In this podcast series, data privacy/data security expert Jonathan Armstrong and Compliance Evangelist Tom Fox use the framework of GDPR to discuss a wide range of issues relating to these topics. They consider what the US compliance and InfoSec security expert needs to know about what is happening in the UK, Europe and beyond. In Read more »

Introduction Strict direct marketing rules apply under the UK Privacy and Electronic Communications Regulations 2003 (PECR) including with regard to unsolicited calls for direct marketing purposes. In connection with this there exists in the UK a system called the Telephone Preference Service (“TPS”) which is the official central opt out register on which individuals can Read more »

Introduction Hot on the heels of its announcement of its intention to fine the airline B.A. £183.39 million for a data breach (which Cordery reported on here: http://www.corderycompliance.com/uk-dpa-to-fine-ba-for-data-breach/) the ICO has also issued a notice of its intention to fine the hotel group Marriott International (“Marriott”) £99,200,396 for a data security breach. It is important Read more »

Introduction The UK Data Protection Regulator has announced her intention to fine BA (also known as British Airways) after its data breach. She intends to fine the airline £183.39m. It is important to note that this is an intention to fine – not yet a fine – both BA and other EU Data Protection Authorities Read more »

Introduction Data protection rules (including the GDPR and the UK Data Protection Act 2018) allow for individuals to make so-called “Subject Access Requests” (SARs) where they can seek to obtain information about the personal data held about them by organizations or individuals and certain other related information including about how that data is processed. In Read more »