Data Protection Regulation

23 May 2017 at 11:51am

GDPR: notices and processes

Andrew Cormack
Data Protection Regulation
GDPRprocess
Some of the General Data Protection Regulation's requirements on data controllers apply no matter which legal basis for processing is being used.
Read more
9 May 2017 at 10:44am

DCMS call for views on GDPR derogations

Andrew Cormack
Data Protection Regulation
GDPRdevelopment
research
The Department for Culture, Media and Sport has called for views on how the UK should use the "derogations" (i.e. opportunities and requirements for national legislation) contained within the General Data Protection Regulation. The main area where derogations, or the lack of them, could affect the Jisc community is in the application of the GDPR to research data. We have therefore recommended that the UK Government should:
Read more

2017 - DCMS Derogations under the GDPR

Andrew Cormack
Tuesday, May 9, 2017 - 10:36
Data Protection Regulation
Data Protection Act
research
This is Jisc's response to the DMCS call for views on Derogations under the General Data Protection Regulation (GDPR)
Read more
27 April 2017 at 2:42pm

ICO request for feedback on profiling under the GDPR

Andrew Cormack
Data Protection Regulation
GDPRtopics
Learning Analytics
We've just responded to the ICO's request for feedback on Profiling under the General Data Protection Regulation.
Read more

2017 - ICO Request for Feedback on Profiling

Andrew Cormack
Thursday, April 27, 2017 - 14:29
Learning Analytics
Data Protection Regulation
Profiling
This is Jisc's response to the ICO's request for feedback on Profiling under the General Data Protection Regulation. 1. When, how and why does your organisation carry out profiling? Do you agree that there has to be a predictive element, or some degree of inference for the processing to be considered profiling?
Read more
23 October 2019 at 10:27am

GDPR: What's your justification?

Andrew Cormack
Data Protection Regulation
GDPRprocess
[Updated Oct.19 to add EDPB on Necessary for Contract and ICO on Consent] [Updated Sep.18 to repair links broken by the demise of the Article 29 WP website] [Updated Oct.17 to include an example where multiple justifications are appropriate]
Read more
5 May 2017 at 8:48am

GDPR: Alumni processes

Andrew Cormack
Data Protection Regulation
ePrivacy Regulation
Alumni
GDPRtopics
Most universities maintain databases of alumni, for purposes including keeping them informed about the organisation, offering services and seeking donations. These activities have a lot in common with other charities, so the Information Commissioner's guidance is relevant.
Read more
19 April 2017 at 9:38am

GDPR: Official CSIRTs?

Andrew Cormack
Data Protection Regulation
incident response
GDPRtopics
A couple of organisations have asked me recently whether the General Data Protection Regulation (GDPR) requires them to get some sort of external recognition of their incident response team. Here's why I don't think it does. Recital 49 of the Regulation says:
Read more
Subscribe to Data Protection Regulation