Stories from February, 2024

GDPR rights explained: the Right of Access

The right of access is often referred to as a subject access request. It is one of the most commonly used rights people have under the GDPR. In this article we will explore what this right is and how organisations can comply with their statutory duties. Compliance with GDPR is

Read more
Taking Minutes: A Guide for Success

Taking minutes of meetings is done in organisations large and small across the world. However, the purpose of minutes and what good minutes look like is poorly understood. In this article we discuss the purpose of minutes and signpost you toward effective minute taking. Contents Why Take Minutes? Who Takes

Read more
The Right to be Informed: GDPR explained

Demystifying the Right to be Informed under the GDPR: in this blog post, we'll explore the nuances of this fundamental right, its implications for individuals and organisations, and practical tips for compliance. [su_box title="About the Author" box_color="#020a4a"]Michael has many years' experience supporting, developing and improving effective data protection and GDPR

Read more
Valid Freedom of Information Requests

In order to be acted on by public authorities valid freedom of information requests must meet specific criteria. Here are the four essential elements that FOI requests must include to be considered valid before they can be handled properly. Contents What is a Freedom of Information Request? The Requester's Details

Read more
What is pseudonymisation, and why use it?

What is pseudonymisation? The tool for effective anonymisation that keeps on giving. [su_box title="About the Author" box_color="#020a4a"]Michael has many years' experience supporting, developing and improving effective data protection and GDPR compliance systems. He has worked in this field in the public, private and charity sectors including at Board level. This

Read more
Managing conflicts of interests

The importance of managing Conflicts of Interests, arises in part because conflicts create a perception problem. More than anything else, it is the perception of wrongdoing or potential wrongdoing that matters. Therefore you need appropriate systems for identifying and managing conflicts of interests. This is because the interests that people

Read more
Leadership Visibility and Good Governance

In the realm of governance, leadership visibility stands as a cornerstone for fostering trust, accountability, and effective decision-making processes. From governmental bodies to corporate enterprises, the visibility of leaders plays a pivotal role in shaping organisational culture, ensuring transparency, and ultimately driving positive outcomes. In this article, we delve into

Read more
GDPR and employment references: a myth

One of the things we often hear in our GDPR training courses is that data protection legislation stops you giving bad references. It is certainly true that the myth that you can’t do this exists and is widely held to be true, whatever the underlying reason.

Read more
What is a data controller? What do they do?

A data controller is at the forefront of ensuring GDPR compliance and safeguarding people’s data rights. Understanding the intricacies of this responsibility is crucial for organisations handling personal data under the General Data Protection Regulation (GDPR). In this comprehensive guide, we delve into the core functions, obligations, and evolving role

Read more
Privacy Statement: Why You Need One

A privacy statement is needed because under the GDPR people are entitled to know, when it comes to their personal data who has it how is it used, and who's protecting it? This is where the privacy statement comes in. In this post we will explore what a privacy statement

Read more
What is the test of reasonableness?

In good governance quite often the approach or action you should take depends on determining what is reasonable. Whether it’s what is a reasonable level of security for data under GDPR, or deciding whether some prejudice based exemptions apply under Freedom of Information, people must demonstrate a level of reasonableness that can survive a challenge. This means not only behaving in a way that takes account of the needs and capacity of the people you are dealing with, but being seen to do so.

Read more