If you’ve been involved with (or even responsible for) your businesses GDPR management, it is likely that you have come across the acronym ROPA (or ROP) before. But what exactly is a ROPA and what does your business need to do with regards to it?
Read article
Nowadays, most businesses use some form of third-party cloud computing provider to store or process personal data. What they may not realise however is that the location of these third parties' servers matter and extra considerations must be taken when you are uploading personal data onto these platforms
Read article
Did you know that your Third Parties often pose a major GDPR risk to your business? Here's why...
Read article
In this edition of Tacita tips we will be looking at dynamic instant aliases, or 'plus addressing'. This simple tip can help you better manage spam emails and identify where they have originated from.
Read article
In this edition of ‘Everything you need to know about’ we will be looking at Children's Data: What it is? How is it separate from standard personal data?, and How can you manage it in a secure and legal manner?
Read article In this edition of ‘Everything you need to know about’ we will be looking at Special Category Data: What it is? How is it separate from standard personal data?, and How can you manage it in a secure and legal manner?
Read article
Since the easing of lockdown, during the summer of 2020, many organisations have implemented new measures so that they can re-open safely to the public. For most businesses, this included collecting customers’ and visitors’ personal information to support the UK Government’s approved contact tracing scheme.
Read article
The GDPR was introduced to provide EU citizens with greater protections and control over their personal data. It achieved this by introducing new rights for individuals and by imposing stricter data protection requirements on organisations. But what happens if your personal data was part of a data breach before the GDPR was introduced?
Read article
The ICO states that ‘…whenever a controller uses a processor, there must be a written contract (or other legal act) in place...’ The GDPR sets out what needs to be included in the contract. But what happens if you are a controller sharing data with another controller? You need a Data Sharing Agreement.
Read article
Every company has been focused on ensuring their privacy notices are compliant for GDPR, however there could be a blind spot. The GDPR may be the strongest privacy regulation in the world, but it isn’t the only one. For example, when your website uses cookies, your organisation must ensure that the Privacy and Electronic Communications…
Read article