Data protection authorities around the world have started to do a data protection audit (or GDPR audit) on controllers to check that they comply with data protection law. Essentially, the authority compares your organisation to a data protection law that [...]
In everyday language, a ‘one-stop shop’ is a business offering multiple services and the only place you need to fulfil your needs. A ‘one-stop shop’ means something else from a data protection perspective in the context of the GDPR, although [...]
This week, the UK Information Commissioner's Office (ICO) issued two intentions to fine organisations for breaches of the GDPR. It has not issued these GDPR fines yet, and both organisations still have an opportunity to respond to the intention with [...]
A Commentary on the Protection of Personal Information Act is a good legal textbook that lawyers and law students will find useful in raising their awareness about this very important topic that is about to become a big deal in [...]
When a data subject's right to privacy is infringed or someone fails to protect their personal data, and they suffer damages as a result. Who is liable for those damages? Who should the data subject be taking legal action against? Is [...]
They say hindsight is 20/20. And usually, it's not helpful to hear that. But for once we can really apply what we've learnt. By helping organisations meet the GDPR compliance deadline, we've identified the key stumbling blocks to avoid as [...]
A group of people working together can achieve a goal more quickly and effectively that one person working alone. Information security law compliance is difficult and requires an information security team of people to do it properly. Your team should [...]
The Information Regulator released the Information Regulator Strategic Plan for 2017 - 2020 on 9 June 2017. This plan is quite important and requires all private and public bodies to sit up and take note. It contains an explanation [...]
Information security laws (many of which are also privacy laws) across the globe require you to secure the personal data that you process. The General Data Protection Regulation (GDPR) in Europe, the Data Protection Act in the United Kingdom, and the [...]
The Minimum Information Security Standards (or MISS) is a standard for the minimum information security measures that any institution must put in place for sensitive or classified information to protect national security. If you work with public service information resources, [...]
Michalsons attended the media briefing given by the Information Regulator in Cape Town on 13 February 2017. We were pleased to engage with this newly appointed, energetic, and committed team. A few key points from their presentation follow: They have [...]
POPIA stands for the Protection of Personal Information Act - the South African data privacy and data protection law that was enacted in 2013. Many people use the acronym POPI or POPI Act to refer to it. Some people use PoPI. [...]
