Category: Blog

Data Protection fay
DATE January 31, 2020 10:01 am POSTED BY CATEGORY Blog

Data Protection Day at DPP

This week gave us something fantastic to celebrate and I am not speaking of Brexit.  The 28th January was the 13th annual International Data Protection/Privacy Day!  What?  You can’t have missed all the fanfare and razamataz? 28th January is of course, the anniversary of the opening for signature of European Convention 108...
View Article »
subject access request
DATE December 18, 2019 10:14 am POSTED BY CATEGORY Outsourced DPO

Subject Access Request as a service

The Outsourced DPO has seen an increasing number of subject access requests submitted via third-party service sites making for an interesting trend. In the last few months there seems to have been an increasing number of web sites and apps offering to submit subject access requests on behalf of data...
View Article »
Data Protection Registration and Fees
DATE December 10, 2019 9:23 am POSTED BY CATEGORY Blog

Data Protection Registration and Fees

There seems to be some confusion out there about the requirement to register with the ICO – the Outsourced DPO was asked about this on four separate occasions last week. If you cast your mind back, articles 18 and 19 of the Data Protection Directive (Directive 95/46/EC) contained an obligation...
View Article »
Outsourced DPO DPIAs
DATE November 25, 2019 4:07 pm POSTED BY CATEGORY Blog

The nine “no-nos” of DPIAs

  The Outsourced DPO has been asked to critique some customer DPIAs recently and has made the following observations.  1 Complex forms  There seems to be a hugely complicated forms that need to be filled in to record the DPIA running in some cases to 20 pages.  This acts as a big...
View Article »
Beware software with no delete function
DATE November 15, 2019 12:48 pm POSTED BY CATEGORY Blog

Beware software with no delete function

You may have missed the fine of €14½ million imposed by the data protection authority of Berlin on Deutsche Wohnen SE, a property management company who were found to use software systems that do not allow for the deletion of data.  This regulatory action resonated with the Outsourced DPO because...
View Article »
DATE June 7, 2019 10:37 am POSTED BY CATEGORY Blog

GDPR in the fast lane.

The Outsourced DPO has often compared data protection law to driving within the speed limit but a phone call last night changed that perception. Driving home last night, the Outsourced DPO was mulling over a customer brief for a DPIA on a project involving facial recognition when he suddenly remembered...
View Article »
DATE February 1, 2018 4:51 pm POSTED BY CATEGORY Blog

Brexit may lead to greater restrictions on the transfer of personal data from the EU to the UK. UK organisations will need to be prepared.

When the UK leaves the EU on 29th March 2019 the GDPR will already have become law in every other EU member state. The regulations governing the international transfers of personal data are set out in Chapter V of the GDPR. It stipulates that, for the purposes of data transfers...
View Article »