This weeks’ instalment tackles a specific security policy which is neither costly nor technical. The topic dawned on me when I was writing up the conclusion for last week’s post which is part of the GDPR & ePrivacy titbits series on Security. As you might have gathered from the title, this post will tackle the…
We have explained consent, tracking and auditing of consent, as well as the right to be forgotten (briefly of course). However there is more. Apart from the obvious topics, there are underlying concerns such as security of data, i.e. ensuring that all personal data is protected and secured. The only issue here is that the…
So here it is, finally as a data subject I have the right to not only deactivate my account but also ask for my data to be deleted/removed from their systems. What is really happening? No one will be deleting any data for various reasons but mostly for the purpose of data integrity, statistics and…
In the last post I mentioned that within any registration forms you should separate the request for consent related to processing of data from the request for consent relating to direct marketing. Here’s why… Basically the regulation states that the data subject has every right to withdraw their consent at any point in time…
I started writing this post and got into so much detail and conditions that rather than a titbit it was becoming an essay. So here goes to a simpler version in what will turn out to be multiple instalments… If you’re storing any form of personal data I’m going to assume that you’re collecting…
