Supply Chain Compliance with the GDPRThis blog focuses on an aspect of the GDPR compliance which can be particularly challenging for a number of organisations, namely, how do you ensure your supply chain complies with the Regulation when processing personal data? The obligations for da...Nov 27, 2023·4 min read
Tips on Demonstrating UK GDPR ComplianceIf there were an easy solution available, organizations could opt for certification under an approved UK GDPR certification scheme. The Data Protection Act 2018 empowered the Information Commissioner's Office (ICO), the privacy regulator in the UK, t...Oct 2, 2023·3 min read
Transferring Personal Data Outside of the EEARequirements For Data Processors in the Context of Data Transfers Outside the European Economic Area.Sep 19, 2023·3 min read
What is the Difference Between Personal Data and Sensitive Personal Data?There is some uncertainty regarding the distinction between personal data and sensitive personal data, and there are even doubts about the existence of sensitive personal data as a defined term. Let's try to bring clarity to the matter by considering...Sep 12, 2023·3 min read
Verifying the Identity of Someone Requesting Information Under the GDPRWhat are the rules around verifying somebody’s identitySep 11, 2023·4 min read
In-house Resource vs Virtual DPOWhen considering the resourcing of a Data Protection Officer (DPO), organizations have two main options: the in-house route or the outsourcing route. Each option has its pros and cons, and the choice depends on various factors specific to the organiz...Aug 25, 2023·10 min read
ISO 27701:2019 and the GDPRThe GDPR principles and the DPA set out the legal requirements for data protection and privacy, but they do not provide detailed guidance on specific measures organizations should take to safeguard personal data. ISO/IEC 27701:2019 (ISO 27701) fills ...Aug 15, 2023·4 min read