Our Director and Consultant, Clare Paterson, gives an update on her view of data protection and how it is looking at the beginning of 2023: “In housing in particular, but this happens in just about every sector that I’ve worked…
There is (understandably!) a lot of confusion around the use of domestic CCTV, including the cameras fitted in ‘Ring’ doorbells and similar systems, especially when those cameras are used by social landlord tenants, which can be compounded when the footage…
If you’re anything like me, when I was working in-house doing Data Protection at a large Housing Association, you let out a sigh whenever a Subject Access Request (or SAR) hits your desk. Especially if it’s taken a number of…
If you find the rules around website Cookies and Cookie pop-ups confusing and frustrating, you are definitely not alone. This is a quick run-through of what you need to know if you manage or own a website, with no overly…
We all remember the GDPR rush of 2018, when organisations raced to collect consents for marketing emails and publish updated Privacy Notices before the new data protection legislation – GDPR – came into effect on 25th May 2018. We were…
]If you’re melting in this hot weather like I am, let’s not get hot and bothered trying to take in everything happening in the world of Data Protection (DP). Let’s concentrate on data protection basics – some no frills pointers…
Over the past month in our blog posts, we’ve talked about the risks linked to personal data, and its use (or misuse): how and when to identify and assess the risks, how to control them, and monitor them, and the…
In the last blog we looked at Controls & Conflict in DP Risk Assessments, and how to handle the reality that you may get pushback from the project team or from elsewhere in the organisation. You can read it by…
Under UK law, sending marketing emails to individuals requires prior consent, but what’s the difference between a marketing email and a service email, and how to send emails lawfully? We explain what you need to consider in this video.
In our last blog post we talked about brainstorming to identify risks, and how to measure the risk, when assessing data protection related policies and projects. Click here to read it. This time we’re looking at appropriate controls for the…
