In this episode of Life with GDPR, Jonathan Armstrong and Tom Fox consider the multiple data privacy/data protection risks which have arisen under the coronavirus health crisis. Some of the highlights in this episode include: – How does coronavirus impact GDPR compliance? – What issues arise with working from home? – What is consent and Read more »

Introduction Today the UK’s Supreme Court gave an important ruling in the Morrisons case concerning whether employees could succeed in getting financial compensation after a data breach caused by one of Morrisons’ employees. Whilst the Supreme Court ruled that an employer can be legally responsible (under the principle of ‘vicarious liability’) for data breaches caused Read more »

Closed circuit TV (“CCTV”) and other types of surveillance systems are widely used in many organisations but also come with inherent privacy risks due to their potential to be intrusive to individuals’ rights. Using CCTV in the UK is subject to the Data Protection Act 2018 (“DPA 2018”) and the General Data Protection Regulation (“GDPR”). Read more »

Last month the former model and Big Brother contestant Katie Price (aka Jordan) lost a data protection action brought against her by cage fighter and fellow Big Brother contestant Alex Reid. The case is interesting not just for the fact that it involves minor celebrities – there are data protection aspects to the case as Read more »

It’s pretty shameful that in the current crisis we’re seeing ransomware on the rise. It’s even more shameful that organisations involved in fighting the virus seem to be especially at risk. Last year ransomware targeted healthcare more than any other industry, accounting for 29% of total ransomware attacks, according to Beazley’s 2020 Breach Briefing report. Read more »

Introduction Data protection rules (including GDPR and the UK Data Protection Act 2018) allow for individuals to make so-called “Subject Access Requests” (SARs) where they can seek to obtain information about the personal data held about them by organizations or individuals and certain other related information including about how that data is processed, to which Read more »

Introduction Data protection rules (including GDPR and the UK Data Protection Act 2018) allow for individuals to make so-called “Subject Access Requests” (SARs) where they can seek to obtain information about the personal data held about them by organizations or individuals and certain other related information including about how that data is processed, to which Read more »