Step 3 – Subject Access Rights “What you looking at?” Will subject access rights become the Vogue under the GDPR? What changes will there be to the current regime? Based on what we know for now, the GDPR subject access request (“SAR”) process will be similar to that under the current regime. The key changes […]
Step 2 – Data Mapping Follow the yellow brick road Why data map Data mapping should be a key element in any organisation’s compliance strategy, including any pre-employment screening policy. The prospective employer (data controller) can face questions from its candidate base about where their personal data is being sent and how it is used. […]
Most folk working for entities affected by the General Data Protection Regulation (GDPR) probably feel that they need a couple of aspirin right about now. May 2018 is fast approaching, and there still seems to be a mountain to climb to get compliant. Over the next 12 months, HireRight will continue to be reviewing its […]
It has taken two years but on 12 July 2016 the EU Commission finally adopted the adequacy decision on the Privacy Shield, and from 1 August 2016 entities will be able to certify with the US Department of Commerce. From a strategic perspective US companies (or EU companies doing business in the US) will be […]
Data privacy lawyers received the ultimate Christmas present in 2015, the emergence of the GDPR from the trilogue negotiations. With the start of a new year it is a good time to look at what the key features of the GDPR will be. However, before we start we need to take a moment to reflect […]
