Knowledgebase

Articles

Access Control and the Principle of Least Privilege Limiting who sees what.WHAT LEAST PRIVILEGE MEANSEach person has access to only what their role... Analytics and Privacy Measuring without over-collecting.WHAT ANALYTICS COLLECTPages viewed Device and browser details... Anonymisation and Pseudonymisation Reducing identifiability.WHAT ANONYMISATION ACHIEVESData that is no longer personal data, and... Appointing a Data Protection Officer Who is responsible internally.WHAT THE ROLE ISA person responsible for advising on and monitoring... Assessing Vendors and Suppliers Due diligence before sharing data.WHAT TO ESTABLISH BEFORE ENGAGING ANYONEWhat data they will... Assessing Whether You Need an Impact Assessment Deciding when formal assessment is required.WHAT TRIGGERS ONEProcessing likely to result in high... Automated Decisions and Profiling Systems that decide about people.WHAT PROFILING ISAutomated processing to evaluate aspects of a... Balancing Privacy and Legitimate Business Needs Making proportionate decisions.WHAT THE TENSION ISData is useful, and holding it carries... Biometric Data Fingerprints, faces and voices.WHAT MAKES IT DIFFERENTIt is unique, permanent and cannot be... Building Privacy Into Customer Trust The commercial case.WHAT CUSTOMERS INCREASINGLY ASKWhere their data goes Who can see it Whether... Building a Compliance Programme Moving from nothing to functioning.WHAT THE STAGES AREUnderstand what applies Know what you hold... Building a Data Inventory Knowing what you hold.WHY IT IS THE FOUNDATIONEvery other obligation depends on knowing what data... Closed-Circuit Recording and Physical Monitoring Cameras and premises.WHAT IT PROCESSESImages of identifiable people.WHY THAT MATTERSIt is... Common Data Protection Mistakes What goes wrong repeatedly.NOT KNOWING WHAT DATA YOU HOLDEvery other obligation becomes... Communicating a Breach to Affected Individuals The message that matters most.WHEN IT IS REQUIREDWhere the breach is likely to result in high... Conducting a Privacy Audit Checking whether practice matches policy.WHAT AN AUDIT ESTABLISHESWhether what you claim is what... Controllers and Processors Who is responsible for what.WHAT A CONTROLLER ISThe party deciding why and how personal data is... Cookies, Tracking and Consent Data collected through websites.WHAT COOKIES AND SIMILAR TECHNOLOGIES DOStore or read information... Cross-Border Data Transfers Sending data out of the country.WHY IT IS REGULATEDData sent elsewhere may not receive equivalent... Data Minimisation in Practice Collecting less.WHY IT IS THE MOST UNDERUSED PROTECTIONWhat you do not hold cannot be breached,... Data Processing Agreements Contracts with your processors.WHAT THEY AREWritten arrangements governing how a processor... Data Protection Impact Assessments Assessing risky processing in advance.WHAT IT ISA structured assessment of the privacy risks of a... Data Protection and Privacy Compliance: Everything That Matters, Briefly The whole category in one page.YOU CANNOT COMPLY WITH WHAT YOU DO NOT KNOW YOU HOLDThe data... Data Protection for Hosting Providers Obligations specific to this business.WHAT ROLE YOU USUALLY HOLDProcessor, for customer data on... Data Protection in Cloud Services Using infrastructure you do not own.WHAT ROLE THE PROVIDER USUALLY HOLDSProcessor.WHAT YOU... Data Protection in the Nigerian Business Context Practical local considerations.WHAT APPLIESThe national framework, with the Commission as... Data Retention and Deletion Schedules Not keeping things forever.WHY RETENTION MATTERSData kept beyond its purpose is risk without... Data Subject Rights What individuals can ask for.WHAT RIGHTS COMMONLY EXISTTo be informed Access to their data... Dealing With Data You Did Not Ask For Unsolicited personal data.HOW IT ARRIVESCustomers sending documents you did not request... Direct Marketing Consent Records Proving you were permitted to contact someone.WHY RECORDS MATTERComplaints are resolved by... Documenting Compliance Demonstrating rather than asserting.WHAT ACCOUNTABILITY REQUIRESBeing able to show what you do... Employee and Recruitment Data Personal data in the workplace.WHAT EMPLOYERS HOLDApplication materials Identity and... Explaining Data Protection to Customers Answering their questions.WHAT CUSTOMERS ASKWhere is my data stored Who can see it Do you sell it... Explaining Privacy Choices Inside Your Organisation Winning internal agreement.WHAT RESISTANCE SOUNDS LIKEIt will slow us down Nobody else does this... Getting Consent Properly When consent is the right basis.WHAT VALID CONSENT REQUIRESFreely given Specific to a purpose... Getting Started With Data Protection Compliance The first steps for an organisation with nothing in place.WHAT NOT TO DO FIRSTBuy a policy... Handling Backups and Archives Personal data you cannot easily edit.WHY THEY ARE DIFFICULTBackups are point-in-time copies, and... Handling Complaints From Individuals Before it reaches the regulator.WHY IT MATTERSMost regulatory contact begins with an unresolved... Handling Data Protection During an Incident Response Privacy obligations while investigating.WHAT HAPPENS DURING INVESTIGATIONLogs examined Data... Handling Data Protection for Membership and Community Organisations Associations, clubs and non-profits.WHAT THEY HOLDMember details Subscription and payment records... Handling Data Protection in Small Organisations Compliance without a department.WHAT MATTERS MOST WITH LIMITED CAPACITYKnowing what you hold... Handling Data When a Customer Leaves End of the relationship.WHAT OBLIGATIONS ARISEReturning or deleting data, per your agreement... Handling Data in Business Transfers Mergers, acquisitions