Technical DPO and AI governance. Notes from the sharp end of data protection compliance.
Organisations invest considerable time and effort in drafting their data sharing agreements. The contract goes through legal review, the clauses are debated, the schedules are filled out, and the document
In over six years of enforcing the UK GDPR, the ICO has never issued a fine for failing to maintain a Record of Processing Activities. Article 30 requires controllers to
While there are many challenges facing organisations in terms of complying with regulations, the biggest challenge for data protection governance in financial services is not knowing the regulation itself, but
The majority of organisations today, provide data protection training. The training covers the GDPR principles, the definition of personal data, the basics of breach reporting. The staff who handle data
Today nearly all organisations I look at have a privacy by design process. It's normally a section in their DPIA (Data Protection Impact Assessment), the structured risk analysis
Your business website almost certainly has a cookie banner. You may even have paid for a consent management platform to handle it. But here is the question many businesses never
