In July 2019, British Airways was hit with a potential £183 million fine by the Information Commissioner’s Office (ICO).
As GDPR and the UK Data Protection Act mark their 1st anniversaries this month, we thought it would be useful to reflect on what we’ve seen over the last 12 months, and to share some views on what will happen in the next 12 months.
A lot can happen in a week in the world of data protection
November 9, 201800Business Process and Standards, GDPR Critical Friend, GDPR Discovery Review, Virtual DPO November, 18Well, it’s been said that ‘a week is a long time in politics’, but the same is now true in information security …
More info
It’s all gone quiet….all gone quiet
September 13, 201800Cyber Essentials, Cyber Security, GDPR Discovery Review, Virtual DPO September, 18A comment made frequently to me by many a small business about GDPR is “all the hype leading up to 25th May and since then, there has been nothing”.
More info
GDPR Makes You Fat……and other scare stories
May 14, 201800GDPR Discovery Review, Supply Chain, Virtual DPOTags: cyber, data protection, GDPR, ICO, supply chain May, 18As we head towards GDPR day – May 25 – the number of scare stories about the new regulations seems to be spinning out of control.
The latest one claims half of businesses expect to be fined under the new rules: https://bit.ly/2IcnFYX . It is based on a survey which suggests businesses have put money aside in anticipation of a fine. In addition, we’ve heard of some sole traders who are so concerned about the regulations, they fear that they will need to close the shutters on their business.
The problem here is one of perception. Businesses may well be so worried that their way of dealing with the new regulations is to put money aside. But will they really be fined and does putting money under the mattress really help? The ICO has been clear on so many occasions – fines will be the last resort. More info
GDPR – We’ve Been Here Before (Haven’t We?)
May 13, 201800Cyber Security, GDPR Discovery Review, Virtual DPOTags: cyber, data protection, GDPR May, 18The GDPR Parallels :
If we are honest, and that’s the best way to be, the GDPR has been a long time coming. The current data protection legislation was well overdue for modernisation. Most companies are already dealing with processes similar to the GDPR, but many may not have drawn those parallels. Once those parallels are recognised and acknowledged, bringing it into a business can be smoother than initially thought.
Every year as a nation we always seem to be surprised that things happen – like Christmas, or School Holidays, or Birthdays. Despite having plenty of advance notice they still creep up on us. Every time we also seem to have to reinvent the wheel – ‘this year I’ll do all my shopping online’, or ‘I’ll send a card from MoonPig as opposed to picking one up from the supermarket’. Yet deep down inside we all know what works best for us, what time and again has fitted in well to our time-starved lives to help us get through these challenges of life. More info
Data Protection – it’s a leadership issue [PRESS RELEASE}
November 26, 201700Cyber Security, GDPR Critical Friend, GDPR Discovery Review, Virtual DPOTags: cyber, data protection, leadership November, 17Leamington Cyber Security Company teams up with World Leading Management Accountants to produce film on protecting Business Data.
Video link: https://www.riskevolves.com/#video
The Leamington based cyber security and risk management company, Risk Evolves, has teamed up with CIMA, the world’s leading, and largest, professional body of management accountants, to produce a film on how businesses can protect their data from a cyber attack. More info
EU GDPR and the rules for you, the ‘Data Subject’
September 20, 201730GDPR Critical Friend, GDPR Discovery Review, Virtual DPO September, 17
Who Is Responsible For GDPR?
August 10, 201700Cyber Security, GDPR Critical Friend, GDPR Discovery Review, Supply Chain, Virtual DPO August, 17Just who is responsible for GDPR in a company?… Everyone starting at board level down…
GDPR In The Press
There was a flurry of press coverage, interviews, radio and TV coverage recently as the ICO began their campaign to make businesses and other organisations aware that there is now less than 200 working days until the EU General Data Protection Regulation (EU GDPR) and the new UK Data Protection Act become law on the 25th May 2018. More info
What Are The Consequences Of Not Complying To GDPR?
March 28, 201710Business Process and Standards, Cyber Essentials, Cyber Security, Enterprise Risk Management, GDPR Critical Friend, GDPR Discovery Review, Risk & Governance Review, Virtual DPO March, 17So what are the consequences of not complying to the EU General Data Protection Regulations ?
I recently wrote a blog ‘What is GDPR and why do you need it?’ to highlight the real meaning behind why data protection is changing.
What Are The Consequences Of Not Complying To The GDPR?
The UK Government and Information Commissioners Office (ICO) have declared that no new legislation will be introduced to cover the growing threat of cybercrime as this is a business owner responsibility to address. More info