Resources
Podcasts, Guides, Updates & More
Join our extensive list of clients who have their data privacy under control
Data Protection People Blogs
Data Privacy Learning & Guidance
Our mission is to make data protection easy: easy to understand and easy to do. Our weekly podcasts are available in our Resource Centre along with a collection of articles, white papers, useful guidance, templates, case law, and opinions – providing you with tools you can utilise in your workplace.
ISO 27001 Advice
ISO 27001 Advice: Essential Guidance for Achieving Compliance
ISO 27001 advice is central to our consultancy services at Data Protection People provide valuable insights and recommendations to help you navigate the complexities of ISO 27001 compliance. Whether you have specific questions or need general guidance, we are here to assist you in achieving and maintaining ISO 27001 certification.
Why Might Your Business Need ISO 27001 Advice?
ISO 27001 advice is essential for businesses that want to ensure their Information Security Management System (ISMS) meets the highest standards. Here’s why your company might need this service:
- Understanding ISO 27001 Requirements: ISO 27001 is a detailed standard with specific requirements. Businesses often need expert advice to fully understand and implement these requirements.
- Addressing Compliance Challenges: Companies may face challenges in meeting ISO 27001 standards. Advice from professionals can help you overcome these hurdles effectively.
- Adapting to Changes: The ISO 27001 standard evolves over time. Consequently, staying up-to-date with changes and adapting your ISMS accordingly requires expert advice.
- Streamlining Implementation: Implementing ISO 27001 can be a complex process. With expert advice, you can streamline the implementation process, making it more manageable and efficient.
How Can ISO 27001 Advice Benefit Your Business?
Investing in ISO 27001 advice provides several benefits that can enhance your organisation’s overall security posture and compliance readiness. For example:
- Enhanced Understanding: Our experts provide clear explanations of ISO 27001 requirements. As a result, you gain a better understanding of how to align your ISMS with the standard.
- Improved Compliance: By following expert advice, you can ensure that your ISMS meets all necessary requirements. This, in turn, reduces the risk of non-compliance and potential fines.
- Effective Risk Management: Our guidance helps you identify and manage risks effectively. You can implement robust controls to protect your sensitive information.
- Efficient Implementation: With expert advice, the implementation of ISO 27001 becomes more straightforward. You can achieve certification more quickly and efficiently.
- Ongoing Support: We offer continuous support to help you maintain ISO 27001 compliance. You can adapt to any changes in the standard and address any issues that arise.
Why Choose Data Protection People for Your ISO 27001 Advice?
At Data Protection People, we are dedicated to providing top-notch ISO 27001 advice tailored to your business needs. Here’s why we are the right choice for your consultancy services:
- Expert Consultants: Our team consists of industry-certified experts with extensive experience in ISO 27001. Thus, you receive accurate and reliable advice from knowledgeable professionals.
- Customised Solutions: We understand that every business is unique. Therefore, our advice is tailored to your specific needs, ensuring that our recommendations are relevant and practical.
- Proven Track Record: We are one of the UK’s leading data protection consultancies. In fact, we have a proven track record of helping organisations achieve and maintain ISO 27001 certification.
- Commitment to Simplicity: Our motto is “data protection made easy.” We strive to simplify the complexities of ISO 27001, making the compliance process as straightforward as possible.
- Comprehensive Service Offering: In addition to advice, we offer a full range of services, including scoping, implementation, and mock audits. As a result, we provide a holistic approach to ISO 27001 compliance.
At Data Protection People, we offer tailored services designed to meet your unique needs. From understanding requirements to ongoing support, our comprehensive approach ensures that you are well-prepared for ISO 27001 certification.
ISO 27001 Consultancy
Assisting You With ISO 27001
ISO 27001 consultancy services are crucial for businesses aiming to achieve ISO 27001 certification. This internationally recognised standard ensures that your Information Security Management System (ISMS) meets the highest security and compliance requirements.
Why Might Your Business Need ISO 27001 Consultancy?
ISO 27001 consultancy offers a range of benefits for businesses seeking to enhance their information security practices. Here’s why your organisation might need our consultancy services:
- Navigating Complexity: ISO 27001 can be complex and challenging to implement. Our consultancy services simplify this process, making it easier to understand and follow the requirements.
- Tailored Guidance: Every business has unique needs. We provide customised advice and solutions based on your specific requirements, ensuring that your ISMS is effective and compliant.
