Phil Beckett

LIVE WEBINAR: How to Adopt AI in Compliance with the GDPR 4th June | 3pm Join our consultant Mark James for: • How existing data protection laws such as the GDPR regulate AI use; • Assessing risk and mitigation strategies through DPIAs (data protection impact assessments); • Key data protection pitfalls to look out for when assessing AI tools; • Privacy by design as a concept for organisations striving for innovation; and • Our recommendations for AI success. Sign up here: https://lnkd.in/dmn-dnTW (Even if you can't attend, you'll still receive a copy of the slides and recording) #GDPR #dataprotection #AI

12

Important Update from CIPC: Masking of Director Information on CoR39 Forms CIPC, the custodian of company registers, collects and makes directors' information available to the public when filed. To enhance privacy, CIPC has introduced masking of personal information (e.g., ID numbers, passport numbers, addresses) when filing for director amendments. This ensures that unauthorized filers cannot access sensitive data. Authorized filers can still update necessary information, and the output document (CoR39) will display the correct details. Stay informed and secure with these new measures! 🌐 Refer : Notice 40 of 2024 - https://lnkd.in/gxdkH8Bt #CIPC #Compliance #DataPrivacy #CorporateGovernance #BusinessUpdate #DataTracks #XBRLServices #XBRLSoftware #XBRL #CoR39Form

1

#Forensicadvisory practices have certainly scaled up significantly to cope with the increased #investment activity, not just by way of an increase in strength of forensic practitioners, but also introduction of a more diverse #skillset, advanced #forensictechnology and #AI, leveraging #dataanalytics, in order to cover multitude of complex dimensions in an #investigation: Geetu Singh, KPMG India. Read more in LiveMint https://lnkd.in/dUhc5W-n | #KPMGForensic

38

1 Comment

In our latest blog, our Head of Consultancy Louise Brooks gives a refresher on the lawful bases for processing, how consent compares to other lawful bases and consent management. Read it here: https://lnkd.in/e2tRd9SD #GDPR #consent #consentmanagement

2

📲 Data Protection Reform in the UK Data protection law is in a constant state of flux globally, driven by new guidance, cases, enforcement action, and emerging technologies (hello, generative AI!). The UK is no exception, especially post-Brexit. The journey began with the Data Protection and Digital Information Bill under Boris Johnson. It evolved through various stages and names, finally becoming the Data Protection and Digital Information Bill 2023. Despite much anticipation, progress stalled. There was hope it would pass before the summer recess, but... On 22 May, Rishi Sunak called for an election on 4 July. By 23 May, it was clear the Bill wouldn’t be part of the government's ‘wash-up’ session, leaving commentators to declare it “dead” for now. What’s next? If Labour wins, they might not prioritise data protection reform. However, there's a rumour of potential Labour-led reform this Autumn, which could also address AI. Stay tuned! Follow us on LinkedIn for the latest updates on this ever-changing landscape! 📲🔍 Click here for more Data Protection news: https://lnkd.in/enPmyRyf Louise Thompson Sarah Wheadon Kate S. #DataProtection #UKGDPR #UKLaw #TechNews #GenerativeAI #StayInformed

2

When does your organisation need a Data Protection Impact Assessment? Registered Social Landlords, as well as other organisations are subject to the UK General Data Protection Regulation (GDPR), and Article 35(1) requires that a Data Protection Impact Assessment (DPIA) should be undertaken before beginning any type of processing which is “likely to result in a high risk.” Claudia White's blog looks at the factors to consider👇 https://lnkd.in/evr_Mq3e #dataprotectionimpactassessment

9

1 Comment

The ICO are to review their approach to enforcement in the public sector. They have adopted a more compliance-based approach, rather than just fining organisations at the cost of the public purse. I have seen a similar approach in the private sector when my clients have demonstrated a good level of compliance following admissions that there have been breaches, mainly of PECR 2003. If you have any concerns about your data protection compliance or just need to refresh, just get in touch: andrew@andrewswanlaw.co.uk I also provide online GDPR training, which is ideal for induction or refresher training. Only £45 plus VAT per person: https://lnkd.in/eG3PqEHK #ICO #enforcement #fines #PECR #GDPR #dataprotection #compliance #training

3

The Digital Markets, Competition and Consumers (#DMCC) Bill brings consumer law compliance high on the risk agenda for UK businesses. It introduces greater enforcement powers for the Competition and Markets Authority (#CMA) and changes to subscription #contracts.   In the latest episode of our new podcast series, Eve England, Julia Woodward-Carlton and Zoe Haden discuss what these changes look like in practice for businesses engaging with individual consumers and what you can do to prepare. LISTEN 🔊 now [less than 10 minutes]: https://lnkd.in/ewRHguNt

