All data subjects have specified rights with respect to the use of their personal data held by a controller or processor. These rights are: In most cases you only have 30 days in which to respond to these rights, so any request should be escalated to the responsible person in your organisation swiftly. It should […]
Data Subjects Rights Read More »
All data subjects have specified rights with respect to the use of their personal data held by a controller or processor. In general, the EU does not list the US as one of the countries that meets this requirement and therefore a data transfer to the US requires further safeguards. The Privacy Shield was a certification
Third country is defined within the terms of the EEA Agreement and is defined as any country (or territory) outside of the EEA. ‘Third country’ is specifically defined under the UK GDPR as a country or territory outside the UK. A third country will require that additional safeguards in place before personal data can be
Legally binding instruments are a safeguard which can be put in place when transfering personal data to a none adequate country. Performing an international data transfer requires either the receiving country to be deemed adequate or appropriate safeguards to be in place. One such safeguard is a legally binding instrument, which needs to be in place between public authorities or bodies,
Legally Binding Instruments Read More »
Standard data protection clauses are deemed to be appropriate safeguards in light of the GDPR and UK Data Protection Act requirements. Performing an international data transfer requires either the receiving country to be deemed adequate or for appropriate safeguards to be in place. One such safeguard is standard data protection clauses for an international data transfer. These cluses are a series
Standard Data Protection Clauses Read More »
An International Transfer Derogation is an exception specified within the regulation for transferring data internationally without adhering to one of the safeguards. Performing an international data transfer requires either the receiving country to be deemed adequate or appropriate safeguards to be in place. When neither of these exist then an organisation needs to look at possible derogations or to halt the
International Transfer Derogations Read More »
International Data Transferrings containing personal data is deemed higher risk and therefore safeguards, designed to provide the data subject with further protection, must be in place. The laws of some countries are deemed ‘adequate’ by the EU as they are robust enough to provide the protection to the data subject without further change. as these
International Data Transfers Read More »
A Data Processor Security Assessment is often used to determine the information security risks associated with contracting with a third party data processor. Organisations must ensure that personal data remains secure regardless of if data is processed internally or by a separate data processor. Where a data processor is engaged it is important that the
Data Processor Security Assessment Read More »
A data processor is any person, authority, organisation or other body which processes data on behalf of a data controller. In essence, the role of a processor is crucial in data management. A processor has many obligations in ensuring that the personal data being processed is afforded the same protections as if it were being processed by
A contract with a data processor is essential in order to remain compliant with the regulation, there are specific requirements for any contract including contractual clauses which need to be present in order for it to be compliant. These are summarised as: If any of the above contractual clauses are absent from a contract, then
Contractual Clauses Read More »
If you would like to ask more questions or to arrange training, complete the form below and we will respond shortly.
Prefer to schedule a 15 minute call? Schedule call today >>
