This article is not a guide about how to handle a notifiable breach. By now, you’re all familiar with the ICO Guidance on that. This piece is about the day to day handling of incidents based on over a decade …
Category Archives: Fundraising
We all know about PECR, right?
Categories: Accuracy, Breach, Charities, Charities: ICO, Consent, Data Protection Act 2018, Data Sharing, Events, Fines, Fundraising, GDPR, ICO, Security, TransparencyAt the Protecture seminar on e-Privacy at the end of November, Rowenna Fielding reminded us that PECR is about more than just consent for electronic direct marketing. I don’t think that Rowenna meant to alarm anyone, just a gentle poke …
Launch of the IRMS Third Sector Retention and Disposal Toolkit
Categories: Accuracy, Breach, Charities, Charities: ICO, Consent, Data Protection Act 2018, Data Sharing, Events, Fundraising, GDPR, Guidance, ICO, Security, TransparencyThe Information and Records Management Society (IRMS) and Protecture were delighted to formally launch the IRMS Third Sector Retention and Disposal Toolkit and Schedule at an event in Central London last week. Attendees from a number of charities, not-for-profits and …
Equifax – 12 lessons to learn
Categories: Accuracy, Breach, Brexit, Charities, Charities: ICO, Consent, Data Protection Act 2018, Data Sharing, DFE, Fines, Fundraising, GDPR, Guidance, ICO, Public Information, Security, TransparencyAs the Data Protection Act 1998 (DPA98) comes to an end, we have a first! The first maximum fine under the old law was issued in September to Equifax Ltd. If you’ve heard any of the Data Protection Leads here …
Trust, Transparency and Data Protection
Categories: Charities, Charities: ICO, Data Protection Act 2018, Fundraising, GDPR, TransparencyCharities rely on personal data more than ever before, whether they are processing a donation, running a fundraising event, or providing services. Supporters and service users must give their personal data to you; in some cases, such as prospect research, …
Cookie D’oh!
Categories: Breach, Brexit, Charities, Charities: ICO, Consent, Data Protection Act 2018, Data Sharing, Fines, Fundraising, GDPR, ICO, Public Information, Security, TransparencyWith the news that the changes to ePrivacy law have now been delayed until 2020, now is a good time to evaluate whether your organisation’s practices are already in line with existing electronic privacy law. The ePrivacy Regulation is likely …
What would you say? 20 questions from the ICO
Categories: Charities, Consent, Data Protection Act 2018, Data Sharing, DFE, Fines, Fundraising, Guidance, ICO, Public Information, Security, TransparencyWhat would you say? 20 questions from the ICO The findings from the ICO’s latest Information Risk reviews highlight the many and varied areas that data protection risk touches upon. We turned the findings into the 20 key questions you …
Who’s in Control?
Categories: Charities, Charities: ICO, Data Sharing, Fundraising, GDPR, ICOOne of the key aspects of data protection law is the concept of Data Controllers and Data Processors. In advance of the GDPR enforcement date (25th May), many organisations are seeking to review, update and amend their agreements with suppliers …
A Wealth of Data – Using Public Information
Categories: Charities, Data Sharing, Fundraising, Public Information, TransparencyThe latest investigation by the Daily Mail into the use of publicly-available personal information has hit the headlines. This time, the activities of university alumni and development teams is under the spotlight. Sadly, it’s the same mixture of issues first …
Taking the ‘Con’ out of ‘Consent’
Categories: Charities, Consent, Fundraising, GDPR, TransparencyTaking the ‘Con’ out of ‘Consent’ In many ways, the GDPR is not very different to the Data Protection Act. This is true for the requirement to justify which of the six lawful “basis for processing” you are relying on …