Alphabetti Spagetti is a problem

Posted by:

Alphabetti Spagetti is a problem

We’ve recently joined a Cyber Security forum, to keep up to date with threats from the Interweb:  the stuff of nightmares for IT security people.

(Of course, they themselves can also create headaches – things unexpectedly stop working when a so-called ‘patch’ is installed, because they hadn’t accounted for “Terry in Finance” linking to an old, but desperately needed programme on another server).

But these people are your guardians, the keepers of the keys: it is they who will protect you, and ...

Continue Reading →
0

Blog Posts

,

ICE is not just for Gin and Tonic

Posted by:

ICE is not just for Gin and Tonic

 

Sipping on a pre-prandial ice-cooled G&T has been a big part of appreciating the unusally pleasant bank-holiday weather this year.  But whilst enjoying the great outdoors, the ICE I’ve been thinking about is the GDPR kind. That is, the “In Case of Emergency” information gathered by many employers from their staff.   A few of our clients have been asking about it:  what are the ‘rules’?  how to I justify it? what do I have to tell people?

We’ve all got ICE ...

Continue Reading →
0

Blog Posts

New Year, New Horizons

Posted by:

New Year, New Horizons

JEM is pleased to welcome the addition of 7 Scottish hotels under the management of the ICMI group to our portfolio of service customers.

After working with a variety of hospitality providers in 2018 looking at their GDPR preparedness, including the ICMI family, it was great to be asked to offer a support function to these businesses. Although each one is different in their execution, the principles remain the same – there is staff data, supplier data and guest data: all ...

Continue Reading →
0

Blog Posts

Festive Greetings from JEM

Posted by:

Festive Greetings from JEM

A Merry Christmas and Happy Holidays to my reader (one doesn’t like to presume).

Our Christmas card this year features our designated Charity:  TVAP . An amazing place providing play-space for children and adults with challenges… well, I’ll let them explain:

Of course over the past year, we’ve helped them with their data privacy challenges too.  As you can imagine,  running a ...

Continue Reading →
0

Blog Posts

, ,

GDPR Won’t Protect Your Data

Posted by:

GDPR Won’t Protect Your Data

A bold claim by a privacy advocate or simply an attention-grabbing headline?  Well, I confess,  a bit of both!

In this blog we normally write about the effect of GDPR on companies, and the implications for their data-subjects. Today I’d like to focus on what data-subjects should be doing for themselves when on-line.

Last week we were at the ExecLN conference about privacy and security.  One of the more intriguing presentations was about how much of your data is already out there.

A ...

Continue Reading →
0

Blog Posts

, , , ,

What Has Europe Ever Done For Us (On Data Protection)?

Posted by:

What Has Europe Ever Done For Us (On Data Protection)?

One of the great ironies of Brexit is that, irrespective of where we end up as a result of the present political hokey-cokey, the UK will move forward with a large piece of European thinking at the heart of its future trading policy. We all know and love this as the General Data Protection Regulation and the GDPR (plus a little bit around national security) is now enshrined within the UK’s 2018 Data Protection Act, passed with very little political ...

Continue Reading →
0

Blog Posts

, , , ,

Record of Processing: The Differences between a Data Process Map and a Data Inventory

Posted by:

Record of Processing: The Differences between a Data Process Map and a Data Inventory

 

The key to being successful at data privacy is awareness:  of what you’ve got and what you do with it.

 

Much has been made of GPDR Article 30, which talks to the requirement to maintain a  Written Record of Processing.  This sounds grandiose, but in fact it can be simply described as “writing down what you do”.

The first thing to say is that for most* organisations under 250 people, it isn’t mandatory.   However, life is made ...

Continue Reading →
0

Blog Posts

, , , ,

Giving Away Your Data

Posted by:

Giving Away Your Data

Be careful out there…..

Much of our outsourced DPO work takes place in the health sector and we look after over 40 health related organisations.
Part of this work involves giving advice around third party Subject Access Requests. These come about, commonly, where there is a legal or insurance issue and the individual gives his/her permission for a solicitor or insurance company to contact the hospital or medical practice on their behalf to receive the relevant details from their health record.

However, ...

Continue Reading →
0

Blog Posts

, ,

E-commerce and the GDPR

Posted by:

E-commerce and the GDPR

This week a colleague and I went to the “2018 e-Commerce Expo”:  https://www.ecommerceexpo.co.uk/

Our aim was to gauge the market for GDPR services in the SME e-Commerce sector: how did people feel about it, what was the privacy support like from their 3rd- party service providers?

In short, was there a need for JEM and our services?

On that front we came away feeling quite buoyed, albeit with the occasional sigh of disappintment. The Platform providers generally ‘got it’ when it came ...

Continue Reading →
0

Blog Posts

, , , , ,

Just Irritating, or a Symptom of a Bigger Problem?

Posted by:

Just Irritating, or a Symptom of a Bigger Problem?

A lot of comment on social media is about the impact (or lack thereof) of GDPR on Direct Marketing: “Another company  still sending me emails, despite me saying no!” sums up a whole slew  of Tweets.

I’ll cover some specifics on the opt-in/out controversy and the PECR later  (hint – it’s not as straightforward as people want to believe).  But it got me to thinking – are we “data subjects” focusing on the wrong thing?

The GDPR is first and foremost about ...

Continue Reading →
0

Blog Posts

, , , , ,

Page 1 of 2 12