Category: GDPR

DATE March 23, 2020 3:15 pm POSTED BY CATEGORY Blog

Business as usual for the Outsourced DPO

The Outsourced DPO is dusting off the binding corporate rules play book!  It’s some time since we were involved in drafting BCRs and were delighted for one of our global clients to ask us to get involved with creating BCRs for their operations in over 80 countries last week.  Of...
View Article »
DATE March 20, 2020 3:13 pm POSTED BY CATEGORY Blog

Covid wont stop the SAR bureau in its tracks

Wow, the Outsourced DPO has spent just about the entire day on Skype working through compliance challenges with a number of customers.  It’s actually really surprising how much can be done via video conferencing on MS Teams, Zoom, Uber.  Initially we were rather apprehensive about spending anymore than 15 minutes...
View Article »
DATE January 31, 2020 2:18 pm POSTED BY CATEGORY Blog

Data Protection Day at DPP

This week gave us something fantastic to celebrate and I am not speaking of Brexit.  The 28th January was the 13th annual International Data Protection/Privacy Day!  What?  You can’t have missed all the fanfare and razamataz? 28th January is of course, the anniversary of the opening for signature of European Convention 108 for...
View Article »
DATE January 7, 2020 2:12 pm POSTED BY CATEGORY Blog

Company fined for use of publicly available information

Company fined for use of publicly available information. One of the common misconceptions about data protection law is that data in the public domain is a freely available resource to which the law does not apply.  For example, some people believe that telephone numbers on websites are not subject to...
View Article »
DATE December 18, 2019 2:07 pm POSTED BY CATEGORY Blog

Subject Access Request as a Service

The Outsourced DPO has seen an increasing number of subject access requests submitted via a third-party service sites making for an interesting trend.  In the last few months there seems to have been an increasing number of web sites and apps offering to submit subject access requests on behalf of...
View Article »
DATE December 10, 2019 1:52 pm POSTED BY CATEGORY Blog

Data Protection Registration and Fees

There seems to be some confusion out there about the requirement to register with the ICO – the Outsourced DPO was asked about this on four separate occasions last week. If you cast your mind back, articles 18 and 19 of the Data Protection Directive (Directive 95/46/EC) contained an obligation...
View Article »
DATE June 21, 2019 8:51 am POSTED BY CATEGORY Data Protection

Outsourced SARs service

The Outsourced DPO remembers the very first subject access request he undertook on behalf of a client 12 or more years ago and since then has provided SAR support on many occasions.  Last week DPP attended the National Housing Federation’s governance conference in London and re-launched its SAR support service...
View Article »
DATE June 7, 2019 10:37 am POSTED BY CATEGORY Blog

GDPR in the fast lane.

The Outsourced DPO has often compared data protection law to driving within the speed limit but a phone call last night changed that perception. Driving home last night, the Outsourced DPO was mulling over a customer brief for a DPIA on a project involving facial recognition when he suddenly remembered...
View Article »
DATE May 20, 2019 8:20 am POSTED BY CATEGORY Data Protection

Am I allowed to outsource my DPO?

This question is cropping up time again and, as the Outsourced DPO, we are well placed to answer it! The early drafts of the GDPR contained different criteria for determining when the designation of a DPO was mandatory which included for example, organisations employing more than 250 people or processing...
View Article »