Guides Archives - Measured Collective https://measuredcollective.com/category/guides/ Mon, 13 Jul 2026 06:08:53 +0000 en-GB hourly 1 https://measuredcollective.com/wp-content/uploads/2023/05/cropped-mc-icon-1-120x120.png Guides Archives - Measured Collective https://measuredcollective.com/category/guides/ 32 32 CNIL connected-vehicle location rules: what fleet managers and telematics providers should check https://measuredcollective.com/cnil-connected-vehicle-location-rules-what-fleet-managers-and-telematics-providers-should-check/ Mon, 13 Jul 2026 06:08:53 +0000 https://measuredcollective.com/?p=14992 A connected car, van, or scooter generates location data every time it moves. Fleet dashboards, rental recovery tools, and telematics boxes make that data easy to collect, and easy to over-collect. In June 2026, France’s CNIL published updated recommendations on how professionals may use connected-vehicle location data, following a public consultation and recent press coverage ...

Read more

The post CNIL connected-vehicle location rules: what fleet managers and telematics providers should check appeared first on Measured Collective.

]]> GDPR & Slack: How to stay compliant with GDPR https://measuredcollective.com/gdpr-slack-how-to-stay-compliant-with-gdpr/ Sun, 21 Jun 2026 08:18:22 +0000 https://wpstaging.measuredcollective.com/?p=12547 Slack is where your team talks. It is not where your GDPR programme lives. Under the UK GDPR Article 28, your organisation is the controller when you decide what personal data goes into Slack, who can see it, and how long it stays. Slack processes that data on your instructions. That split is the starting ...

Read more

The post GDPR & Slack: How to stay compliant with GDPR appeared first on Measured Collective.

]]> Can I Request a Copy of All My Employment Data from My Employer Under GDPR? https://measuredcollective.com/can-i-request-a-copy-of-all-my-employment-data-from-my-employer-under-gdpr/ Sun, 21 Jun 2026 08:15:06 +0000 https://wpstaging.measuredcollective.com/?p=12713 The General Data Protection Regulation (GDPR) gives you the explicit right to request and receive a copy of all personal data your employer holds about you.

The post Can I Request a Copy of All My Employment Data from My Employer Under GDPR? appeared first on Measured Collective.

]]> Is Employee Data Subject to GDPR? How must it be protected? https://measuredcollective.com/is-employee-data-subject-to-gdpr-how-must-it-be-protected/ Tue, 16 Jun 2026 10:28:46 +0000 https://wpstaging.measuredcollective.com/?p=12716 Yes. Employee data is personal data, so GDPR applies whenever an employer collects, stores, shares, searches, or deletes it. The more useful question is not whether the law applies, but which rules and controls fit the data you actually hold. The ICO’s employment guidance is aimed at employers handling workers’ information under UK GDPR and ...

Read more

The post Is Employee Data Subject to GDPR? How must it be protected? appeared first on Measured Collective.

]]> Why a templated privacy policy is only half the job — writing vs. operationalising it https://measuredcollective.com/why-a-privacy-policy-is-only-half-the-job-writing-vs-operationalising-it/ Thu, 21 May 2026 16:16:57 +0000 https://measuredcollective.com/?p=14876 A templated privacy policy can look reassuring while hiding gaps in complaints handling, SAR workflow, consent records, and breach response. Here is what the ICO expects organisations to operationalise behind the document.

The post Why a templated privacy policy is only half the job — writing vs. operationalising it appeared first on Measured Collective.

]]> UK Data Protection Complaints Procedure: What Organisations Need in Place Before 19 June 2026 https://measuredcollective.com/uk-data-protection-complaints-procedure-what-organisations-need-in-place-before-19-june-2026/ Fri, 15 May 2026 09:33:38 +0000 https://measuredcollective.com/?p=14846 From 19 June 2026, UK organisations must have a process for handling data protection complaints. This requirement needs a live operating process, not a dormant policy note. The ICO says the complaints-procedure requirement under the Data (Use and Access) Act 2025 starts on that date, and its published guidance already sets out what organisations are ...

Read more

The post UK Data Protection Complaints Procedure: What Organisations Need in Place Before 19 June 2026 appeared first on Measured Collective.

]]> Indiana Consumer Data Protection Act — What Managers Need to Know in 2026 https://measuredcollective.com/indiana-consumer-data-protection-act-incdpa-compliance-2026/ Sun, 26 Apr 2026 08:49:27 +0000 https://measuredcollective.com/?p=14798 Indiana Consumer Data Protection Act (INCDPA) is now in force from January 1, 2026. What managers must do now to comply.

The post Indiana Consumer Data Protection Act — What Managers Need to Know in 2026 appeared first on Measured Collective.

