Remove category
article thumbnail

What UK charities need to know about GDPR compliance

IT Governance

If you think that charities might be shown lenience under the GDPR (General Data Protection Regulation) , you’re wrong. This is a lesson that the transgender advocacy charity Mermaids learned recently , after it accidentally made internal emails containing confidential client information available online. GDPR exemptions for charities.

GDPR 56
article thumbnail

ISO 27001 and Physical Security

IT Governance

Physical access control, physical security monitoring, CCTV, and more When we hear the term ‘information security’ – or, for that matter, ‘ISO 27001’ – our thoughts usually turn straight to cyber security. However, physical security is also an important aspect of information and data security.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Article 29 Working Party Publishes Guidance on Consent Under the GDPR

Hunton Privacy

Recently, the EU’s Article 29 Working Party (the “Working Party”) adopted guidelines (the “Guidance”) on the meaning of consent under the EU General Data Protection Regulation (“GDPR”). The Guidance provides further detail on what is necessary to ensure that consent satisfies the requirements of the GDPR: Freely given.

GDPR 63
article thumbnail

The Impacts of Data Loss on Your Organization

Security Affairs

Examples : emails, social media posts, customer feedback, audio and video files, images, and documents. Semi-Structured Data: Semi-structured data lies between the structured and unstructured categories. It contains elements of both organized and unorganized data.

article thumbnail

How data breaches are affecting the retail industry

IT Governance

What steps will the ICO (Information Commissioner’s Office) take to ensure organisations comply with the recently enforced GDPR (General Data Protection Regulation)? The data included contact information, usernames and encrypted passwords. Will non-complying organisations be fined? million users was compromised. The PCI DSS.

Retail 66
article thumbnail

‘Camgirl’ sites expose millions of members and users

Security Affairs

The logs also included failed login attempts, storing usernames and passwords in plaintext, often email addresses, and of course, videos watched and rented by the users. Companies can be fined up to 4% of their annual turnover for GDPR violations.” The exposed data, in some cases, could match to real-world identities.

GDPR 48