What are Joint Controllers?
Sometimes the division between Data Processors and Data Controllers is not simple. Where more than one entity has control in determining the […]
Compliance
Audit, Compliance
Four key points to include in contracts between Data Controllers and Data Processors
The General Data Protection Regulation (2016/679), imposes clear requirements controlling the appointment of data processors by data controllers. One of these is a requirement prescribing
Audit, Compliance
GDPR Data Retention: Adequate, relevant and not excessive
Many people ask us how long they should store data for to be GDPR compliant. The very brief answer from
Compliance
Consent: one of six lawful bases to process personal data, in GDPR
Article 6 of Regulation 2016/679, the General Data Protection Regulation (hereafter: GDPR). sets the conditions for a lawful personal data processing and describes the
Splinternet: The three global approaches to user data.
How personally identifiable data is used is becoming one of the biggest divisions between the USA, EU and China. The
First five questions for GDPR compliance
When confronted with the looming deadline of May 2018 for GDPR compliance there are five big questions any organisation should ask. Who deals
Compliance
Data Controllers or Data Processors in GDPR?
In order to vindicate data subjects’ rights, the GDPR defines two new roles for organisations Data Controllers and Data Processors. This post will outline
Documentation, ISO 27001
Maintenance and operation of an ISO 27001 ISMS
Successfully completing an ISO 27001 certification places great demands on an organisation. The announcement of success is normally treated as the end of
Documentation, ISO 27001, Personal Data
ISO 27001 documentation
Having an ISO 27001 system in place mandates a set of documents. These documents may be the most visible manifestation of a system