According to the GDPR, a processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of a controller. Article 30 states that a processor must also maintain “Records of Processing Activities” carried out on behalf of a controller.Either entered individually, or using the client import template, … Continued
Read MoreOne of the many significant changes brought about by GDPR was the data subject’s greater right of access to personal information. And that is far-reaching. The data controller must fulfil a subject access request (SAR) within a month to comply with GDPR. So, the correct systems must be in place to make sure this happens. … Continued
Read MoreIf you are a US company that directly processes the personal data of EU customers, you are considered a data controller under GDPR. But what if you are an American B2B company, who handles that data on behalf of an EU business? That makes you a data processor rather than a controller. You will have … Continued
Read MoreIf your small or mid-sized company could use a GDPR software solution, where do you start looking? GDPR compliance is essential for any company which handles EU citizens’ data. This is true, whether the company comes from Europe, the USA or elsewhere. In this blog post, we’ll look at five things to consider when buying … Continued
Read MoreNow that the General Data Privacy Regulation is in place, you’ll have looked at where personal data flows through your business. You’ll also have adjusted your systems or implemented new systems so that you can be compliant with the law. The message about personal data security should’ve reached all your staff members, whether they collect, … Continued
Read More