AI: THE DOUBLE-EDGED SWORD OF CHANGE

My personal favourite old Chinese curse, "May you live in interesting times," feels particularly relevant these days. Our world is changing, with both exciting possibilities and daunting challenges emerging on every front. Change, after all, is a double-edged sword. And amidst this whirlwind of change, a new force is rapidly taking shape: Artificial Intelligence.

Crash, Bang, Wallop! What happens when Artificial Intelligence meets GDPR?

As a technologist, I am both excited and appalled at the developments in AI and it seems from various surveys that I am not alone. My greatest wish is that we can harness its power for good while dampening its power for misuse. It is early days yet – let’s hope this wish comes true!

Are you at risk from your suppliers mishandling data breaches?

I’ve seen a few suppliers make classic errors dealing with breaches in their client’s data. Here are the top three errors suppliers make and 5 suggestions to avoid them!

Ode to DPO’s managing GDPR risk

The General Data Protection Regulation is “risk” based legislation.  This means that the protective measures an organisation implements should correspond to the level of risk associated with their data processing activities.  It’s worth noting that the risk that should be considered here, is the risk to the data subject as opposed to risk to the business of non-compliance.

Get your head above the crowd and KPI your Data Protection Programme

Data Protection Programmes are all the rage these days. It’s great to see the compliance conversation moving in this direction. As a Data Protection Officer (DPO), I know the difference between working with a solid data protection programme and working with none and all.

Why should I worry about Supplier Due Diligence?

Supplier due diligence is one of those exercises we think we will get around to eventually. Here’s a real story that illustrates how a supplier can let you down.

Beyond GDPR Compliance – what’s next?

Santa’s getting certified – but its not what you think!

When is a DPIA not a DPIA?