Brexit? Our handy Q&A answers key considerations for your business.

More than ever we need to focus on being open and transparent and building trust with customers. What core values should you embrace?

The ICO calls for transparency, accountability and trust to be core themes in the UK's National Data Strategy post-Brexit

Fears the free flow of data from the EEA to UK would end have been averted with the Brexit Trade Deal. But we’re not out of the woods yet.

As the ICO publishes Data Sharing Code of Practice, what are the 10 key points you need to think about before you share personal data?

UK organisations may need to appoint a EU representative, find out if your organisation falls under this GDPR requirement...

We're supporting the charity Bankuet, which fills the gaps providing Food Banks with what poeple need most when they need it.

130 people, battle-scarred data professionals all, chose to cry havoc and unleash the Dogs of Data by taking part in our Fantasy GDPR quiz.

Allocating responsibility for your privacy risks - Is it right for data protection risks to sit with your Data Protection Officer?

We take a look at how ICO's handy Accountability Framework can help organisations meet their GPDR responsiblities.

As the ICO slams a £18 million data breach fine on Marriott, we take a look at what went wrong and what other businesess can learn ...

How to address the challenge of privacy choices for multinationals faced with different communication privacy laws around the world.

Listen in as an expert panel discuss handling complex DSARs in large and medium-sized organisations. How to respond and how tech can help.   

Your data protection questions answered. Lively debate, topical polls with an expert panel. Recording now available.

Subject Access Requests: As the ICO published detailed guidance we take a look at the higlights and whether it's a help or hindrance

Giving an individual or team credit for a creative and privacy aware project. This award recognises a responsible approach to marketing.

British Airways has been fined £20m by the ICO, what lessons can we all learn from BA's painful personal data breach?

Data Subject Access Requests can be a challenge to handle. Get 10 great tips from experts who routinely handle the right of access,

Alarming headlines have suggested COVID-19 contact tracing data from pubs and restaurants is being sold on. Is this actually true and what should checks should you take?

Covid-19 has meant employers have, by necessity, made risk-based data decisions. Do these need revisiting now?

What checks and balances should you have in place if you are monitoring your employees' health during the pandemic? We take a look at the core areas to consider...

We now have the newly minted Covid app modelled on the Google and Apple templates. Should we be trusting this app?

The demise of the third party cookie - five signs the world is changing. Where next for targeted advertising?

How to get your Data Protection Impact Asssessment process on track - when should you do one, what should you process look like? Get some useful tips...

New Children's Code to protect under 18s online. It will affect your business if your online services are likely to be acccessed by children.

How to implement Data Protection by Design when you are developing new applications, products and services.

What does ‘Data Protection by Design’ really mean (and why is it also called ‘Privacy by Design’)? Do you need to be concerned about it? And how do you...

Which organisations need to have a DPO? If you don't should you appoint one anyway or outsource? We explore the options ..

South Wales Police's use of automated facial recognition has been ruled unlawrul - it breaches human rights and has potential for bias.

Looking to leverage your customer database to drive more business? How to make sure you marketing plan is supported by your privacy strategy

7 point privacy guide for use of dashcams in vehicles. Quick steps to make sure your use of dashcams is transparent and lawful.

Seven steps for making sure innovation flourishes and your artificial intelligence activities are sound from a data protection point of view

How to manage your suppliers and reduce the risk they may post. Hear our specialist panel chat through the key points to consider.

DSARs from disgruntled ex-employees can be challenging to handle, get some helpful tips on how best to approach the task of fulfilling them.

International data transfers - EU-US Privacy Shield ruled invalild, questions raised regarding SCCs, find out what actions should you take.

5 tips for keeping your GDPR records of processing activities up to date. The why, who, what, how and when of data protection documentation.

Discover the benefits of being upfront and transparent with people about how you use their data.  In this webinar hosted by Robert Bond from Bristows we explore why transparency...

Due diligence of new suppliers robust enough? Checks in place to make sure suppliers are protecting your data? Use the DPN 6-point checklist.

From holiday cottages to theme parks, hotels to pubs, many will be collecting people's details for contact tracing. Get our quick guide to how to do this.

You are at the end of long day .. you just do one last check of your inbox - the new count registers over 9,000 new emails! All...

Facial recognition is clever, from selfies to surveillance its use is becoming far more widespread.  Should we be worried?

How do you assess the actual risk to people of a data breach? 10 questions you need to ask when carrying out an risk assessment.

Get the tools and advice you need to tackle data retention and minimisation in this expert discussion which takes you through the key steps to take.

Have you got robust cyber security controls in place? How the lax attitude of the CIA is a lesson to us all and what you should you be doing.

Pondering how to improve your privacy credentials? Here are 5 steps to inspire you. More than 2 years on from GDPR, remember it’s a journey, not a sprint.

“Hi, you haven’t finished watching Jeffrey Epstein: Filthy Rich”, said an email my husband received .It annoyed him......

Get top tips on data retention. Minimise your risks by making sure you keep the personal data you need and rid of what you don't.

GDPR may have its critics and regulators may stand accused of not taking enough action. Why this is not a reason to stop taking data protection seriously.

Five ways to help explain complex and contentious uses of personal data. How to improve your communications and transparency.

A practical toolkit packed with tips, advice and case studies on how to tackle data retention. Developed by a group of data protection and privacy specialists from a...

Seven Step Ad Tech Guide - Support for UK businesses engaged in the programmatic digital advertising to ensure they protect the rights of individuals.

Privacy and COVID-19. When finding quick solutions and taking rapid decisions, don't forget the privacy impact. Here's our quick tour of aspects to consider.

Why marketers need to understand when they might need to conduct a data protection impact assessment and learn how to do them.

Subject Access Requests – What is ‘proportionate’ to ask for?  When responding to a Right of Access request (commonly known as a Subject Access Request), we might be required...

DPIAs in an Agile environment More than 50% of organisations have adopted Agile methodologies for technology projects – including those which involve the processing of personal data. Agile methodology...

EDPB issues draft guidelines on using ‘contract’ as lawful basis for online services Is your collection of personal data and the purposes you use if for really necessary in...

A GUIDE TO CONTROLLER-PROCESSOR CONTRACTS The GDPR sets out strict requirements for when an organisation decides to utilise the services of another company to process personal data. The most...

Data Protection Awareness & Training GDPR has been a driving force for organisations to really get to grips with the protection of personal data. However one of the big...

Sadly the Data Protection Network lost our colleague and good friend Rosemary Smith. Rosemary passed away peacefully on Monday 8th April (2019). A year ago, amidst the hectic preparations...

Data Protection Officer Survey Results One of the most significant impacts of GDPR was that many organisations were required to appoint a Data Protection Officer, and many more chose...

Data protection legislation is nothing new, but GDPR does enhance the rules, introduce tougher obligations and build on or change previous data protection definitions.  Here are some handy answers...

The Right of Access – Data Subject Access Requests: how to handle them The right of access is nothing new, but there are some changes ushered in by the...

Updated version of the DPN’s Legitimate Interests Guidance We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case...

Any business subject to the EU General Data Protection Regulation (GDPR) as a Controller needs to have in place an appropriate contract with any other Controller it jointly shares...

Getting prepared for the EU General Data Protection Regulation – review you data processor contracts The GDPR has a major impact on the responsibilities of both data controllers and...

Do you have a legal ground for processing personal data? You need one under the GDPR The General Data Protection Regulation (GDPR) came into force on 25 May 2018....

Can we help you comply with the GDPR? The new EU Regulation was implemented on 25th May 2018, bringing with it a swathe of new legislation. We have published...