Compliance

Data Protection laws change on 25 May 2018 and they affect every company.  We can get you GDPR-compliant in half a day. This workshop will give you the tools and confidence to get your company ready. Our GDPR experts will walk you through the essential data audit, providing tips and myth-busters along the way.

Remove autofill on email to stop personal data going to wrong email addresses Don’t use personal phones for work. This ensures that the personal data of business contacts stays within the organisation’s control. Work mobiles should be password protected. Cleaners should not be able to see or access personal data on your premises (so clean

The new data protection laws which come into effect on 25 May 2018 require new terms in contracts between organisations and cloud based suppliers. Organisations affected include those which use cloud-based software to process their employee data,  outsourced IT services, practice management systems or similar. Indeed any relationship where a third party processes personal data

Robert Morrisey, a charity worker sent spreadsheets with sensitive personal data to his personal email address without the knowledge of his employer the Rochdale Connections Trust. The personal data included full names, dates of birth, telephone numbers and medical information. Mr. Morrisey admitted unlawfully obtaining personal data in breach of Section 55 of the Data

The Act makes organisations criminally responsible for failing to prevent tax evasion amongst employees and those carrying out services on their behalf. There is a defence if you have in place “reasonable prevention procedures.” Government’s recommended action to take: Risk assessment Asses Proportionality of risk-based prevention procedures Top level commitment Due diligence Communication (including training)

Talk Talk contracted Wipro Limited (Wipro) to help with customer complaints and network coverage. Talk Talk gave Wipro access to its customer base. The data was misused by 3 Wipro employees. This was uncovered following an investigation into scam calls to Talk Talk’s customers. Although no actual link was established between the unauthorised access and

A business survey has discovered that 55% of small and medium-sized enterprises are unaware of the GDPR. Larger businesses do better but 30% of company executives said that they still know little about the GDPR. With maximum fines at £17million or 4% of worldwide annual turnover (whichever is higher), 18% of businesses said they would

Sweett Group plc were forced to pay £2.25 million after a successful Serious Fraud Office prosecution. A bribe was paid to Khaled al Badie by Sweett’s subsidiary in the Middle East to secure a building contract. Sweett’s ignorance of its subsidiary’s actions was no defence since section 7 of the Bribery Act makes companies like

The General Data Protection Regulation (GDPR) will come into force on 25 May 2018 and beef up individual protections, but are you even compliant with the Data Protection Act 1998 (DPA)? If you are processing personal information you must register with the Information Commissioner’s Office at https://ico.org.uk/for-organisations/register. If you can then answer Yes to the