Early identification of vulnerabilities will protect against GDPR non-compliance The recent WannaCry ransomware exploit infected 200,000 companies across 150 countries. In this case, cybercriminals demanded £230 ($300) to decrypt data files, but this nominal ransom belies a potentially greater threat.

Why employee privacy really matters When your team opened their Internet browser this morning they immediately started sharing data. Even before they started typing, packets of information fanned out across the Internet carrying data on the browser they’re using and...

Is your Data Privacy Officer (DPO) ready for the GDPR? ​Following years of debate, regulators have now reached an agreement on the content of the EU's new General Data Protection Regulation (GDPR).

Earlier this month, Wonga admitted to suffering a data breach that exposed personal data belonging to 270,000 of its customers. You may have missed the news; breaches of this nature have become so common they hardly make the headlines. But...

The first step of a GDPR compliance programme is perhaps the most challenging. Identifying what personal data a business holds, and where it resides, can be a time-consuming and complex process that consumes considerable resources.

Successful businesses rely on complex networks of digital technology platforms for their day-to-day operations. Each of these platforms – big data, business intelligence, CRM, content management etc. – serves a specific function but they’re bound together by personal data.

The first draft of the EU’s ePrivacy law reform has been leaked. According to sources, the leaked version is still under discussion on some points and a final version is expected in early January 2017.

The General Data Protection Regulation (GDPR) clarifies the legal definition of ‘personal data’ and in doing so creates challenges for businesses. Below, we explore what’s changed and why.

Subject access requests (SARs) are nothing new. For a small fee, data subjects can request a copy of their personal information and in so doing force the controller to consume both time and resources for no real benefit.