Personal data is the data which relates to a data subject. Personal data is within scope of EU and UK data protection law unless it has been completely anonymised. Obvious […]
Data Subjects are the primary focus of data protection law. A data subject is a living individual for which an organisation might process personal data. It is important to recognise […]
General System Access When a User is added to ProvePrivacy, by default they have no privileges and can access none of the available modules, in order to access a module […]
A data subjects access rights are key to data subjects gaining access to their data. This is a fundamental right of individuals under the Data Protection Act (2018). Whatever business […]
Broadly speaking a data processor has the same obligations as a data controller, however there are some nuances which should be noted. Processors must also: There are circumstances where the […]
Encryption is the process of encoding a message or information in such a way that only authorised parties can access it and those who are not authorised cannot. Authorisation is […]
Pseudonymisation can be defined as “personal data which is rendered less likely to lead to the identification of the data subject without the use of additional information” Therefore as long […]
Anonymised information is information which does not relate to an identified or identifiable person or to personal data rendered anonymous in such a way that the data subject is no […]
A high risk assessment is not a term specifically noted within the data protection regulation. It is a term used within ProvePrivacy to refer to a specific assessment of an activity to determine […]
A third country is a country which the EU does not deem ‘adequate’ in terms of its laws surrounding data protection. By nature of the fact that the list of […]
