ICO releases guidance for mandatory collection of track and trace data

Following the UK Government’s tightening of track and trace measures last week, it is now mandatory for various organisations, including public authorities, to collect contact information for those visiting their establishments such as hotels, cafes, community centres or local libraries. These records can be called upon by contact tracing schemes such as the NHS Track…

Continue reading

What to do when things go wrong with your ERP implementation

Dos Know your contract! Firstly, familiarise yourself with your contract. The provisions have been carefully drafted and are there to be used. There is no substitute for reading the contract and no need to shy away from the contract for fear of ‘going contractual’: the contract provides the parties with a structure under which you can address…

Continue reading

Data protection considerations in Cloud-based ERP systems

In Part 5 of our six-part series on cloud-based ERP Projects, our specialist team of lawyers look at the key data protection considerations for a cloud-based ERP system. The procurement of Enterprise Resource Planning (ERP) systems is often a high priority and intensive task given the nature of the system and its strategic importance to…

Continue reading

Covid-19 and a new ICO enforcement approach?

EasyJet announced yesterday a recent cyber attack on its systems which enabled hackers to access the emails and travel information of around 9 million customers, including credit card details in some 2,200 cases.  The ICO is currently investigating the breach and it remains to be seen whether any enforcement action will be taken. The incident…

Continue reading

Personal Data Processing Schedules – Take It Personally

Introduction When we think of key dates in our lives, we think of our birthday, special anniversaries, and, of course, for the data protection specialists among us, the day the GDPR came into force. Although 25th May 2018 may now seem like a distant memory, continued consideration as to how to properly complete data protection…

Continue reading