GDPR

GDPR Article 17: What Is the Right to Erasure?

Article 17 of the GDPR (General Data Protection Regulation) plays a distinctive yet essential role in data protection law. It enshrines “the right to erasure” (sometimes referred to as “the right to be forgotten”), which allows people to request that an organisation deletes any personal data related to them. There are several reasons why someone might make such a request, and in almost all instances, the organisation must comply. Failure to fulfil this requirement is considered a serious breach and could be penalised under the GDPR’s upper tier of fines of €20 million (£17.5 million under the UK GDPR) or

The post GDPR Article 17: What Is the Right to Erasure? appeared first on IT Governance UK Blog.

March 30, 2023
0 comment
Read More >>

How to Respond to a Data Subject Access Request (DSAR)

Under EU and UK law, individuals have the right to know what personal data an organisation processes about them and how it is used. They can exercise this right by submitting a DSAR (data subject access request). The rules for DSARs are outlined in the GDPR (General Data Protection Regulation), and these have been carried over into UK data protection law with only a few exemptions, which are detailed in Section 45(4) of the DPA (Data Protection Act) 2018. DSARs as a concept were not created with the GDPR, but the legislation standardised several processes that make it easier for

The post How to Respond to a Data Subject Access Request (DSAR) appeared first on IT Governance UK Blog.

March 21, 2023
0 comment
Read More >>

Biden Cybersecurity Strategy: Big Ambitions, Big Obstacles

The White House’s National Cybersecurity Strategy unveiled yesterday is an ambitious blueprint for improving U.S. cybersecurity and threat response, but some of the more ambitious items will take time to implement, and could face opposition from Congress. President Biden came into office around the time of the SolarWinds and Colonial Pipeline cyber attacks, so cybersecurity […]

The post Biden Cybersecurity Strategy: Big Ambitions, Big Obstacles appeared first on eSecurityPlanet.

March 3, 2023
0 comment
Read More >>

The importance of data retention policies

A data retention policy is the first step in helping protect an organization’s data and avoid financial, civil, and criminal penalties that increasingly accompany poor data management practices. This article outlines what a data retention policy is and…

February 3, 2023
0 comment
Read More >>

How to write a GDPR data protection policy – with template examples

The GDPR (General Data Protection Regulation) isn’t just about implementing technological and organisational measures to protect the information you store. You also need to demonstrate your compliance, which is why data security policies are essential. These documents form part of organisations’ broader commitment to accountability, outlined in Article 5(2) of the GDPR. In this blog, we explain what a GDPR data protection policy is and explain how you can accelerate your implementation project. Contents What is a data protection policy? Why do you need a GDPR data protection policy? What your data protection policy should include What is a data

The post How to write a GDPR data protection policy – with template examples appeared first on IT Governance UK Blog.

January 27, 2023
0 comment
Read More >>

The Irish DPC fined WhatsApp €5.5M for violating GDPR

The Irish Data Protection Commission (DPC) fined Meta’s WhatsApp €5.5 million for violating data protection laws. The popular messaging app WhatsApp has been fined €5.5m by the Irish Data Protection Commission (DPC) for violating the General Data Protection Regulation (GDPR). The DPC has given six months to the Meta-owned company to bring its data processing […]

The post The Irish DPC fined WhatsApp €5.5M for violating GDPR appeared first on Security Affairs.

January 21, 2023
0 comment
Read More >>

Irish Data Protection Commission fined Meta $414 Million

The Irish Data Protection Commission (DPC) fined Meta Platforms €390 million over data processing operations for the delivery of its services The Data Protection Commission (DPC) concluded two inquiries into the data processing operations of Meta Platforms Ireland Limited (“Meta Ireland”) over the delivery of its Facebook and Instagram services. DPC fined Meta Platforms a total of […]

The post Irish Data Protection Commission fined Meta $414 Million appeared first on Security Affairs.

January 5, 2023
0 comment
Read More >>