Posts

GDPR - ICO gets 500 breach reports a week !

The transcript of the ICO Deputy Commissioner (Operations) James Dipple-Johnstone speech to the "CBI Cyber Security: Business Insight Conference" makes for interesting reading.   A short extract is below: " Busting myths Organisations are struggling with the concept of 72 hours as defined by the GDPR. Remember: it’s not 72 working hours, the clock starts ticking from the moment you become aware of the breach. Some reports are incomplete. Our guidance sets out very clearly what you should include when you report a breach. You might not have all that information to hand in the first 72 hours, we get that, but please plan ahead; have people with suitable seniority and clearance to talk to us and be ready to provide as much detail as you can and be able to tell us when we can expect the rest. It is not very helpful to be told there is a breach affecting lots of customers but the reporter isn’t authorised by the general counsel to tell us more than that! If you don’t

Understanding RARPA training course

Image
A new one-day workshop from Concrew Training that introduces delegates to the concept of RARPA within non accredited learning and demonstrates how to apply the principles and approaches effectively more information at: https://concrew-training.co.uk/courses/understanding-rarpa #rarpa #learning #fe #teachers #acl

Modern Slavery Awareness Training

Image
https://concrew-training.co.uk/courses/modern-slavery Image:  Sweatshop project (sweatshops across the world) by marissaorton used under  CC BY-SA 2.0 In their drive to eradicate modern slavery from their supply chains many businesses are now asking expecting all their suppliers to comply with the legislation and provide evidence of compliance and staff training. Concrew Training offer a range of training and and around Modern Slavery Our base course brings managers up to speed on the latest legislation and good practice and also provides time for delegates to consider how best to evidence their organisations compliance. Appreciating that many businesses will need to cascade this training to staff and suppliers we also offer a condensed half day version for direct delivery to staff and a variation of the one day course that assists managers and trainers in developing developing their own half day training session for subsequent delivery to staff and suppliers. Find

GDPR Training course updated

Concrew training is pleased to announce thats its one-day workshop on #DataProtection, GDPR and PECR has been updated to reflect the latest developments. We also have up to date one-day training courses on #PECR - Privacy and Electronic Communications Regulations #PIA - Data Protection Impact Assessments  Information Governance Training

5 Key Benefits of Employee Representation

Image
image: "how to run and effective meeting" by Nguyen Hung Vu  used under CC BY 2.0 The UK’s ICE regs (Information a nd consultation of Employees Regulations) give employees, subject to certain conditions, to request that their employer sets up, updates or changes arrangements to inform and consult them about issues within the organisation or business. Whilst appointing employee representatives and setting up an employee forum may appear onerous it actually offers significant benefit to the organisation, management and employees alike. IT CAN HELP IMPROVE: #Communication & Company Performance by ensuring clarity of understanding and removing uncertainly worry and rumour. #Decision Making and Management Performance because managers have better access to the views of those at the sharp end of the business, ie customer facing and operation employees that have to instigate and deliver organisational strategies. #Employee Performance and Commitment ; enga

Facebook fine - could it have been £479m ?

Image
According to today's press the #ICO are fining #Facebook £500,000 for breaching the data protection act.  This is the maximum fine allowed under the data protection legislation that was in place when the breach occurred.   Kyle Taylor, director of campaigning group Fair Vote UK is reported as saying  "Under  new GDPR laws,   the ICO could fine Facebook £479m"  The ICO has fined 54 organisations so far this year.  Looking at these fines in more detail many relate to failings in common business activities that may have been prevented with better staff training and awareness on the importance of privacy and data protection.  For example: inappropriate CCTV signage - £2000 multiple addresses in the email "to" field - £80000 data breach due to weak passwords - £100000 sensitive data left insecure - £35000 secondary web site left insecure - £120000  lost unencrypted DVDs that contained sensitive information - £325000 Inappropriate information relea

Slavery still present in the UK

Despite the Modern Slavery act being introduced  in 2015 many people struggle with the idea that slavery is present in the UK.   It is estimated that many tens of thousands of people are in modern slavery in the UK today.  Most #slaves are trafficked to the UK from overseas into forced labour in #agriculture, #construction, #hospitality, #catering, #manufacturing and car washes.  Additionally many women and girls are forced into the sex trade. It is also thought that there is also a significant number of British nationals in #slavery.  some of the possible signs of modern slavery could include people who: have their movements restricted or who always accompanied are collected or dropped off to work at very unusual times look injured and malnourished frequently show signs of bruising and/or injuries often appearing malnourished and ill. appear to lack important belongings such passports, ID and address information wear the same clothes every day especially if their c