Time to Look at the Role of the CISO Differently
What is now required is political acumen, managerial experience, and personal gravitas, more than raw technology skills. In spite of being widely used, the role…
The end of the EU-US Privacy Shield scheme – One aspect of a larger problem with ‘sensitive data’ transfer between the UK and the EU
The Court of Justice of the European Union (CJEU) has just rendered the EU-USA Privacy Shield invalid. This is what allows EU members to move data to …
First 8 months of GDPR: 59,000 breaches notified and only 91 fines
Over time, unenforced regulations simply get ignored and become useless. It is likely that things won’t change until the regulators make them change…
GDPR: Where are we now? And what happens next?
Quite a lot will now go down to the regulator’s appetite. If they are inconsistent, too heavy-handed or too lenient, focus only on the GAFA, or pick…
Welcome to the new GDPR world – and why consuming data in a more formalised way will be good for customers and business
I am sure that like mine your inbox has probably been filling up for the past 48 hours with last minute notices from companies and…
GDPR and the DPO: Threats or levers for the CISO?
The GDPR is not just about Security, but it has been dominating the life of many CISOs since last year. What does that mean in practice for the CISO? …
More on non-European companies and GDPR It’s more than the letter of the regulation
GDPR is very emphatically about managing privacy with the interests of the data subjects at heart. It is not about encouraging lazy people to sign awa…
American companies and GDPR – Can one take “GDPR compliance” at face value?
The bottom line, I think, is that (regardless of GDPR and its jurisdiction) a mutable company can’t afford to have a breakdown of trust with its cus…
GDPR & Your Cloud Supply Chain
GDPR is overlay talked about, most of the discussion being around internalised processes and actions. An important part of reducing GDPR threats is to…
Puzzling the GDPR Challenge with personally identifiable information
May 2018 sees the enforcement of GDPR. How you ensure that you're compliant is potentially messy depending on your role and intent. Data that you thin…
Is open banking doomed from the start?
The financial world is currently in the throes of implementing two landmark regulations aimed at making the banking sector more customer-centric, secure, competitive and innovative.…
Append-only databases and the GDPR conundrum
The GDPR (General Data Protection Regulation) requires that customers and other individuals for whom you hold private data, have the right of erasure. That is,…