23

Under the Digital Personal Data Protection Act (DPDP) Act 2023, organisations must update their notice and consent procedures. They are required to send timely notices to individuals whose data they hold, even if consent has previously been obtained. Establishing a robust notice-and-consent system, supported by appropriate technical and organisational measures, is essential for compliance. Firms should invest in technologies that consolidate and secure data sets, ensuring ongoing compliance with consent statuses. This approach enables the legal processing of legacy personal data until the data principal withdraws consent. . . . #sls #slsnoida #noidacity #DataProtection #PrivacyCompliance #DataPrivacy #dpdpact2023 #PrivacyLaw

2

A proposed overhaul of the Privacy Act would affect how organisations collect, use and manage data. We explain how this could affect you > https://loom.ly/3V2NlzI #CCIWA #privacyact #privacy #data Cass Wright

8

In this week’s Digital Ministry roundup, we look at the tabling of the amendments to the Personal Data Protection Act 2010 (PDPA 2010) in Parliament, and investments in the digital content sector that surged from RM550 million in 2022 to RM1.6 billion in 2023. More on Twentytwo13. #digital #tech #ai #datacentre #malaysia #news #media #Twentytwo13 #Twentytwo13news

4

Nobody knows if the Data Protection and Digital Information Bill will pass. The progress of any proposed legislation is uncertain to some extent, and politics at the moment is febrile. DPDI has been launched, delayed, reintroduced and subject to challenge: it could still go either way. The most important factor is unquestionably the date of the next election. The Prime Minister has to call it by December, which would mean polling day taking place in January 2025. Alternatively, he could panic and call it on Friday, frit by the outcome of the English locals. If the vote is after the summer, there’s a good chance DPDI will have time to cross the finish line. If we get an election soon, it’ll probably fail. I predict the former outcome but that’s just some bloke’s opinion. But if you want evidence that some in government think the DPDI bill will become the DPDIA, look at this civil service recruitment ad. The government seeks four non-executive directors to join the board of the Information Commission, the body that takes over when the DPDIA abolishes the Commissioner’s role. I know the collective opinion seems to be that DPDI is all bad, but I think it’s mixed. Some of it is terrible, some of it pointless but some of it is good. I think the part that disposes of the Commissioner as Corporation Sole is one of the few essential elements. I know this goes against the grain for those who think this kills the Commissioner’s independence and is a huge threat to the UK’s adequacy deal from the EU. My view is that John Edwards has been an undignified cheerleader for government policy since before he got here; I think diluting the power would make that better. As far as adequacy goes, I’d be interested to know how closely those who are waving the shroud have studied the regulators in other adequate jurisdictions (my guess is ‘not very’). Besides, adequacy is and has always been political. We’ll keep it if it suits the EU and lose it if it doesn’t. I have two arguments in favour of the Information Commission: they are Elizabeth Denham and John Edwards. The gruesome international twosome have shown bias, incompetence and terrible judgement. Data Protection regulation is too important to be in the hands of one person. How any future arrangements could be worse than Edwards’ vocal support for the current government’s plans is beyond me. I hope these posts attract a lot of interest, that some of my more experienced readers are tempted to apply, and that Edwards’ tenure as Commissioner is cut short, even if he stays on as Chair. https://lnkd.in/eUeDKAsg 

10

3 Comments

Save the date! On 20 June, Enhesa experts Mary P Foley and Gaye van der Eerden will explore the latest developments in #sustainability reporting and demonstrate how Enhesa's Jurisdiction Compliance can help businesses meet #compliance expectations. Get refreshed on #GRI, #ISSB and #CSRD standards, with guidance on how to streamline your sustainability program to mitigate associated risks. Leverage Enhesa solutions to stay ahead of the curve. 🔗 Join us on 20 June> https://lnkd.in/eUcnAFWQ

16

How does our Modern Slavery Act AI Audit work? Upload Your Statement: Simply upload your Modern Slavery Act statement to our platform. Automated Review: Our AI will analyse the document, checking for compliance with all relevant aspects of the Act. Receive Your Report: Get a comprehensive report detailing compliance status and actionable recommendations for improvement. Our AI audit is designed to take the guesswork out of compliance, providing you with clear, actionable insights to strengthen your Modern Slavery Act statements. Find out more here: https://bit.ly/4ecNeIX #ModernSlaveryAct #MSA #AIAudit

2