HR Articles

Back in March, Cathay Pacific were fined £500,000 for failing to protect the security of its customers’ personal data.

Despite the consultation period for their draft Right of Access Guidance remaining open until the 12th February, the Information Commissioner’s Office (the “ICO”) has amended its published guidance on the timescales for Data Subject Access Request (“DSAR”) compliance.

Amidst the hype of the GDPR in 2018, one other area of data protection reform progressed relatively under the radar – the ePrivacy Regulation. Surprising given the potential impact this could have on an organisations’ marketing practices.

Advocate General, Henrik Saugmandsgaard Øe of the Court of Justice of the European Union (CJEU) has just handed down his opinion in response to a referral by the High Court of Ireland for preliminary rulings of law. The High Court case in question related to complaints made by Max Schrems against Facebook Ireland and Facebook Inc concerning the transfer of Mr Schrems' personal data to the United States (U.S).

The Information Commissioner’s Office (ICO) has launched a consultation to invite views from the public on its new guidance for subject access requests.

The GDPR increased the fines available to EU supervisory authorities for breaches of data protection requirements.

There are some types of special category data under the GDPR that attract a higher level of protection given their sensitive nature.

We are almost 18 months on from the implementation of the GDPR on 25 May 2018 and there have been a wealth of surveys reflecting on how well (or not) organisations have done in meeting the new requirements.

The ICO has updated its guidance on the timeframe for compliance with subject access requests.

It is almost a year since one of the largest scale reforms of data protection law has taken place. In the run up to May 2018 employers across the country were frantically preparing vast amounts of new documents in light of the impending implementation of the General Data Protection Regulations (GDPR).