by Anna Denton | Nov 14, 2018 | GDPR
The Information Commissioner has issued its first enforcement notice under the GDPR. Unsurprisingly it’s to a company called AggregateIQ Data Services Limited, which is actually a Canadian company in connection with what went on with Cambridge Analytica and...
by Anna Denton | Sep 17, 2018 | GDPR
Where somebody’s photo is being used next to their name on a website (or on the office wall) this will be an act of processing personal data. The photo may also reveal ethnicity or racial origin, somebody’s religious belief, perhaps because they’re wearing a...
by Anna Denton | Jun 11, 2018 | GDPR
Whoever was hoping that I would stop talking about GDPR on 25th May; you’re out of luck! Hopefully you’ve realised there are problems with consent in the employment relationship, in general. A lot of contracts that I see say that the employee will consent to...
by Anna Denton | May 21, 2018 | GDPR
You may still be holding data in relation to ex-employees particularly if they’ve left in the last few years and your retention policy, in relation to data, requires you to retain the data for example, for six or seven years, or even longer where you can justify it....
by Anna Denton | May 7, 2018 | GDPR
Our latest video is available to view on the Refreshing Law YouTube channel – please click here to be redirected and watch Anna discuss GDPR and the next steps.
by Anna Denton | Apr 22, 2018 | GDPR
Under the GDPR, biometric data such as fingerprints falls within the new category of ‘special category of data’ and is what we used to call ‘sensitive personal data’ in old money. If you use a system to record that data, when employees clock-in and out for example, to...