SA Law's views & insight about GDPR
EU-US Privacy Shield declared invalid
The European Court of Justice (ECJ) invalidated the EU-US Privacy Shield as an appropriate mechanism to meet the GDPR’s cross-border personal data transfer…
A new age: working from home and GDPR
What GDPR issues may arise from working from home and what you should do to reduce risk and stay compliant.
Data protection and the coronavirus pandemic
Good news: The ICO provides clarity on common areas of data concerns during the unprecedented coronavirus pandemic.
Data protection and school photographs
ICO shares guidance following two schools being reprimanded for distributing photographs of pupils without parents’ consent.
GDPR one year on: make sure your small business is compliant
Chris Cook shares vital tips for SMEs who haven't done anything to abide by GDPR, and how they can start going about compliance.
GDPR one year on
Subject access requests and complaints have been commonplace since the GDPR came into effect. Find out more about the trends and traps.
What to expect in Data Protection Law in 2019
Our Data Protection Team highlight what we can expect to see from the Data Protection Act in 2019 and the potential impact of E-Privacy Regulations.
Google issued with £44m fine over GDPR breach
Head of Employment and Data Protection, Chris Cook, explains Google's GDPR breach that led to landmark £44 million fine.
What is the difference between a controller and processor under the Data Protection Act 2018?
Partner and Head of Employment & Data Protection, Chris Cook describes how to distinguish between a processor and controller under GDPR.
GDPR - 6 Months On
Partner and Head of Employment & Data Protection Chris Cook comments on the impacts of GDPR over the past 6 months.
ICO publishes passwords and encryption guidance
Partner, Chris Cook, identifies the new ICO guidance on passwords in online services and encryption under GDPR.
GDPR and SARs; staying compliant and protected
Partner and Head of Employment & Data Protection, Chris Cook writes in Education Executive about the GDPR and SARs.
Divorce and the GDPR
In the Financial Times Adviser, Marilyn and Chris discuss the implications of being jointly instructed by one party in the proceedings.
GDPR: A five step guide to dealing with a data breach
Chris Cook shares a five step guide to dealing with a data breach including assessing risk & reporting.
To ban, or not to ban social media? That is the question
Employment Partner, Keely Rushmore writes for City A.M.
Data Protection Act
Partner and head of employment Chris Cook examines the Data Protection Act
Employers feel unprepared for GDPR deadline
Partner Keely Rushmore comments in People Management on the GDPR and how companies weren't ready for the changes
ICO publishes final version of guidance on consent
Head of employment at SA Law St Albans, Chris Cook, discusses the ICO's guidance on consent
EU data is slowing the divorce process
Head of family law at SA Law, Marilyn Bell examines how the GDPR could potentially add more complications to the divorce process
GDPR affects your mergers & acquisitions too
Acquiring or merging with another organisation means expanding the personal data you hold, whether related to employees, customers, suppliers or other…
GDPR and Information Security: Are your employees trained to protect data?
With just a short while before the General Data Protection Regulation (GDPR) is implemented into UK law, there are many good reasons to check whether…
The Employment Life cycle
Our employment life cycle wheel outlines some of the key compliance requirements for handling employee personal data. Many of the points should already…
Draft Data Protection (Charges and Information) Regulations 2018 and guide published
The draft regulations are of course, subject to Parliamentary approval but, given that there is limited time until the GDPR, they are unlikely to change.
Transport for London wants access to Uber's greatest competitive asset – the swathes of data that underpins its success
Head of employment Chris Cook comments in City AM on the upcoming GDPR and the potential hindrance to TfL and it's processes.
GDPR for HR
Chris Cook explains why HR professionals should revisit their data protection practices ahead of the GDPR
What is the difference between ‘data controller’ and ‘data processor’?
It seems fair to say that most organisations are aware that they are subject to obligations under data protection laws and the extent to which they are…
Charity worker fined for unlawfully obtaining personal data from his employer
Recent case highlights importance of obeying data laws after charity worker fined for misusing personal data.
GDPR: What should I be doing?
Following a successful run of GDPR compliance events, SA Law's Data & Privacy team share how you can start preparing for the GDPR.
GDPR: 12 key changes
Chris Cook explains the 12 key changes to data protection law you need to know.
How to prepare for the GDPR
The GDPR comes into force on 25th May 2018, but organisations are recommended to start preparing for the changes as soon as possible to avoid non-compliance…