A Record of Processing Activities (ROPA) should be more than the written record required by Article 30 of the General Data Protection Regulation (GDPR). Done well, it is the authoritative...
Read ArticleA Record of Processing Activities (ROPA) should be more than the written record required by Article 30 of the General Data Protection Regulation (GDPR). Done well, it is the authoritative...
Read ArticleThe Irish Data Protection Commission has reprimanded Children’s Health Ireland over the physical security and management of children’s health records. Technology is now embedded in almost every aspect of working...
Read ArticleA difficult access request is not automatically an excessive one, and an organisation’s inability to find its own data should not become the data subject’s burden. Introduction One of the...
Read ArticleLike many people reading this, I spend my working week moving between the two areas that increasingly shape a privacy professional’s day: the familiar routine of data protection and the...
Read ArticleIt is not every week you find yourself watching Ghana play England in the World Cup with the Ghanaian English and Irish data regulators or eating lobster to the sound...
Read Article
