Skip to main content

GDPR Checklists from the Information Commissioner's Office

To help you get ready for the implementation of GDPR, the Information Commissioner's Office have put together a couple of checklists to help you assess your compliance with the legislation.

There are two checklists, one for data controllers and one for data processors, so you first job will be determine which is relevant to you:
  • A controller determines the purposes and means of processing personal data.
  • A processor is responsible for processing personal data on behalf of a controller.

GDPR checklist for data controllers
Includes the new rights of individuals, handling subject access requests, consent, data breaches, and designating a data protection officer.

GDPR checklist for data processors
Includes the new requirements for data processors, the rights of individuals, data breaches, and designating a data protection officer.

See also:Information Commissioner's Office Guide to GDPR
Labels:

Comments

Post a Comment

Popular posts from this blog

ICO to fine Marriott International £99m for 339 Guest Records Breach

The UK Information Commissioner’s Office (ICO) has issued a notice that it intends to fine Marriott International £99m in relation to a reservation database incident announced on November 30, 2018.
Post a Comment
Read more

Dixons Carphone Data Breach - Now Up to 10 Million Customer Records

Although a pre GDPR data breach, Dixons announced on 31st July 2018 an update to the breach they identified in June. When initially announced on 13th June, it was 1.2 million customer records involved, but with further investigation the breach now looks to have affected approximately 10 million records.
1 comment
Read more

Scottish Rugby: Explicit Consent, Freely Given

I'm currently in discussion with Scottish Rugby about their privacy policy in relation to their new player registration system . In the past, for a person to play in a Scottish Rugby run competition, that person had to be registered on the SRU player registration system.  Player registrations were administered by the Club that player played with, with each Club being a independant organisation, all of whom are Members / mutual stakeholders in the Union.  All rugby union games in Scotland are governed by Scottish Rugby rules, regulations and bye-laws. From 25th May, a new player registration was introduced, which Clubs will still administer, but it also gives players direct access to their record.  The first stage of implementing the new system is for the individual player to confirm their record by logging into the system, firstly accepting the SRUs privacy policy.
Post a Comment
Read more