]]> EDPB Issues New Guidelines on AI Systems and Personal Data — Key Changes for EU Organisations https://measuredcollective.com/edpb-ai-models-personal-data-gdpr-guidance/ Sun, 26 Apr 2026 08:49:25 +0000 https://measuredcollective.com/?p=14796 EDPB Opinion 28/2024 clarifies GDPR rules for AI models and personal data. What HR, leadership, and marketing teams must do now.

The post EDPB Issues New Guidelines on AI Systems and Personal Data — Key Changes for EU Organisations appeared first on Measured Collective.

]]> Minnesota MCDPA Is Already in Force — Is Your Organisation Compliant? https://measuredcollective.com/minnesota-mcdpa-is-already-in-force-is-your-organisation-compliant/ Sun, 26 Apr 2026 06:41:24 +0000 https://measuredcollective.com/minnesota-mcdpa-is-already-in-force-is-your-organisation-compliant/ Minnesota's Consumer Data Privacy Act has been in force since July 2025. Check your MCDPA compliance now — enforcement is live and the cure period has expired.

The post Minnesota MCDPA Is Already in Force — Is Your Organisation Compliant? appeared first on Measured Collective.

]]> Indiana Consumer Data Protection Act — What Managers Need to Know in 2026 https://measuredcollective.com/indiana-consumer-data-protection-act-what-managers-need-to-know-in-2026/ Sat, 04 Apr 2026 04:39:47 +0000 https://measuredcollective.com/indiana-consumer-data-protection-act-what-managers-need-to-know-in-2026/ Indiana Consumer Data Protection Act (INCDPA) is now in force. The enforcement grace period ends July 1, 2026. What managers must do now to comply.

The post Indiana Consumer Data Protection Act — What Managers Need to Know in 2026 appeared first on Measured Collective.

]]> Cross-Border Data Breach Lawsuits: Courts Are Coming for You https://measuredcollective.com/cross-border-data-breach-lawsuits-courts-are-coming-for-you/ Wed, 11 Mar 2026 06:44:46 +0000 https://measuredcollective.com/cross-border-data-breach-lawsuits-courts-are-coming-for-you/ An Estonian crypto company with no office in the US just got dragged into a California courtroom. A facial recognition firm with no UK presence just lost its appeal against a £7.5m ICO fine. The message from courts on both sides of the Atlantic is the same: if you collect data from a jurisdiction’s residents, ...

Read more

The post Cross-Border Data Breach Lawsuits: Courts Are Coming for You appeared first on Measured Collective.

]]> Copyright vs. GDPR: The Tension in AI Training and Data Protection https://measuredcollective.com/copyright-vs-gdpr-the-tension-in-ai-training-and-data-protection/ Wed, 11 Mar 2026 06:44:46 +0000 https://measuredcollective.com/copyright-vs-gdpr-the-tension-in-ai-training-and-data-protection/ Every dataset scraped from the internet to train an AI model contains two things: copyrighted material and personal data. A news article used for training includes the publisher’s copyrighted text, but it also includes the names, opinions, and sometimes photographs of real people. Satisfying copyright law does not satisfy data protection law. They are separate ...

Read more

The post Copyright vs. GDPR: The Tension in AI Training and Data Protection appeared first on Measured Collective.

]]> Age Verification Is No Longer Optional: How Regulators Are Raising the Bar https://measuredcollective.com/age-verification-is-no-longer-optional-how-regulators-are-raising-the-bar/ Wed, 11 Mar 2026 06:44:45 +0000 https://measuredcollective.com/age-verification-is-no-longer-optional-how-regulators-are-raising-the-bar/ In early 2026, regulators on both sides of the Atlantic fined platforms, blocked laws, and rewrote policy — all focused on one question: are you doing enough to verify whether your users are children? Three enforcement actions in February and March 2026 make the direction of travel unmistakable. Self-declaration tick boxes are no longer a ...

Read more

The post Age Verification Is No Longer Optional: How Regulators Are Raising the Bar appeared first on Measured Collective.

]]> UK Data Use and Access Act: What Changes on 5 February 2026 and How to Prepare https://measuredcollective.com/uk-data-use-and-access-act-what-changes-on-5-february-2026-and-how-to-prepare/ Wed, 04 Feb 2026 02:40:15 +0000 https://measuredcollective.com/?p=14713 The UK’s Data (Use and Access) Act 2025 (DUAA) comes into force on 5 February 2026. Before you worry about urgent compliance work, here’s the good news: in most cases, you probably don’t have anything that needs immediate action. The reason is straightforward. Unlike regulatory changes that impose stricter requirements, the DUAA generally makes the ...

Read more

The post UK Data Use and Access Act: What Changes on 5 February 2026 and How to Prepare appeared first on Measured Collective.

]]>