Haga Hospital, based in the Netherlands, was this week fined €460,000 by the Dutch data protection authority (AP) for breaching the GDPR (General Data Protection Regulation). Haga was investigated by the AP after 85 hospital employees had access to the medical records of Samantha de Jong, AKA Barbie, a well–known Dutch reality TV star. In addition to the fine, Haga must improve the … [Read more...]
July 17, 2019
July 11, 2019
June 20, 2019
May 17, 2019
WhatApp users urged to update app after serious security vulnerability discovered
WhatsApp, the messaging app owned by Facebook, confirmed a serious security vulnerability in its system on Monday, 13 May that left users open to spyware installations on their phone. The breach, affecting both iOS and Android users, enabled the software to be installed through voice calls, even if the call wasn’t picked up. In some cases, the call was removed from the call log, so the missed … [Read more...]
May 3, 2019
Ireland’s DPC investigates Facebook over password breach
Ireland’s DPC (Data Protection Commission) has launched a statutory inquiry into Facebook following the disclosure of a data breach affecting millions of users. The social media giant announced in March that a routine security review at the beginning of the year found millions of user passwords stored in plaintext on … [Read more...]
May 1, 2019
Hospital patients’ medical notes found on Drogheda estate
Hospital notes on patients who attended Our Lady of Lourdes Hospital in Drogheda, Co. Louth were discovered on a housing estate earlier this week. The doctor handover notes, detailing the dates of birth, family situations, medical conditions and hospital wards attended of ten patients who visited the hospital’s emergency … [Read more...]
April 18, 2019
What are the 6 data protection principles of the GDPR?
A version of this blog was originally published 31 January 2018. The GDPR (General Data Protection Regulation) outlines six principles that organisations must follow when collecting, processing and storing individuals’ personal data. Data controllers are responsible for complying with those principles, and they must have documented proof of how the organisation is meeting … [Read more...]
April 16, 2019
10 steps to GDPR compliance: How prepared are you?
This blog has been updated to reflect industry changes. Originally published 16 October 2017. It’s not too late to comply with the GDPR (General Data Protection Regulation). The Regulation might have come into effect last year, but it’s requirements need to be regularly reviewed. As such, it doesn’t matter what your compliance posture was six months or a year … [Read more...]
April 2, 2019
February 28, 2019
How will a no-deal Brexit affect EU data transfers?
With Brexit day fast-approaching and the UK and EU in negotiation deadlock, it’s time for organisations to work under the assumption that a formal withdrawal agreement won’t be in place by 29 March 2019. This will be hard work for many of your business activities, but things are surprisingly straightforward regarding personal data … [Read more...]
