£145k fine for data sharing process failings
In April 2019 the ICO issued a fine for £145,000 to the London Borough of Newham for unlawfully disclosing personal data of more than 200 … Read more
Data ethics – why data processing is about more than data protection
When we talk about the processing of data we usually think about data protection or the GDPR and how it applies to the lawful processing … Read more
Are you being asked to sign model clauses because of Brexit?
As the Brexit turmoil continues in the UK with the UK government still to agree on an appropriate way forward, EEA businesses are gearing up … Read more
First GDPR fine in Poland for breach of Article 14 of the GDPR
The Polish data protection authority (UODO) has fined a company PLN943k (about £188k) for failure to inform data subjects about how they came to have … Read more
Pension company fine highlights perils of bad advice and non-compliance
Grove Pension Solutions Ltd has been fined £40,000 for sending just over 2 million unsolicited emails. What’s interesting about this case is that a third-party … Read more
Small businesses at greater data and cyber-security risk
According to the Would you be ready for Cyber Attack? report from Business in the Community small businesses are not investing as much time or money … Read more
ICO fines Vote Leave for marketing consent failings
Vote Leave has been fined £40,000 by the ICO for sending over 196,000 unsolicited text messages in the run up to the 2016 Brexit referendum. … Read more
ICO building an AI auditing framework
The ICO have launched a new AI Auditing Framework blog which will provide updates and discussion around their work on developing a framework to give them … Read more
Are you going to be audited by the ICO?
Article 58 of the GDPR gives data protection authorities (the national data protection regulators – ours is the Information Commissioner’s Office (ICO)) the power to … Read more
Review of data protection compliance indicates room for improvement
The annual Global Privacy Enforcement Network (GPEN) “sweep” is a joint study carried out across the world by data protection regulators (including the UK’s ICO). … Read more