When should Data Controllers be auditing their Processors?
Whilst there has always been a responsibility on Data Controllers (those who collect and determine how personal data is processed) to ensure that their Data … Read more
ICO -v- SCL Elections case highlights data protection applies to non-EU citizens too
The ICO have taken SCL Elections Ltd (AKA Cambridge Analytica) to court, and won, over a failure to comply with an enforcement notice issued to … Read more
Is “do I need a DPO?” the right question?
When the GDPR came into force back in May last year one of the changes introduced was the concept of having a Data Protection Officer … Read more
Personal director liability under PECR introduced
On 17th December 2o18 a new PECR amendment regulation (Privacy and Electronic Communications (Amendment) Regulations 2018) came into force. The updated regulation extends the powers … Read more
ICO continues with its fee chasing: care homes on the ICO radar
Back in November 2018, the ICO issued a number of fines to organisations who failed to register under the new data protection fee scheme. Action … Read more
Data compliance: 2019 and beyond (some predictions)
From a data compliance perspective, 2018 has been quite a year thanks to the General Data Protection Regulation (GDPR). Christmas Day will mark 7 months … Read more
ICO issues £200k fine for unsolicited text messages without valid consent
The Information Commissioner’s Office (ICO) has issued a £200,000 fine to Tax Return Limited (“TRL”) for sending out 14.8m unsolicited marketing text messages (which generated … Read more
Which? highlights retailers breaching data protection and privacy laws with their e-receipts
Research from consumer rights guardian Which? has highlighted the data protection dangers of e-receipts and that some retailers are in breach of data protection and … Read more
ICO publishes detailed guidance on the controller-processor relationship
Back in September 2017 the ICO published some draft guidance for consultation setting out their views on how to interpret Chapter IV (including Article 28) … Read more
ICO issues fines to organisations who failed to pay the new data protection fee
This week the ICO fined a number of organisations for failure to pay the new data protection fee. The new fee structure came into place … Read more