- Expertise in Certification: Achieving ISO 27001 certification requires in-depth knowledge of the standard’s requirements. Our consultants are industry-certified experts with extensive experience in helping businesses meet these standards.
- Time and Resource Management: Implementing ISO 27001 can be time-consuming. Our consultancy services help streamline the process, saving you time and resources while ensuring that all necessary steps are covered.
How Can ISO 27001 Consultancy Benefit Your Business?
Investing in ISO 27001 consultancy provides several key benefits that can enhance your organisation’s overall security posture and compliance readiness. For instance:
- Enhanced Security Framework: Our consultancy services help you implement and refine technical controls and security measures. As a result, this strengthens your ISMS and ensures robust protection for your sensitive information.
- Successful Certification: Our consultants guide you through every step of the certification process, from scoping your certification to conducting mock audits. Therefore, this comprehensive support increases your chances of achieving ISO 27001 certification on your first attempt.
- Improved Compliance: By aligning your ISMS with ISO 27001 standards, you ensure that your business complies with international best practices for information security. Consequently, this reduces the risk of regulatory fines and enhances your reputation.
- Streamlined Processes: We help you streamline your information security processes, improving efficiency and effectiveness. Thus, this leads to better management of security risks and more efficient use of resources.
- Increased Customer Trust: Achieving ISO 27001 certification demonstrates your commitment to data protection. Hence, this builds trust with clients and partners, showing that you take information security seriously.
Why Choose Data Protection People for Your ISO 27001 Consultancy?
At Data Protection People, we offer expert ISO 27001 consultancy tailored to your business needs. Here’s why we are the right choice for your consultancy services:
- Industry-Certified Experts: Our team consists of highly qualified consultants who are certified in ISO 27001. They have the expertise and experience to provide valuable insights and practical solutions.
- Comprehensive Service Offering: We provide a full range of consultancy services, including scoping your certification, implementing technical controls, and conducting mock audits. This ensures that all aspects of ISO 27001 compliance are addressed.
- Customised Solutions: We understand that every business is unique. Our consultancy services are tailored to your specific needs, ensuring that our recommendations and solutions are relevant and effective.
- Proven Track Record: Data Protection People is one of the UK’s leading data protection consultancies. We have successfully assisted numerous organisations in achieving ISO 27001 certification, both in the UK and globally.
- Commitment to Simplicity: Our motto is “data protection made easy.” We aim to simplify the complexities of ISO 27001, making the certification process as straightforward and manageable as possible.
Choose Data Protection People for your ISO 27001 consultancy needs and benefit from our industry expertise, tailored solutions, and commitment to making data protection easy. Start your journey towards ISO 27001 certification with us today and safeguard your organisation’s information with confidence.
Gap Analysis
Gap Analysis: Why Your Business Needs It
A gap analysis is an essential first step in achieving ISO 27001 compliance. It’s a thorough review of your Information Security Management System (ISMS) to identify any areas where your organisation falls short of the ISO 27001 standard. This process provides businesses with a clear understanding of where they currently stand, pinpointing strengths, weaknesses, and areas of non-compliance. At Data Protection People, our tailored services offer practical, actionable recommendations to help you achieve full ISO 27001 compliance.
Why Does Your Business Need an ISO 27001 Gap Analysis?
Without a detailed assessment, it’s difficult to know where to start or which areas need improvement. Here’s why a gap analysis is crucial:
- Identifies Weaknesses: Many organisations have security measures in place, but these may not align fully with ISO 27001 requirements. A gap analysis highlights these weaknesses, giving you a clear view of what needs to be fixed.
- Saves Time and Resources: By identifying specific areas of non-compliance, you avoid wasting time and resources addressing irrelevant areas. It ensures you focus your efforts where they are needed most.
- Clarifies Certification Readiness: A gap analysis helps gauge how close or far your organisation is from achieving ISO 27001 certification. This clarity allows you to plan the necessary steps toward compliance.
- Reduces Risk: If gaps in your ISMS go unnoticed, they can lead to data breaches or non-compliance with data protection regulations. A gap analysis helps mitigate these risks by addressing potential vulnerabilities early.
Without a thorough gap analysis, businesses may struggle to know exactly where their ISMS falls short, which can delay or even prevent them from achieving certification.
How Can an ISO 27001 Gap Analysis Benefit Your Business?
