Infinitic Consultancy

infinitic

Impact of the GDPR to Companies: Data Breach Notification

The new EU General Data Protection Regulation (GDPR) makes it mandatory for organisations to notify the EU member state’s Data Protection Supervisory Authority (DPA) and, in some cases, affected data subjects in the event of a personal data breach. This specific GDPR requirement to notify makes it imperative for organisations to make sure they have effective incident […]

Impact of the GDPR to Companies: Data Breach Notification Read More »

Impact of the GDPR to Companies: The mandatory DP Officer

The GDPR requires organisations to appoint or designate a data protection officer with responsibilities to inform and advise the organisation about compliance with GDPR obligations and other data protection laws. The DPO requirement applies to both data controllers and data processors. The DPO will also be responsible for monitoring the organisation’s compliance with the GDPR, managing internal

Impact of the GDPR to Companies: The mandatory DP Officer Read More »

Impact of the GDPR to Companies: Consent Requirements

Consent was one of the robustly argued subjects during the drafting of the GDPR and remains a lawful basis for processing, transfer or disclosure of personal data under the GDPR. The GDPR sets a very high standard for consent by clearly defining consent as: “any freely given, specific, informed and unambiguous indication of his or

Impact of the GDPR to Companies: Consent Requirements Read More »

NHS Providers Told to Implement New Data Security Standards

The Department of Health (DH) has confirmed that the NHS IG Toolkit will be replaced by the new NHS Data Security and Protection Toolkit (DSP Toolkit) from April 2018. This is confirmed in a guidance document published this week by DH and NHS England to outline the 2017-18 requirements for organisations providing NHS services to implement the

NHS Providers Told to Implement New Data Security Standards Read More »