If there were an easy solution available, organizations could opt for certification under an approved UK GDPR certification scheme. The Data Protection Act 2018 empowered the Information Commissioner's Office (ICO), the privacy regulator in the UK, t...
Requirements For Data Processors in the Context of Data Transfers Outside the European Economic Area.
There is some uncertainty regarding the distinction between personal data and sensitive personal data, and there are even doubts about the existence of sensitive personal data as a defined term. Let's try to bring clarity to the matter by considering...
What are the rules around verifying somebody’s identity
When considering the resourcing of a Data Protection Officer (DPO), organizations have two main options: the in-house route or the outsourcing route. Each option has its pros and cons, and the choice depends on various factors specific to the organiz...
The GDPR principles and the DPA set out the legal requirements for data protection and privacy, but they do not provide detailed guidance on specific measures organizations should take to safeguard personal data. ISO/IEC 27701:2019 (ISO 27701) fills ...
