The second of our five GDPR animation videos looks at how the right of access applies, and how you should respond to a Subject Access Request.
With GDPR now in effect, appropriate technical measures including, but not limited to encryption in certain forms will be a requirement. This guide is to help reduce the confusion surrounding the different types.
Privacy notices help the people who you process personal data about understand why and what you do with their information. The GDPR specifies what must be included and how they should be written.
Our guidance addresses some common themes for data protection in the voluntary and community sector. We've created some templates as a starting point for you to work with.
It is a legal requirement of the General Data Protection Regulation (GDPR) to keep a clear record of your processing activities. This resource explains what to do and provides templates for you to get started.
A number of common scenarios and questions that we have received on GDPR and data protection.
Legitimate interests is one of six lawful basis set out in the GDPR to justify the processing of personal data (data relating to an individual from which that individual can be identified).