EU GDPR Archive
If your organization takes information security seriously, you’ve probably come across ISO 27001, the international standard that describes best practice for an ISMS (information security management system). But you may be less familiar with ISO 27701. It’s the newest standard …
Article 32 of the EU GDPR (General Data Protection Regulation) requires organizations to implement technical measures to ensure data security. Specifically, it highlights the need for “a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational …
When the EU GDPR (General Data Protection Regulation) took effect in 2018, many organizations – particularly on this side of the Atlantic – considered it a bureaucratic nightmare. For most U.S. businesses, Europeans are a fraction of their customer and …
The UK’s transition out of the EU (Brexit) will end on 31 December 2020, bringing with it major changes to the way organizations interact with stakeholders based in the country. It’s not just UK–EU relationships that will be affected; the …
Invalidation of the Privacy Shield U.S. companies that do business in the EU are in for a nasty shock. For the past four years, the EU–U.S. Privacy Shield framework has allowed them to transfer data from the EU in line …
The only thing that seems to keep up with technology these days are the laws implemented to regulate its safe use. Although Europe’s GDPR has been in effect since 2018, recent guidance from Belgium’s regulatory authority will have companies questioning …
On January 31, 2020, the United Kingdom withdrew from the European Union, creating a tricky situation regarding the EU GDPR (General Data Protection Regulation). As the GDPR is an EU regulation, the UK will no longer be subject to it …
If you’re trying to advance your cybersecurity career, there’s good news. There are many different roles in cybersecurity, and organizations are in desperate need of skilled personnel, with an estimated 300,000 vacant jobs in the US alone. But what cybersecurity …
During one of IT Governance’s GDPR (General Data Protection Regulation) training courses last year, a delegate from a well-known financial services company asked: I’ve just come on the course to understand how the GDPR works. Why do I need to sit an …
We’re more than a year into the era of the EU GDPR (General Data Protection Regulation), but organizations across North America are still struggling to understand how, and if, the Regulation applies to them. It’s understandable that many companies outside …
