2024: A year for data protection regulation reform?

By |2023-11-27T12:14:35+00:00November 27th, 2023|

Following its airing at the recent King’s Speech the much-discussed Data Protection and Digital Innovation Bill (DPDI) will have its ‘remaining stages’ in the House of Commons on 29 November. There are 21 possible amendments to the Bill all most of which have been referred to as ‘common-sense’ and it is expected to fly through parliament, meaning it is likely to become law early next year. The DMA supports the ratification of the Bill having been heavily involved in shaping many of its elements. Key differences to GDPR include: How personal data is defined Under DPDI information will only be considered as identifiable by a person other than the controller or processor if that other person obtains the information as [...]

Data Breach Debacle: Electoral Commission’s 300-Day Delay in UK’s Largest Hack in History!

By |2023-08-10T08:42:57+00:00August 10th, 2023|

On the ICO website it clearly states that organisations suffering data breaches must report it within 72 hours of being made aware of the breach. Lets be clear 72 hours. That equates to three days, Not the 300 days it has taken the Electoral Commission to fess up to THE BIGGEST data breach in UK history. For those that have missed the headlines The Electoral Commission reported a breach on 8th August 2023 having discovered in October 2022 that hackers were playing fast and loose with its systems since August 2021. This includes unfettered access to the names and addresses of at least 40 million people registered to vote between 2014 and 2022. Oh dear. The eagle eyed of you [...]

Data processing security is key data concern for 2023

By |2023-07-11T13:01:31+00:00July 11th, 2023|

Our latest review of the GDPR enforcements undertaken by the ICO over the past 12 months reveals that data processing security and right of access are the most common infringements since July 2022. Almost a third (30 per cent) of the 30 recorded infringements this year pertained to Article 5, the principles relating to data processing and of these 21 per cent were for Article 5 (f) which specifies that personal data must be processed in a manner that ensures appropriate security. Sixteen per cent contravened Article 15: Right of Access by the data subject and 15 per cent were non-compliant to Article 12 (data transparency) and Article 32 (security of processing). Last year the lion’s share of enforcements (61 [...]

ICO calls for SMEs to be more data aware; we call the ICO to do more with #HelptoGrow! 

By |2023-01-31T08:27:16+00:00January 31st, 2023|

The Information Commissioner is urging SMEs to check they have the right data protection practices in place to help sustain and develop their businesses. The UK regulator says getting good data practices in place from the start will save businesses time and money, and boost customer confidence. A recent survey, commissioned by the ICO reveals that 91 percent of people worried about having their personal information sold to other companies without their consent, and 87 percent worried about a company losing their personal information. And this is not surprising considering a survey by the DMA found that only 10 per cent of SME leaders felt that they were complaint with current data protection laws. Another shocking report found that half [...]

With recession on the cards – now is the time to take a different approach to data hygiene

By |2022-10-20T07:37:31+00:00October 20th, 2022|

New research from housing specialists Hillarys.co.uk reveals the horrifying truth that a staggering 40 per cent of UK homeowners only clean their house once a year with five per cent admitting to only cleaning if they have guests coming to stay overnight. The most common excuses were a lack of cleaning products and inertia caused by the fact that the house is only going to get dirty again, so what is the point? However, researchers from The London School of Tropical Disease and Medicine say that there is increasing evidence to suggest that a messy house affects both mental and physical health. In fact, an unclean home can make you more susceptible to colds and flus as well as stress [...]

The end of the road for GDPR?

By |2022-10-05T14:56:16+00:00October 5th, 2022|

Is the UK going to be free of the constraints of GDPR? If Michelle Donelan’s speech at the Conservative Party Conference is anything to go by, then GDPR’s days in the UK are numbered. The new secretary of state for Digital, Culture, Media & Sport said GDPR had been inherited from the EU, and its bureaucratic nature was limiting the potential for businesses. She announced that the UK would be replacing GDPR with its own business and consumer-friendly, data protection system. It wasn’t clear if this was to be the Data Protection and Digital Information Bill (which itself has superseded the Data Reform Bill), or an entirely separate initiative. Whichever it may be, apparently the plan is to protect consumer [...]

Why direct mail is good for charities during the cost-of-living crisis

By |2022-08-12T10:16:36+00:00August 12th, 2022|

Everyone will be feeling the pinch – more expensive food, more expensive energy, more expensive fuel… more expensive everything. For charities this is not good news, as when household expenditure rises, donations dwindle. As a result, two marketing objectives take precedence at this difficult time: The retention of existing donors The recruitment of spontaneous one-off gifts For objective No.1 data plays an important role. It is critical that charities are reaching out to their regular donors in a meaningful way to ensure that the relationship is maintain, particularly if the donations dry up during this exceedingly difficult period for many households. Contacting people that have moved house (and despite the depressing economic climate, home moves are still far outstripping those [...]

Regulatory update: Why your mailing data is going to get even more valuable

By |2022-07-12T10:51:25+00:00July 12th, 2022|

The latest figures from JICMail, Royal Mail and The DMA show that direct mail is experiencing something of a resurgence. Volumes are at their highest level for years with increasing number of brands adding it into their marketing mix, it is now the most authoritative advertising channel with consumer trust higher for direct mail than any other media and with incentives from Royal Mail being extended until September it is also incredibly cost effective. And if what is in the regulatory pipeline both in the UK and EU it seems that this renaissance won’t be short lived. If anything, direct mail will become even more influential. Recent updates from the DMA in its Responsible Marketing Update webinar reveal several reasons [...]

Consent, control and security key priorities for data in 2022 

By |2022-06-28T10:53:32+00:00June 28th, 2022|

We recently undertook a review of the GDPR enforcements by the ICO over the past 12 months, which revealed that lack of consent, failure to comply with control responsibilities and data security are the three most common infringements since July 2021. Sixty-one per cent of the 28 enforcements were found to be in breach of Article 4.11 which states: ‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.  Article 4.7 and 5.1f were both breached by 14 per cent of the organisations who [...]

5 Ways Cygnus can Help with GDPR

By |2018-11-06T10:39:16+00:00December 13th, 2017|

As 2017 ebbs away and the countdown to May 2018 and GDPR enforcement creeps closer we thought we would share just some of the ways Cygnus can be used to meet GDPR requirements. Here are 5 ways Cygnus users can demonstrate GDPR credentials to data controllers.   1. Help Data Controllers Implement Information Audit Outcomes Many months ago The ICO published Preparing for GDPR – 12 steps to take now. This guide is a commonly used reference guide to achieving GDPR compliance. After the obvious first step ‘make people aware of GDPR’ the second recommendation is to conduct a data audit. You should document what personal data you hold, where it came from and who you share it with. You [...]

Go to Top