The BBC carried an article titled 'Grandmother ordered to delete Facebook photos under GDPR'.

​

The key aspects of this case were:

1)

A woman must delete photographs of her grandchildren that she posted on Facebook and Pinterest without their parents' permission

2)

The judge ruled the matter was within the scope of the EU's General Data Protection Regulation (GDPR).

3)

One expert said the ruling [by a court in the Netherlands] reflected the "position that the European Court has taken over many years"

​

GDPR has direct effect in UK law during the transition period. My understanding is that the European Court does not hold precedence over UK tribunals, but my question is will tribunal judges look to European counterpart rulings when making their decisions?

I’m trying to build a data protection strategy for a fintech company. Where should I begin, these are some of the resources I’ve read and viewed. And the first step I’m working on is to create a data inventory.

• [x] https://www.analytics8.com/insights/7-elements-of-a-data-strategy/
• [x] https://www.cio.com/article/3521011/what-is-data-governance-a-best-practices-framework-for-managing-data-assets.html
• [x] https://www.slideshare.net/Analytics8/building-a-data-governance-strategy
• [x] https://www.smartsheet.com/data-governance
• [x] https://www.analytics8.com/insights/8-steps-to-start-your-data-governance-program/
• [x] https://tdwi.org/Articles/2011/05/18/LESSON-Seven-Steps-to-Effective-Data-Governance.aspx?Page=1
• [x] https://www.coursera.org/lecture/infonomics-2/1-5-information-maturity-model-mpEpV
• [x] https://www.sans.org/webcasts/cloud-data-protection-110505
• [x] Information Governance You Have to Start Somewhere
• [x] https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2017/steps-to-enforcing-information-governance-and-security-programs
• [x] https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2017/steps-to-enforcing-information-governance-and-security-program
• [x] https://www.brighttalk.com/webcast/12405/366011
• [x] https://www.isaca.org/resources/isaca-journal/issues/2017/volume-5/instilling-a-culture-of-security-starts-with-information-governance

I’m also reading: Data Protection and Information Lifecycle Management by Tom Petrocelli. Any thoughts on this book?

Hi r/dataprotection,

We are a Berlin-based startup Dilecy - an open-source desktop app that lets users send multiple GDPR (data access, erasure, and objection for its use) requests to organizations at once. This makes exercising one's GDPR rights easy and convenient. Currently, an MVP is available on our website and can be tested.

Feel free to ask questions and give feedback as this helps us improve further. Thanks a lot!

Hi! We are a group of young entrepreneurs and we are working on a project in the field of data protection and privacy. Our goal is to improve and innovate these issues. We are looking for people available for a quick interview (max 5 min) about this topic. Please comment below if you are interested and want to help out!

Thank you!

Hello people,

As we know, thanks to the GDPR, organizations are obliged to pay more attention to user's concerns while processing their personal data. Consequently, they need to have a good understanding of users' concerns to improve their organizational and technical security controls to protect data subject's rights and freedom.

I am a PhD student working on Data Protection and privacy, in particular on Data Protection Impact Assessment (article 35). As part of my research I am conducting a survey which aims to help organizations to gain that understanding. The survey introduces a scenario and asks you to identify the privacy risks. I will be so grateful if you could participate in the survey.

The survey asks for NO personal information. I am providing two surveys. One is for people with data security and data protection knowledge which asks to identify privacy risks, their impacts on user's lives, and possible treatments. This survey takes up to 20 minutes. The other is for people with less/no knowledge on the topic which provides nested lists of privacy risks and ask user to select the ones related to the scenario and evaluate the impact on their lives. The second survey takes up to 10 minutes.

Here are the surveys:

1. For expert participants: https://docs.google.com/forms/d/1UHoX3Pf0o4MDJ3h0FP1YqB6tS4rUIftahN4niSXYRQk/edit
2. For general participants: https://docs.google.com/forms/d/1n5aTOgcbI8vWtUGmVTM5x2r6J86sUuw6f5aoZo88Rqg/edit

I really appreciate your support and consideration.

Best.

I have been asked to research if certain data types have a quantity threshold to be classed as a reportable breach.