Here’s how this service can benefit your organisation:
- Increases Security: By identifying and addressing gaps in your ISMS, a gap analysis helps you strengthen your information security framework. Consequently, this ensures your organisation is better protected against security breaches and cyber threats.
- Improves Compliance: ISO 27001 compliance is not just about having the right technology; rather, it’s about implementing the right policies, procedures, and controls. Furthermore, A gap analysis ensures that your ISMS complies with the rigorous standards required for certification.
- Boosts Customer Trust: Achieving ISO 27001 certification demonstrates to clients and partners that you are serious about data protection. A gap analysis is a key step in building trust with stakeholders by showing a proactive approach to securing sensitive information.
- Streamlines Certification Process: Once you know exactly where your ISMS falls short, it’s easier to create a plan to address these gaps. This focused approach simplifies and accelerates the certification process, saving time and resources.
- Supports Continuous Improvement: This doesn’t just prepare you for certification; it also provides valuable insights into your organisation’s overall security practices. This allows for continuous improvement of your ISMS, helping you maintain compliance over the long term.
Overall, a gap analysis ensures that you’re not only prepared for ISO 27001 certification but that your organisation is equipped with a stronger, more secure ISMS.
Why Choose Data Protection People for Your ISO 27001 Gap Analysis?
Our services are tailored to your specific needs. Here’s why you should choose us for your ISO 27001 gap analysis:
- Experienced Consultants: Our team of industry-certified experts brings years of experience in ISO 27001 consultancy. We understand the complexities of the certification process and provide expert guidance throughout your journey.
- Comprehensive Assessment: We conduct an in-depth analysis of your current ISMS, looking at both technical and organisational aspects. This includes evaluating your security controls, policies, procedures, and staff training to ensure all areas are aligned with ISO 27001.
- Actionable Recommendations: Our gap analysis not only identifies where your ISMS falls short but also provides clear, actionable recommendations.
- Tailored Approach: We work closely with your team to understand your business needs and objectives. This ensures that this is relevant and focused on the areas that matter most to your organisation.
- Proven Track Record: With consultants and clients across the UK and globally, we have a proven history of helping organisations achieve ISO 27001 certification.
- Commitment to Simplicity: At Data Protection People, we believe in making data protection easy. Our goal is to simplify the complex requirements of ISO 27001, helping you achieve compliance without unnecessary complications.
At Data Protection People, our expert consultants are here to guide you every step of the way. Moreover, With a tailored approach, actionable recommendations, and a proven track record of success, we can help you achieve ISO 27001 compliance efficiently and effectively.
Board Data Protection Training
Navigating GDPR: Board Member Responsibilities and Compliance Leadership
Data protection has become a critical concern for organisations of all sizes. Board members play a pivotal role in ensuring that their organisations comply with the General Data Protection Regulation (GDPR) and other relevant data protection laws. This comprehensive training program is designed to equip board members with the knowledge and skills necessary to effectively oversee data protection within their organisation.
Course Objectives
- Understand the key principles and requirements of the GDPR
- Recognise the board’s responsibilities in data protection governance
- Develop a robust data protection strategy
- Assess and mitigate data protection risks
- Foster a culture of data privacy within the organisation
Course Benefits
By participating in this training program, board members will:
- Enhance their understanding of data protection laws and regulations.
- Gain confidence in their ability to oversee data protection within their organisation.
- Strengthen their organisation’s data protection governance.
- Reduce the risk of data breaches and regulatory fines.
- Improve their organisation’s reputation and credibility.
Why Choose Data Protection People?
At Data Protection People, we are committed to providing exceptional training and consulting services in the field of data protection. Our team of experts is dedicated to delivering clear, concise, and actionable advice. We believe that data protection should be accessible to everyone, regardless of their technical background.
Here’s why we are the best company for the job:
- Deep Expertise: Our consultants have extensive experience in data protection and cybersecurity.
- Tailored Training: We customise our training programs to meet the specific needs of your organisation.
- Clear and Concise Explanations: Our trainers are skilled at translating complex concepts into simple terms.
- Practical Advice: We provide actionable advice that can be implemented immediately.
- Proven Results: We have a track record of helping organisations achieve compliance with data protection laws.
Bespoke Training for Your Board
We offer bespoke training programs that are tailored to the specific needs of your board. We can customise the content to address your organisation’s unique challenges and priorities.
