With the UK now unambiguously out of the EU, the EU General Data Protection Regulation (2016/679) (“EU GDPR”) has been replaced by the United Kingdom General Data Protection Regulation (“UK GDPR”). In this third instalment of...more
1/28/2021
/ Commercial Contracts ,
Contract Drafting ,
Data Breach ,
Data Protection ,
Data Security ,
EU ,
General Data Protection Regulation (GDPR) ,
Information Commissioner's Office (ICO) ,
International Data Transfers ,
Notice Requirements ,
Privacy Policy ,
Regulatory Requirements ,
UK ,
UK Brexit ,
UK GDPR
From the ICO’s standpoint, the steps you elect to take post-breach and the speed with which you implement them are key. Demonstrating readiness to learn lessons from a breach incident by making investments in post-breach...more
In this part of our briefing series, we look at how individual reactions to a data breach can shift the dial from a regulator’s perspective. Recent decisions have shown that the ICO will look behind a company’s public...more
When the regulator has decided to investigate your organisation following a data breach, the remit for the investigation will be wide-ranging and go beyond the narrow circumstances of the breach. Recent decisions shed useful...more
We are now over a year on from the major changes made to the European data protection regime by the GDPR so it is time to revisit what the changes mean now for the hospitality sector and investment in it, given increased...more
11/6/2019
/ Amended Regulation ,
Cyber Attacks ,
Cybersecurity ,
Data Breach ,
Data Privacy ,
Data Processing Rules ,
Data Processors ,
e-Privacy Directive ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
Hospitality Industry ,
Hotels ,
Information Commissioner's Office (ICO) ,
Member State ,
Popular ,
Regulatory Standards ,
Risk Management ,
Technology ,
UK
Last month saw BCLP host a high profile data breach seminar, in which industry specialists, the ICO’s Head of Investigations, a former convicted hacker and BCLP’s data breach team came together to discuss issues that arise...more
Ready for the Inevitable?
Barely a day goes by without a data breach hitting the headlines. It is becoming a fact of life for any firm holding data that, from time to time, some of that data might be lost, stolen,...more
5/14/2019
/ Cyber Incident Reporting ,
Data Breach ,
Data Protection ,
Data Protection Officers (DPOs) ,
Financial Conduct Authority (FCA) ,
General Data Protection Regulation (GDPR) ,
Incident Response Plans ,
Information Commissioner's Office (ICO) ,
Insurance Claims ,
Notice Requirements ,
Prudential Regulation Authority (PRA) ,
Risk Management ,
UK