It is not only an organisation’s clients that are protected under the General Data Protection Regulation (GDPR), but employees as well. The new law aims to strengthen people’s rights to privacy and protect their personal data. This does not just apply to people opting into the company’s online marketing campaigns, but rather everyone involved with […]
DPIA awareness checklist ☐ We provide training so that our staff understand the need to consider a DPIA at the early stages of any plan involving personal data. ☐ Our existing policies, processes and procedures include references to DPIA requirements. ☐ We understand the types of processing that require a DPIA, and use the screening […]
Use a firewall to secure your internet connection ☐ Understand what a firewall is ☐ Understand the difference between a personal and a boundary firewall ☐ Locate the firewall which comes with your operating system and turn it on ☐ Find out if your router has a boundary firewall function. Turn it on if it […]
Legitimate Interests ☐ We have checked that legitimate interests is the most appropriate basis. ☐ We understand our responsibility to protect the individual’s interests. ☐ We have conducted a legitimate interests assessment (LIA) and kept a record of it, to ensure that we can justify our decision. ☐ We have identified the relevant legitimate interests. […]
Asking for Consent ☐ We have checked that consent is the most appropriate lawful basis for processing. ☐ We have made the request for consent prominent and separate from our terms and conditions. ☐ We ask people to positively opt in. ☐ We don’t use pre-ticked boxes or any other type of default consent. ☐ […]
The General Data Protection Regulation (“GDPR”), which comes into force on 25 May 2018, will replace the Data Protection Act 1998. The ICO has published the results from its Local Government Information Governance Survey, together with guidance on the steps that local councils should take in order to ready themselves for the GDPR. With the […]