ISO 27701 has come along to add another management system into the ISO camp. With the creation of a Privacy Management System (PMS), the International Standards Organisation (ISO) is looking to provide a compliance framework for global privacy legislation and regulation. There is a significant cost in evidencing compliance to any regulation, that most organisations …
ISO 27701 does not cover the GDPR out of the box Read More »
In the news this week: Brave submits formal GDPR complaint against Google’s internal data free-for-all. Pharmacy Doorstep Dispensaree is challenging the UK data watchdog’s decision to fine it under the GDPR (EA/2020/0065). CNIL enforcement looms over the adtech sector in France. Will BA and Marriott proposed fines now disappear in part due to COVID-19? How to avoid being phished during COVID-19. Statement …
Privacy Update for the week ending 22nd March 2020 Read More »
In the news this week: The Swedish DPA imposes €7m administrative fine on Google. A further draft of the ePrivacy Regulation has been published. Australia sues Facebook for $529 billion. ICO issues two legal warnings to schools for wrongly disclosing the personal data of children. Scotland creates a Commissioner to oversee the use of biometrics by Police. IAPP cancels UK and Global privacy events. Norwegian …
Privacy Update for the week ending 15th March 2020 Read More »
In the news this week: Information Commissioner’s Office (ICO) has fined Cathay Pacific Airways Limited £500,000 for failing to protect the security of its customers’ personal data (pre-GDPR). The ICO has published guidance for organisations wanting to develop GDPR Codes of Conduct or Certification schemes. Further concerns raised about IoT in your home. Doorbells that record every interaction and baby monitors …
Privacy Update for the week ending 8th March 2020 Read More »
Maximum fine for Cathay Pacific Cathay Pacific got slapped with a £500K fine from the UK ICO for its data breach that was discovered in March 2018. The ICO in its monetary penalty notice was happy to use the word “negligence” in describing Cathay Pacific’s behaviour that led to the incident. Cathay Pacific originally called …
In the news this week: Microsoft launches open-source privacy mapping tool – Data Protection/Privacy Mapping Project. Commentary piece on Subject Access Requests and the Search for Proportionality. The Danish Data Protection Authority has ordered two organisations to communicate a personal data breach to the data subjects concerned. Namely.com & Intervare. EDPB contribution to the evaluation of GDPR. Key areas: The EDPB will participate …
Privacy Update for the week ending 1st March 2020 Read More »
