A hospital in Rhineland-Palatinate, Germany has been fined €105,000 by the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatine (LfDI). The fine was based on several breaches of the GDPR (General Data Protection Regulation) concerning patient admittances, resulting in patients receiving incorrect invoices, and exposing issues with the hospital’s patient privacy … [Read more...]
December 5, 2019
December 3, 2019
Is your CRM (customer relationship management) system GDPR compliant?
Organisations that use a CRM (customer relationship management) system will have plenty of experience handling large volumes of personal data, which can be both a good and bad thing when it comes to the GDPR (General Data Protection Regulation). On the one hand, they’ll be familiar with the importance of keeping information such as names, email addresses and dates of birth secure, and updating or … [Read more...]
October 24, 2019
October 22, 2019
7 ways your organisation can suffer a data breach
Organisations of all sizes are waking up to the threat of data breaches. But don’t be fooled into focusing on the prospect of a hacker breaking into your systems. There are many other ways that your organisation can be compromised. Let’s take a look at seven of the biggest cyber security threats you should be concerned about. 1. Employee error Data breaches aren’t always malicious attacks. … [Read more...]
October 17, 2019
How does the GDPR affect sole traders?
Almost all EU-based organisations are affected by the GDPR (General Data Protection Regulation), from sole traders to multinationals. But even though the GDPR unifies data protection rules across Europe, not all businesses will face the same problems. We’ve covered many of the issues you’re likely to face, but this blog focuses on the way sole traders should approach their compliance … [Read more...]
October 11, 2019
Data Protection and the risks associated with the Cloud
This book is intended to be an introduction to the risks involved in Cloud sourcing, to enable managers to ask the right questions. Suggestions are offered for the kind of risks an organisation’s use of the Cloud might generate, and the remedial measures that might be taken. These are given as examples only and are not intended to be a substitute for qualified legal or technical advice. Other … [Read more...]
October 9, 2019
The GDPR has led to a spike in DSARs (data subject access requests)
Depending on who you ask, the GDPR (General Data Protection Regulation) has either overhauled the way organisations handle personal data or it’s a complex and ultimately pointless piece of bureaucracy. Fortunately, the number of people in the latter camp has shrunk in the past year or so, as the GDPR has proven to have a tangible effect on business. And we’re not just talking about fines, both … [Read more...]
October 7, 2019
Ransomware Protection Tips
You hope that your systems never get attacked by Ransomware, but in case you do, you want to be prepared. One of the best ways to recover from such a malicious attack is to ensure you keep good and recent backups of your systems. But even with that, you can only recover back to the last known good backup. What about the files worked on since that last good backup? To fully recover from a … [Read more...]
October 2, 2019
How EU organisations’ GDPR requirements will change in a no-deal Brexit scenario
We’re now, once again, on the precipice Brexit, and as the deadline nears, you’ll see more stories appear about how EU-based organisations will be affected by the UK’s departure from the EU. European organisations with ties to the UK are particularly concerned about the ramifications of the GDPR (General Data Protection Regulation). With the UK’s EU status up in the air, organisations must … [Read more...]
September 30, 2019
Google wins landmark ruling on the ‘right to be forgotten’
A landmark ruling by the ECJ (European Court of Justice) says that Google does not have to apply the ‘right to be forgotten’ globally. The case goes back to 2015 when the French data protection authority (CNIL) ruled that Google must remove damaging or false information from the search engine when the ‘right to be forgotten’ is requested. Google was also fined €100,000 for failing to apply … [Read more...]
