Using AI systems without telling anyone is tempting, but their undisclosed use is problematic, according to relevant data protection laws. It infringes on the principle of transparency by preventing data subjects from understanding how their personal data is processed, and [...]
Privacy by design has been part of data protection law for a while. However, the practical need to apply it is growing. Let's discuss what it is and how the relevant authorities have used it in the context of data [...]
The EU Data Act aims to create a coherent framework for sharing non-personal data in the European Union (EU), which means that organisations and public bodies will be able to store and process non-personal data wherever they choose. The General [...]
Max Schrems’ journey with Meta (previously Facebook) and the Irish Data Protection Commission highlights the care organisations must observe when they deal with the personal data of the international community. Although there is an 80% similarity in privacy laws across [...]
Initially used by military leaders and diplomats, cryptology has become an integral part of our daily lives since the advent of the Internet. This science of secret writing, which is divided into two types (cryptography and cryptanalysis), is today essential [...]
When are photos biometric data under data protection law? This is a hot question at the moment because data protection laws attach stricter principles to the processing of biometric data which falls under sensitive data. Biometric photos are processed [...]
Now there is a good question. Many people ask us how much does data protection compliance (or more specifically GDPR compliance or POPIA compliance) cost. I'm afraid there is no simple answer but I can give you some guidance to [...]
Many organisations are trying to implement POPIA. They're trying to assess the impact of POPIA on their organisation and then analyse the gap. This makes a lot of sense because you need to understand the impact and the gaps before [...]
Data protection authorities around the world have started to do a data protection audit (or GDPR audit) on controllers to check that they comply with data protection law. Essentially, the authority compares your organisation to a data protection law that [...]
In everyday language, a ‘one-stop shop’ is a business offering multiple services and the only place you need to fulfil your needs. A ‘one-stop shop’ means something else from a data protection perspective in the context of the GDPR, although [...]
This week, the UK Information Commissioner's Office (ICO) issued two intentions to fine organisations for breaches of the GDPR. It has not issued these GDPR fines yet, and both organisations still have an opportunity to respond to the intention with [...]
Who must appoint a DPO? What does the General Data Protection Regulation (GDPR) require regarding a Data Protection Officer (or DPO)? This is one of the questions the GDPR, which the European Parliament recently adopted, has made many organisations ask. Another one of [...]