Contact us today to discuss your training requirements and learn more about how we can help your board navigate the complexities of GDPR compliance.
Data Protection People Podcasts
Data Privacy Learning & Guidance
Untangling Misconceptions Around Recording Meetings
Untangling Misconceptions Around Recording Meetings
In this week’s episode of the Data Protection Made Easy Podcast, we delve into the complex world of recording meetings and dispel some common misconceptions. Joined by data protection experts Jasmine Harrison, Joe Kirk, and Phil Brining, we unravel the intricacies of ensuring data protection and compliance during recorded meetings.
Key Data Protection Considerations
- Purpose and Necessity: Before recording a meeting, it is essential to establish a clear and legitimate purpose for the recording. Ensure that the recording is necessary for a specific business objective and that there are no less intrusive alternatives.
- Consent: Obtain explicit consent from all participants before recording a meeting. The consent should be informed, meaning participants should be aware of the purpose of the recording, the duration, who will have access to the recording, and how it will be stored.
- Data Minimisation: Only record the necessary parts of the meeting. Avoid recording irrelevant or excessive information.
- Data Security: Implement robust security measures to protect recorded data from unauthorised access, alteration, or disclosure. This includes encryption, access controls, and regular backups.
- Data Retention: Establish a clear data retention policy for recorded meetings. Determine how long recordings will be kept and when they will be deleted or archived.
- Transparency: Inform participants about the recording and provide them with information about their rights, such as the right to access, rectify, or erase their personal data.
- Data Protection Impact Assessment (DPIA): For high-risk data processing activities, such as recording meetings involving sensitive personal data, conduct a DPIA to assess the risks and identify appropriate safeguards.
Common Misconceptions
- Implied Consent: Simply informing participants that a meeting is being recorded does not constitute implied consent. Explicit consent is required.
- Internal Use Only: Recordings made for internal use only are still subject to data protection laws.
- Anonymisation: Anonymising recorded data does not necessarily eliminate privacy risks.
- Cloud Storage: Storing recordings in the cloud may pose additional security risks.
Best Practices for Recording Meetings
- Use Secure Recording Equipment: Ensure that the equipment used for recording is secure and compliant with data protection standards.
- Implement Access Controls: Restrict access to recorded data to authorised personnel only.
- Regularly Review and Delete: Regularly review recorded meetings and delete those that are no longer necessary.
- Provide Clear Information: Inform participants about the recording at the beginning of the meeting and provide them with clear information about their rights.
Recording meetings can be a valuable tool for businesses, but it is essential to do so in compliance with data protection laws. By following the guidelines outlined in this article, organisations can ensure that their recording practices are lawful and protect the privacy of individuals. If you have any unanswered questions, feel free to reach out to a member of our team: Contact Us.
Tune in to all 185 episodes of the Data Protection Made Easy podcast on all major-audio streaming platforms including Spotify.
Listen on Spotify here: https://open.spotify.com/episode/3V0SW8HNxXHT39r8vIWooF?si=jPZQK9SBQv-l26tLwZ35bQ
The Role of a DPO: A Deep Dive
Podcast: The Role of a DPO: A Deep Dive
In this episode, we delve into the crucial role of the Data Protection Officer (DPO) in the UK. We discuss the specific responsibilities outlined in the UK GDPR, the potential conflicts of interest that can arise, and how organisations can ensure that their DPOs are operating independently and effectively.
The Essential Tasks of a DPO
The UK GDPR mandates that certain organisations appoint a DPO to oversee data protection compliance. Key responsibilities of a DPO include:
- Informing and advising the organisation on data protection obligations
- Monitoring compliance with data protection laws and internal policies
- Providing advice on Data Protection Impact Assessments (DPIAs)
- Acting as the primary contact point for the Information Commissioner’s Office (ICO)
- Handling data subject requests
- Assisting in data breach response and reporting
- Providing data protection training for staff
Avoiding Conflicts of Interest
A DPO must operate independently to effectively fulfil their role. Conflicts of interest can arise when the DPO‘s other responsibilities within the organisation could influence their judgment or decision-making regarding data protection. Common roles that may present conflicts include:
- Finance: A focus on cost minimisation might lead to compromises in data protection measures.
- Human Resources: Managing sensitive employee data can create challenges in maintaining objectivity.
