25 11, 2024

GDPR Compliance: Don’t use a competitors privacy policy

One size does not fit all When it comes to GDPR compliance, too many businesses fall into the trap of copying larger competitors' privacy policies. As a GDPR compliance consultant, I recently witnessed this firsthand during a client call, where I had to stop myself from screaming "NO!" into my mug as they suggested copying a section from a major competitor's privacy policy verbatim. The Dangerous Temptation of Copy-Paste GDPR Compliance Creating a GDPR-compliant [...]

12 08, 2024

Understanding Soft Opt-In for GDPR Compliance: A Guide for Marketing

Understanding Soft Opt-In for GDPR Compliance: A Guide for Marketing With all the data protection requirements and understanding lawful basis, marketers must navigate complex privacy legislation to ensure their marketing aligns with legal requirements. One such topic that's particularly relevant for email marketing is the "soft opt-in." This blog post will explore what soft opt-in means under the General Data Protection Regulation (GDPR) and how businesses can use it effectively. What is the Soft [...]

15 07, 2024

Where Is Your Data and Why it is important to know where it’s held

Businesses run on data and the insights that data can provide. Personal and business data is constantly being created, shared, and stored. But do you really know where all that valuable information is held in your business systems? Understanding the location of your data is crucial for security, privacy, regulatory compliance, and effective data management. Why Data Location Matters 1. Security: Knowing where your data is stored helps you assess vulnerabilities and implement appropriate [...]

26 07, 2021

The UK is adequate for Data Protection Purposes

The UK is adequate. Doesn't sound great does it but it is really good news for continuing to make transfers to and from the EU/EEA. You may remember me telling you at the beginning of the year that there was a 6-month period where transfers to the EU could continue until the UK achieved an adequacy status from the EU. The adequacy status was approved on the 28th June (talking about taking it to [...]

23 01, 2021

Which Countries are in the EU and EEA for data protection purposes?

The EU countries covered by GDPR and data exchange are: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, and Sweden. The EEA (European Economic Area) includes all the EU countries and Iceland, Norway and Liechtenstein. Additionally there are countries which have an adequacy decision and so data can be passed to and from them [...]

Go to Top