Category: Blog

DATE January 16, 2020 2:15 pm POSTED BY CATEGORY Blog

Changes in the data protection legislative landscape

The Outsourced DPO has been having a green January utilising the under-used Esk Valley Railway for his daily commute to Leeds.  This has meant more time for reading – which is a good thing given the changes in the data protection legislative landscape around the world. It was 5 or...
View Article »
DATE January 7, 2020 2:12 pm POSTED BY CATEGORY Blog

Company fined for use of publicly available information

Company fined for use of publicly available information. One of the common misconceptions about data protection law is that data in the public domain is a freely available resource to which the law does not apply.  For example, some people believe that telephone numbers on websites are not subject to...
View Article »
DATE December 18, 2019 2:07 pm POSTED BY CATEGORY Blog

Subject Access Request as a Service

The Outsourced DPO has seen an increasing number of subject access requests submitted via a third-party service sites making for an interesting trend.  In the last few months there seems to have been an increasing number of web sites and apps offering to submit subject access requests on behalf of...
View Article »
DATE December 10, 2019 1:52 pm POSTED BY CATEGORY Blog

Data Protection Registration and Fees

There seems to be some confusion out there about the requirement to register with the ICO – the Outsourced DPO was asked about this on four separate occasions last week. If you cast your mind back, articles 18 and 19 of the Data Protection Directive (Directive 95/46/EC) contained an obligation...
View Article »
DATE November 15, 2019 12:48 pm POSTED BY CATEGORY Blog

Beware software with no delete function

You may have missed the fine of €14½ million imposed by the data protection authority of Berlin on Deutsche Wohnen SE, a property management company who were found to use software systems that do not allow for the deletion of data.  This regulatory action resonated with the Outsourced DPO because...
View Article »
DATE June 7, 2019 10:37 am POSTED BY CATEGORY Blog

GDPR in the fast lane.

The Outsourced DPO has often compared data protection law to driving within the speed limit but a phone call last night changed that perception. Driving home last night, the Outsourced DPO was mulling over a customer brief for a DPIA on a project involving facial recognition when he suddenly remembered...
View Article »
DATE February 1, 2018 4:51 pm POSTED BY CATEGORY Blog

Brexit may lead to greater restrictions on the transfer of personal data from the EU to the UK. UK organisations will need to be prepared.

When the UK leaves the EU on 29th March 2019 the GDPR will already have become law in every other EU member state. The regulations governing the international transfers of personal data are set out in Chapter V of the GDPR. It stipulates that, for the purposes of data transfers...
View Article »
DATE February 1, 2018 4:39 pm POSTED BY CATEGORY Blog

Data Breach Compensation: The New PPI?

The decision in the High Court relating to the theft and publishing of the supermarket giant Morrison’s payroll data by a rogue employee throws up interesting points about liability in the event of data loss. In December 2017 Mr Justice Langstaff ruled that the technical and organisational controls in place...
View Article »