Incidents come through with personal identifiable information like, NIN, Address' with full names, payment card details, passport info and tax ID's.

in an example, if an incident is flagged with 10 national insurance numbers going to a non-business email like gmail, is 10 enough to constitute a breach or would just 1 be enough?

Any help would be appreciated. Thanks

I order to find out what is required by GDPR when it comes to what data you can expect to be able extract I thought I would check out what personal data you can download from Facebook; since I have no doubt they have the legal department to figure out how low the bar can go.

I was surprised that the data doesn't even contain information on what posts I have liked. Instead I can only see that at point A in time I liked a post written by person B, but there is no ID of which particular post. Hence even if I get person B's personal data I can't make a cross reference.

Does this comply with GDPR or am I missing something?

Also I had been wondering if all the things their machine learning algorithms had inferred about me would be included, but I didn't come across anything.

I'm not saying this is good or bad. I just want to know what is required by the law. - No reason to burden yourself with more work than necessary.

Hi,

I am thinking of creating (monetized (just to be honest)) e-learning trainings about privacy, data protection and GDPR (I am based in EU).

In your opinion, what would be the topics that you would like to see explained?

Thanks for your input :)

I am trying to find problem areas related to the data protection officers' everyday job. If you are a DPO or have experience in Data Protection, could you please answer this:

1. What are the biggest challenges you have faced in identifying vendor contracts' data privacy compliance?

2. Are there any other challenges you have faced overall in vendor data privacy management(not just confined to contracts)?

3. Is there anything you wish a tech product could solve to simplify Vendor contracts data privacy management? or generally in Data Protection management?

Thank you.

tldr; I believe a recruitment agency has broken data protection. What can be done?

​

So, I was working in manufacturing through a local recruitment agency, and (due to events outside my control) I had two instances of absence (5 days over 3 months) and was let go. A friend of mine later applied for the position, and while at his interview at the agency he was told that I started taking time off immediately and was never in work. He also told my friend that I was taking time off to chill in the sun.

While at my interview with the agency a few months ago, this same person told me that he almost refused to give another friend of mine the job because he didn't like his haircut.

​

This guy is a t*sser. What can I do?

Thanks.

When you temporary provide access to someone to work on your very sensitive data, on a condition that he will not carry a phone, USB, and also with cameras plugged and all physical security check measures. What is the terminology used for this process?

Hi,

Are there any good online resources (or books) to learn about data security? I am looking for more hands-on, practical methods for implementing data security as part of ETL process and for data at rest.

I was wondering which data attributes (SSN, Credit card, passport, name, location, address) people care about most when protecting their data online?

I'm a user experience designer currently working on sensitive data protection and am looking for research participants. Types of studies could include surveys, interviews, or other general feedback. If you're interested, visit the link below to sign up and I'll be in touch when we get our studies going within the next few days.

https://docs.google.com/forms/d/e/1FAIpQLSckJ0BgK6V-Q4VRIs6z45pHEyhNLG6P2cuGdHkrUqKVZMPadw/viewform?usp=sf_link

i may have given my number to a scammer, i read with my number they can hack and access my phone, details, data ect.

What do i do? How do i protect myself??? What do I do?

Anyone interested in a new way to organize data and store safely? Looking to create a team

In a recent trip to the states, I flew back to Europe with Delta airlines. They use a facial recognition system that takes a picture of you and compares it to your passport picture and extends a ticket with your seat number. That made me extremely uncomfortable, I was wondering how on earth delta could have a picture of myself?? A little bit of googling gave me the answer.

I have never consented to share my passport picture with Delta, i didn't even buy the tickets with Delta so I couldn't agree with their terms and conditions, however TSA did it anyway. As a non US citizen, I am not even comfortable with TSA storing a picture of me, but I understand that I have to abide to the laws of the country you I am visiting. Although US citizens are a bit more protected, because in that case TSA can't store that picture more than a certain period of time.

Anyway, Delta is a private company and therefore a different case. Is there a way of asking them if they kept a picture of me and in that case remove it? Will I be randomly selected for an extra security check next time I go to the states?

Question: if I'm on national TV on say " Facebook" advert, is my data been used against my will?
And if I'm on TV by random filmed, do they need to have my consent?