Let the Fun Begin! New EU Data General Protection Regulation #GDPR is Adopted

After four years of negotiation, the new EU General Data Protection Regulation (GDPR) has today been formally adopted by the European Parliament. The Regulation will soon be available in all the official EU languages. The Regulation will take effect twenty days from its post-vote publication in the Official Journal (May 2018) giving Data Controllers two … Continue reading “Let the Fun Begin! New EU Data General Protection Regulation #GDPR is Adopted”

GDPR: The Data Protection Principles (but not as you know them Jim!)

Having recently attended the Information Commissioner’s Office Data Protection Practitioners Conference in Manchester, I should start this blog post by echoing the words of our outgoing Commissioner, Christopher Graham, that the Regulation text is not the final version until later this year when it has been reviewed and fully translated for all 28 member states. … Continue reading “GDPR: The Data Protection Principles (but not as you know them Jim!)”

New Data Sharing Consultation

In February the Government launched a consultation on introducing laws to allow more citizens’ data to be used for ancillary purposes by the public sector. It says: “Proportionate, secure and well-governed information sharing between public authorities can improve the lives of citizens. It can also support decisions on the economy which allow businesses to flourish, … Continue reading “New Data Sharing Consultation”

Monitoring Staff Use of Social Networks: The Human Rights Implications

According to a recent FOI request made by BBC Radio 5 live, last year there was a rise in the number of UK council staff suspended after being accused of breaking social media rules. Many employers, both in the public and the private sector, now monitor staff use of social media within the office environment. … Continue reading “Monitoring Staff Use of Social Networks: The Human Rights Implications”

Data Breach Notification and the New EU Data Protection Regulation

  The new EU General Data Protection Regulation contains an obligation on Data Controllers to notify supervisory authorities of personal data breaches. In some cases this extends to the Data Subjects as well. Article 4 of the Regulation defines a personal data breach: “a breach of security leading to the accidental or unlawful destruction, loss, … Continue reading “Data Breach Notification and the New EU Data Protection Regulation”

The New EU Data Protection Regulation: Key Points

The future of Data Protection throughout the EU has now been decided. The text of the new EU Data Protection Regulation has been finalised. This will be formally adopted by the European Parliament and Council at the beginning of 2016. It will come into force two years thereafter. Most of the big talking points over … Continue reading “The New EU Data Protection Regulation: Key Points”

The Investigatory Powers Bill: Implications for Local Authorities

                      The government’s controversial Draft Investigatory Powers Bill was published in early November. Amongst other things, the Bill: Requires web and phone companies to store records of websites visited by every citizen for 12 months for access by police, security services and some public bodies. … Continue reading “The Investigatory Powers Bill: Implications for Local Authorities”

‘The Great CPS Data-breach!’

                        No, this isn’t a new multi-million pound blockbuster, but instead a £200,000 error the Crown Prosecution Service probably wishes it had never made. On the 4th November 2015 the Information Commissioners Office (ICO) issued a £200,000 monetary penalty notice under the Data Protection … Continue reading “‘The Great CPS Data-breach!’”

Permission Impossible? Consent and the new EU Data Protection Regulation

By Scott Sammons I recently took part in an ‘Information Awareness’ week for a local council. This was an event for council staff involving various training sessions revolving around a certain theme. Last year the sessions were on the theme of game shows and this year the theme was films. I was lucky enough to … Continue reading “Permission Impossible? Consent and the new EU Data Protection Regulation”