What is a data processor under UK GDPR? A Data Processor is defined as any person or organisation that handles personal data on the instructions of a controller. They do not decide why or how the data is used. Instead, they provide specific services, such as cloud storage or payroll processing, that involve personal data […]
What is a contract addendum for data protection? A Contract Addendum is a legal instrument that updates the terms of an existing agreement to include specific data processing obligations. It ensures that both parties adhere to current privacy laws while keeping the original contract intact. This method is the primary way businesses integrate new data
What are contractual clauses for data protection? Contractual Clauses for data protection are specific legal provisions that dictate how personal data must be treated by a processor or controller. These terms are mandatory under Article 28 of the UK GDPR for any third-party data relationship. They provide a clear framework for security, confidentiality, and the
Contractual Clauses Read More »
What are data protection Codes of Conduct? Codes of Conduct are sector-specific guidelines created by associations or representative bodies to clarify data protection obligations. These codes are formalised under Article 40 of the UK GDPR to help members demonstrate accountability. They provide a practical “rulebook” for handling sensitive information within a specific professional context. Why
What are Data Protection Certifications? Data Protection Certifications are official validations proving an organisation adheres to specific standards for information security and privacy. These frameworks, such as ISO 27001 or Cyber Essentials, provide a structured approach to managing data risks. They verify that your business meets regulatory requirements and follows best practices for safeguarding sensitive
Certification Mechanisms Read More »
What are Binding Corporate Rules? Binding Corporate Rules (BCRs) are internal codes of conduct used by multinational organisations to transfer personal data outside the United Kingdom. These rules provide a legally binding framework for sharing information between group entities across different jurisdictions. They ensure that all data transfers comply with GDPR standards and maintain high
Binding Corporate Rules Read More »
What are Adequate Countries in Data Protection? Adequate Countries are nations or territories outside the United Kingdom that the UK government has officially recognised as having high data protection standards. These jurisdictions provide a level of protection for personal data that is essentially equivalent to the UK GDPR. This official status allows businesses to transfer
Adequate Countries Read More »
What is a Personal Data Breach under UK GDPR? A Personal Data Breach is a security incident leading to the accidental or unlawful destruction, loss, alteration, or unauthorised disclosure of personal data. This definition applies to data that is transmitted, stored, or otherwise processed by an organisation. It encompasses both deliberate cyber attacks and accidental
Personal Data Breach Read More »
What are Technical and Organisational Measures? Technical and Organisational Measures are the specific security controls and management policies an organisation implements to protect personal data. These measures ensure the confidentiality, integrity, and availability of information systems. Under Article 32 of the UK GDPR, businesses must deploy appropriate safeguards based on the level of risk to
Technical and Organisational Measures Read More »
What is Pseudonymisation? Pseudonymisation is a security technique that replaces identifiable data elements with artificial identifiers or pseudonyms. This process ensures that personal data cannot be linked to a specific individual without using additional, separately stored information. It is a core requirement for achieving Privacy by Design and reducing organisational risk under the GDPR. Implementing
If you would like to ask more questions or to arrange training, complete the form below and we will respond shortly.
Prefer to schedule a 15 minute call? Schedule call today >>
