Bad Privacy Notice Bingo!
In which I create and snark about a bingo card of my pet privacy policy peeves.
Privacy Puffin Blog
Tea, sex and data
On what ‘consent’ means in the context of data protection compared to sexual interaction
Nothing to see here…
Why post-breach corporate PR-speak should be carefully parsed with great scepticism
I’m a muse|amused
I’m flattered to have inspired this satirical video guide by the great Javvad Malik, although I’m a bit worried that people might take it seriously….
Consent or not consent?
A decision tree for working out when consent is the right lawful basis for processing
Verelox, insider threat and GDPR implications
An incident isn’t necessarily a breach, a breach isn’t necessarily an avoidance breach, and it’s not always a notifiable one either. The post is less confusing than this excerpt, I promise.
What the GDPR does – and doesn’t – say about consent
A briefing on consent, the most misunderstood and misused part of the GDPR. What the law really says.
GDPRubbish
Some GDPR myths keep coming back like zombies. Here are some of the worst
Just Culture 2: Risky Behaviour
Risky behaviour: what not to punish in a Just Culture
‘Just Culture’: an introduction
How a ‘Just Culture’ is essential for effective risk management