In the nick of time: EU grants UK data protection adequacy decision
With the 30 June deadline approaching, the EU has agreed an adequacy decision for the UK, allowing the free flow of personal data from the EU to the UK to continue.
Data protection and privacy are matters of professional concern to accountants in practice, industry or commerce. Organisations that collect, store or process personal information (personal data) on living and identifiable people (data subjects) must comply with the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). Other relevant data protection and privacy legislation includes the Privacy and Electronic Communications Regulations (PECR), the Freedom of Information Act (FOIA) and the Data Protection (Charges and Information) Regulations 2018. This content is not intended to constitute legal advice. Specific legal advice should be sought before taking or refraining from taking any action in relation to the matters outlined.
Updated guidance from the ICO
This guide summarises the general erasure obligations set out in GDPR, the exceptions available under GDPR and the DPA 2018 and provides practical interpretation of these in relation to various example service offerings that may be provided by ICAEW members.
The Data Protection Act 2018 (DPA 2018) came into force on 25 May 2018 to replace the Data Protection Act 1998. It sits alongside the General Data Protection Regulation (GDPR). This guide is part of a series that explain some of the new or more difficult concepts introduced by the DPA 2018 and the GDPR.
New technologies are a force for good – they fuel innovation, improve efficiencies, enhance communication, and increase productivity – but they also raise new challenges that can be harmful. We’ve witnessed in recent years how technology has had undesirable consequences, with data breaches and online surveillance resulting in widespread concerns over privacy, security, and the spread of disinformation. This has eroded trust in businesses and institutions, while simultaneously knocking the confidence of businesses to fully embrace technological change.
This month we look at the latest stories in the world of cyber, the lessons 2023 has taught us on how to improve cyber security, and the changes to the Online Safety Act.
The average cost of data breaches is increasing, particularly for smaller firms, while AI is increasingly used for both cyber security and malware.
Dr Sam De Silva, Partner and Global Co Head of the Commercial Practice Group at international law firm, CMS Cameron McKenna Nabarro Olswang LLP (CMS) and member of the ICAEW Tech Board, shares his thoughts on the legal and regulatory issues you should consider when using generative AI in your organisation.
View the recording and accompanying factsheet from our DSAR webinar which took place on 25 May 2022 - a collaboration between ICAEW and Haddletons.
Are you doing enough to manage the risk of cyber-crime and data breach in your business? Marsh Commercial will focus on the risk of cyber specifically to small practitioners, and may highlight the gaps in your cover that are leaving your business exposed.
Demystifying data. Before organisations can gain any value from data it is critical to have a clear data strategy that ties into an organisation's overall strategy.
The GDPR came into force in the UK on May 25 2018. Many organisations put a lot of effort into preparing for that day.
Disclaimer: The opinions expressed by external guest speakers in interviews or other publications included on this website are, by their nature, those of the speaker. They are not necessarily fully endorsed by the ICAEW or purport to reflect the official policies and views of the ICAEW or its members.
Legal Alert is a monthly checklist from Atom Content Marketing highlighting new and pending laws, regulations, codes of practice and rulings that could have an impact on your business. Find out more about Atom Content Marketing
Employees will welcome new guidance from the UK Information Commissioner’s Office (ICO) to help them comply with UK data protection rules if they monitor workers.
Businesses that fail to comply with rules requiring them to make it as easy for their website visitors to reject non-essential cookies as to accept them should consider amending their websites to ensure compliance, as the Information Commissioner’s Office (ICO) may be taking a stricter approach to enforcement in future.
Businesses using or considering using biometric data and technologies will welcome a first-phase draft of proposed guidance on the application of data protection law, published by the Information Commissioner’s Office (ICO).
Disclaimer: These publications from Atom Content Marketing are for general guidance only, for businesses in the United Kingdom governed by the laws of England. Atom Content Marketing, expert contributors and ICAEW (as distributor) disclaim all liability for any errors or omissions.
The Library & Information Service provides a hand-picked collection of eBooks as a benefit of membership. If you are unable to access an eBook, please see our Help and support or contact library@icaew.com
This section looks at the definitions in the Act, the rights conferred on data subjects and the data protection principles.
This chapter of the handbook looks at what personnel records an organisation should keep, data protection (please note this section has not been updated to reflect the Data Protection Act 2018 /GPPR) and the monitoring of e-mail and telephone calls. A sample e-mail and internet policy is supplied.
This handbook offers advice on the practical implementation of GDPR and analyses its impact. The guide examines the scope of GDPR, the organisational and material requirements for data protection, the rights of data subjects, the role of the Supervisory Authorities, enforcement and fines under the GDPR, and differences between EU jurisdictions.
Terms of use: You are permitted to access, download, copy, or print out content from eBooks for your own research or study only, subject to the terms of use set by our suppliers and any restrictions imposed by individual publishers. Please see individual supplier pages for full terms of use.
The Library & Information Service provides a hand-picked collection of industry press articles as a benefit of membership. If you are unable to access an article, please see our Help and support or contact library@icaew.com
Article discusses openness and transparency in data collection from customers. The authors argue that companies that are open about what they are doing with customer data and offer something fair in exchange are at an advantage over companies that are not trusted with data.
The article highlights the importance of data management and security in today's digital supply chain, where every enterprise is considered a "data enterprise." As companies transition to digitally integrated supply chains, they must prioritize data stewardship, embed data governance and security into their operations, and adapt to changing practices and regulations.
The article focuses on data classification as a pre-requisite for data protection, security, and compliance, and it explores the tools available for data classification, including offerings from major tech companies as well as open-source options. It mentions these tools use machine learning and artificial intelligence to automate data classification, ensuring accurate data management and governance.
Terms of use: You are permitted to access articles subject to the terms of use set by our suppliers and any restrictions imposed by individual publishers. Please see individual supplier pages for full terms of use.
The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR) and replaces the Data Protection Act 1998.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
Guidance from the ICO for organisations that wish to send electronic marketing messages (by phone, fax, email or text), use cookies, or provide electronic communication services to the public.
Guide from the ICO explaining the provisions of the UK GDPR and what organisations need to do to comply with its requirements. Includes ‘In brief’ summaries and checklists as well as more detailed content in key areas.
ICAEW accepts no responsibility for the content on any site to which a hypertext link from this site exists. The links are provided ‘as is’ with no warranty, express or implied, for the information provided within them. Please see the full copyright and disclaimer notice.