- Information Technology: Overlap in responsibilities can impact the DPO’s ability to ensure data protection compliance.
- Sales and Marketing: Prioritising revenue generation might lead to shortcuts in data handling practices.
- Directors/Chief Officers: Strategic focus on business operations can overshadow data protection priorities.
How to Ensure a DPO’s Independence
To prevent conflicts of interest, organisations should:
- Clearly define the DPO’s role, responsibilities, and reporting lines.
- Establish robust governance structures, such as a data protection committee.
- Regularly assess potential conflicts and implement mitigation strategies.
- Consider outsourcing the DPO role to a third party.
Conclusion
The role of the DPO is essential in ensuring compliance with data protection laws and protecting individuals’ privacy rights. By understanding the DPO’s responsibilities and avoiding potential conflicts of interest, organisations can effectively safeguard their data and mitigate risks.
Additional Resources
- Information Commissioner’s Office (ICO) Guidance on DPOs
- Data Protection People’s Outsourced DPO Service
NOYB: A Privacy Champion
GDPR Radio: Data Protection News Of The Week
A Deep Dive into the Latest Data Privacy News
This week on GDPR Radio, your hosts Jasmine Harrison and Joe Kirk delve into the most pressing data privacy issues of the moment. From the implications of the Online Safety Act to the role of technology in recent civil unrest, we cover it all. Let’s dive in:
The Online Safety Act: A Double-Edged Sword for Privacy
The Online Safety Act, a landmark piece of legislation aimed at combating harmful content online, has sparked significant debate. While it promises to enhance online safety, there are concerns about its potential impact on privacy. We discuss the key provisions of the Act and explore how it might affect data collection, processing, and retention practices.
Technology and Civil Unrest: A Complex Relationship
Recent events have highlighted the role of technology in facilitating and amplifying civil unrest. From social media platforms used to organise protests to surveillance tools employed by authorities, technology plays a pivotal role in shaping these events. We examine the ethical implications of using technology in such contexts and discuss the potential for privacy violations.
The Rise of Fake News: A Threat to Privacy
The proliferation of fake news has become a major concern in recent years. Not only does it undermine public trust and democratic processes, but it can also pose a threat to privacy. We explore how fake news can be used to manipulate individuals and collect personal data. Additionally, we discuss strategies for combating the spread of misinformation and protecting privacy in the digital age.
NOYB: A Champion for Data Privacy
None of Your Business (NOYB) has emerged as a leading advocate for data privacy rights. Founded by Max Schrems, NOYB has been instrumental in challenging tech giants and enforcing data protection laws. We discuss some of NOYB’s most significant achievements, including its legal battles against Facebook and its role in shaping data privacy regulations.
- Key NOYB Initiatives:
- Challenging tech giants: NOYB has filed numerous lawsuits against companies like Facebook and Google, alleging violations of data protection laws.
- Advocating for stronger data privacy regulations: NOYB has played a crucial role in pushing for stricter data protection laws at the European and international levels.
- Raising awareness about data privacy issues: NOYB has been instrumental in educating the public about the importance of data privacy and empowering individuals to protect their rights.
Conclusion
As the digital landscape continues to evolve, the challenges facing data privacy become increasingly complex. By staying informed about the latest developments and supporting organisations like NOYB, we can help ensure that our privacy rights are protected.
If you would like to join our community and receive weekly invites to live discussions, click here: Upcoming Events.
Listen to episode 184 of the Data Protection Made Easy podcast below.
GDPR Radio – Episode 182
Unlocking Data Protection: Quality, Governance, and Legal Complexities with Industry Experts
Welcome to this week’s episode of Data Protection Made Easy podcast, where hosts Jasmine Harrison, Joe Kirk, and Phil Brining delve deep into the world of data protection, unraveling the complexities of quality, governance, and legalities. Led by experts from Data Protection People, our hosts work with a huge range of clients every day, together, they expert insights and advice surrounding data protection. If you’re serious about mastering data integrity and compliance, this episode is a treasure trove of expert insights and practical advice.
Mastering Data Integrity and Compliance
The episode kicks off with a comprehensive discussion on data quality, software solutions, and consulting. Jasmine, Joe, and Phil spotlight their exciting new partnership with a cutting-edge data management firm that offers innovative solutions to enhance data quality beyond just personal data. They explore how these advancements can help organisations navigate the tough terrain of processor contracts and ensure compliance with multiple controller relationships.
