How to make any form GDPR compliant
Forms are a practical way to gather data but can also be a GDPR compliance risk if not set up correctly.
Scott Dooley
How to make any form GDPR compliant
Forms are a practical way to gather data but can also be a GDPR compliance risk if not set up correctly.
Mailchimp & GDPR: What you need to know to improve GDPR & PECR compliance
Marketers should be aware that using these tools and their features can cause a legal compliance headache when it comes to data privacy laws like GDPR because of the sheer volume of personal data and data transfers required to make these campaigns work.
How the Data Protection and Digital Information Bill could change marketing in the UK
The UK government recently published the outcome of their consultation on the Data Reform Bill (now known as the Data Protection and Digital Information Bill) – a collection of sweeping policy changes “designed to make the UK the best place for businesses and scientific institutes to undertake data-driven activity”.
Royal Mail fined £20,000 under PECR for marketing automation gone wrong
This case tells us that it is important to continually review the potential impact of human error or technical error on your direct marketing campaigns.
What the marketing team at Virgin Media got wrong about PECR
The ICO’s recent enforcement action against Virgin Media shows us that some marketers are still failing to understand the ICO’s guidance on PECR.
Is Google Forms GDPR compliant?
Google Forms can be GDPR compliant, but only if a number of GDPR compliant procedures are put in place.
GDPR: what counts as personal data?
To comply with UK GDPR and EU GDPR it is necessary to understand the definition of personal data under GDPR.
GDPR & Google Workspace: How to stay compliant with GDPR
Using Google Workspace can help improve your productivity, but it can also easily turn into a GDPR nightmare if the data collected and stored within your products are allowed to get out of hand.
Facebook to update cookie consent controls on Facebook & Instagram in Europe
Facebook announced via their newsroom on Thursday (23rd September 2021) that they will be changing their cookie consent controls within the European region for Facebook and Instagram users.
GDPR & Recaptcha: How to stay compliant with GDPR
In this article we will explore how to stay compliant with GDPR and PECR when using ReCaptcha. We’ll start by exploring how ReCaptcha works and the types of data that it collects.
GDPR & Google Analytics 4: What you need to know
Switching to Google Analytics 4 gives marketers & site managers a wide range benefits.
Do you need a GDPR Representative in the EU?
By the time the UK left the EU on the 1st January 2020, the European Union’s GDPR rules and been written into UK law under the Data Protection Act. The rules have stayed almost identical to the original EU GDPR text, with the exception of some local previsions relating to enforcement and action, and the …
The most common cookie banner mistakes and how to fix them
Is your cookie banner breaking the law? Probably. Most website owners will remember the rush many years ago, to comply with the “EU Cookie Law”. The original 2011 directive made cookie notices a part of internet life. But it didn’t really do much for people’s privacy. Compliance was at best — patchy. Some of us …
Security firm fined under GDPR after employee used WhatsApp to transfer personal information
On the 10th July 2020, the AEPD – Spain’s data protection authority initiated a sanctioning procedure to fine the Barcelona Airport Security Guard Association (AVSAB) under the GDPR. The case found that a member of the AVSAB security group had used WhatsApp to send messages to private phone numbers containing personal information about employees. The …
Hotel group fined approx 148,000 euros for failing to delete over 500,000 customer profiles
If you have old contacts sitting around in your CRM or email marketing software, now is the time to delete them. Because recent cases tell us, regulators are paying increasing attention to GDPR’s requirement to only keep data for as long as you need it. On the 27th of August 2020, Danish data protection authority …
Spanish Data Authority (AEPD) fines e-commerce website €3,000 for unlawful cookie practices
On 6 August 2020, the AEPD (Spain’s data authority) decided to fine Grow Beats SL, an e-commerce company that targets a young audience to sell audio equipment like earphones and speakers, €3,000 for unlawful cookie practices. The fine relates to their unlawful use of cookies on the website. Specifically, that there mechanism was established to …
ICO Fine Cathay Pacific £500,000 for failing to protect customers’ data
On the 4th March 2020 the ICO reported that they will fine Hong-Kong based airline Cathay Pacific £500,000 for failing to protect customer’s personal data – under the data protection act. The ruling is the result of an investigation by the ICO into Cathay Pacific following a high-profile data-breach which exposed the personal details of …