Navigating Data Contracts and Legalities
One of the highlights of this episode is the in-depth analysis of processor contracts. Joe raises a critical question: Can a single overarching agreement suffice for multiple controllers, or are individual contracts necessary? The discussion covers the legal requirements of Article 28.4, the practical challenges of managing these agreements, and real-world scenarios that emphasise the importance of maintaining compliance while dealing with complex contract frameworks.
Revolutionising Data Quality with AI
Jasmine shares an intriguing case study on Everton Football Club’s transition from Siebel to Salesforce, showcasing how this shift revolutionised their data management operations. The conversation extends to the significance of data quality measures, especially as AI becomes integral to organisational strategies. The hosts debate the universal applicability of data classification schemes and the various contexts that necessitate different levels of data accuracy.
Challenges in Data Management and Protection
Phil sheds light on the often-overlooked inconsistencies in GDPR and ISO guidelines, highlighting differences in interpretations between German and UK contexts. This leads to a broader discussion on the importance of governance, the practical benefits of information asset registers, and how these elements contribute to compliance with standards like ISO 27001 and GDPR.
The Future of Data Protection and Compliance
The episode also features a detailed exploration of sub-processor agreements within the context of UK GDPR. Joe and Phil dissect the legalities surrounding these agreements, emphasising the importance of imposing the same data protection obligations on sub-processors as on processors. They share various perspectives on managing these agreements, considering factors such as the nature of services, contract variations, and specific requirements like breach notification timelines.
Responsibilities and Liabilities in Data Protection
The conversation takes a critical turn as the hosts examine the complexities of liability between data controllers and processors, particularly in light of a significant data breach involving the Advanced Computer Software Group. They discuss the challenges controllers face in ensuring that processors have robust security measures and the implications of processor failures despite due diligence. The episode underscores the need for thorough audits and role of the ICO in enforcing compliance.
Duties of Data Protection Officers
In the final segment, the hosts delve into the responsibilities of Data Protection Officers (DPOs), drawing insights from the latest directives by the Brazilian National Data Protection Authority. They discuss varying interpretations of a DPO’s duties, including security incident reporting, data protection impact assessments, and internal oversight mechanisms. The conversation also touches on the resignation of the UK’s Biometrics and Surveillance Camera Commissioner and the implications of advancements in facial recognition technology.
Final Thoughts
This episode of Data Protection Made Easy podcast is packed with essential information for anyone serious about data protection. From practical advice on data quality and governance to deep dives into legal complexities and future trends, Jasmine, Joe, and Phil provide a well-rounded perspective on the current and future state of data protection. Our hosts run two kinds of sessions. This week’s episode is called GDPR Radio, which takes place every other week. These are alternated with more topic-focused sessions. The GDPR Radio sessions are more relaxed; we discuss the news from the last two weeks (since the previous episode), any updates to laws or legislation, and take live Q&As from our audience.
If you would like to join us on future episodes, you can visit our events page and either request to join specific discussions or request to subscribe and benefit from weekly invites to insightful sessions where our experts share opinions. You can have the chance to ask our hosts questions live on air, make use of the live chat, benefit from links shared in the chat, visuals from the episode, and most importantly, network with like-minded individuals.
Stay tuned, stay compliant, and stay ahead with Data Protection Made Easy podcast!
Data Protection People Whitepapers
Data Privacy Learning & Guidance
How to Respond to a Data Subject Access Request (DSAR)
Read about how to properly handle a Data Subject Access Request (DSAR) as a data controller at an organisation who has received a request.
Do I need to do a DPIA?
Learn about Data Protection Impact Assessments (DPIAs) and how to manage them.
Data within Education
Data within Education Having joined Data Protection People as a graduate fresh from finishing Leeds Beckett University, my knowledge of GDPR and data protection was virtually non-existent, I was well and truly thrown in the deep end. You could say it was like learning how to run before I could walk. Luckily alongside having to…
Outsourced Consultant Versus In-House?
Do I need to do a DPIA? Whenever you implement a new processing activity, system, or process, you should consider whether a DPIA is needed. This should be done as early as possible in the process to allow time for the implementation of risk mitigation. Step One: is a DPIA legally required? The first thing…
Join our community
Our mission is to make data protection easy: easy to understand and easy to do. We do that through the mantra of benchmark, improve, maintain.