and closures.WHAT HAPPENS TO PERSONAL DATAIt is an asset, and it transfers... Handling Deletion Requests Removing someone's data.WHAT TO ESTABLISH FIRSTWhether the right applies in this case.WHEN IT... Handling Government and Law Enforcement Requests When authorities ask for data.WHAT TO ESTABLISH FIRSTWhat is being requested, by whom, under what... Handling Identity Documents Copies of official identification.WHY THEY ARE COLLECTEDVerification for financial services... Handling Inaccurate Data Correction and rectification.WHAT THE OBLIGATION ISTo keep data accurate, and correct it when... Handling Personal Data in Logs The quietest exposure.WHAT LOGS ACCUMULATENetwork addresses Identifiers Request contents,... Handling Personal Data in Spreadsheets The ungoverned store.WHY THEY MATTERThey hold enormous amounts of personal data outside any... Handling Requests to Stop Processing Objection and restriction.WHAT OBJECTION MEANSAsking you to stop processing based on legitimate... Handling Rights Requests at Scale When volume grows.WHAT CHANGES WITH VOLUMEManual handling stops being feasible.WHAT TO BUILDA... Handling Sensitive Categories of Data Information needing extra care.WHAT IS TYPICALLY TREATED AS SENSITIVEHealth information Racial or... Handling an Access Request Responding when someone asks for their data.WHAT TO DO FIRSTLog it, with the date received.WHYThe... Insurance and Data Protection Risk Transferring some of the exposure.WHAT CYBER INSURANCE TYPICALLY COVERSCosts of responding to a... Keeping Up With Changing Requirements Staying current.WHAT CHANGESSubsidiary regulations and guidance Thresholds for registration... Lawful Bases for Processing Why you are allowed to use the data.WHAT A LAWFUL BASIS ISThe justification for processing, which... Location Data and Tracking Where people are.WHY IT IS SENSITIVE IN PRACTICELocation over time reveals home, work, health,... Maintaining Compliance Over Time Preventing drift.WHAT DRIFT LOOKS LIKENew systems nobody added to the inventory Fields added to... Managing Consent Across Systems Keeping preferences consistent.WHAT THE PROBLEM ISPreferences recorded in one system and not... Managing Data Protection Across Several Countries Serving more than one market.WHAT DIFFERS BETWEEN REGIMESWhether registration is required Whether... Managing Data Protection With Freelancers and Contractors People outside your organisation.WHAT THEY FREQUENTLY ACCESSCustomer databases Systems with... Managing Privacy Risk Alongside Security Risk Two related but distinct concerns.WHAT SECURITY RISK ISThe risk of unauthorised access, loss or... Marketing and Data Protection Contacting people lawfully.WHAT GOVERNS MARKETINGData protection law, plus rules specific to... Nigeria's Data Protection Framework The local regime.WHAT THE CURRENT PRIMARY LAW ISThe Nigeria Data Protection Act, enacted in... Personal Devices and Remote Work Data outside the office.WHAT THE EXPOSURE ISPersonal data on devices you do not control.WHERE IT... Preparing a Breach Response Plan Before you need it.WHAT IT SHOULD CONTAINHow a breach is reported internally Who assesses it Who... Preparing for Data Protection Certification or Audit External verification.WHY ORGANISATIONS PURSUE ITCustomer requirements Competitive... Privacy Considerations for Email Systems The largest uncontrolled store.WHY MAILBOXES ARE A PROBLEMThey accumulate personal data... Privacy Considerations in Product Analytics Understanding usage without over-collecting.WHAT PRODUCT ANALYTICS COLLECTWhich features are used... Privacy Notices for Different Audiences One organisation, several notices.WHY SEVERALDifferent groups need different information.WHAT... Privacy Questionnaires From Business Customers What larger buyers ask.WHAT THEY TYPICALLY COVERWhere data is stored and processed Sub-processors... Privacy and Third-Party Website Scripts What your site loads without you noticing.WHAT SCRIPTS TYPICALLY RUNAnalytics Advertising and... Privacy by Design Building protection in from the start.WHAT IT MEANSConsidering privacy when designing, not after... Privacy in Mobile Applications Data collected on devices.WHAT APPLICATIONS CAN ACCESSLocation Contacts Camera and microphone... Processing Children's Data Extra protection for minors.WHY IT IS TREATED DIFFERENTLYChildren are less able to understand... Registering With the Nigerian Regulator Whether you must, and how.WHAT THE REQUIREMENT BROADLY ISOrganisations meeting defined criteria... Responding to a Personal Data Breach When data is exposed or lost.WHAT COUNTS AS A BREACHUnauthorised access Accidental disclosure... Responding to a Regulator When the authority contacts you.WHAT TRIGGERS CONTACTA complaint from an individual A reported... Reviewing Contracts for Data Protection Terms What to look for before signing.WHAT TO CHECK IN ANY SUPPLIER CONTRACTWhether personal data is... Reviewing Your Privacy Notice Annually Keeping the public statement accurate.WHY IT MATTERSIt is a representation, and inaccuracy is... Sector Considerations: Education Student and pupil data.WHAT INSTITUTIONS HOLDIdentity and contact details Academic records... Sector Considerations: Financial Services Money and personal data.WHY IT IS DIFFERENTFinancial data enables fraud, and sector regulation... Sector Considerations: Health Data Additional care for medical information.WHY IT IS DIFFERENTHealth data is sensitive, and misuse... Security Measures for Personal Data What protection is expected.WHAT THE REQUIREMENT GENERALLY ISMeasures appropriate to the... Sharing Data With Other Organisations When data moves between controllers.WHEN IT HAPPENSReferrals to partners Joint marketing Group... Test Data and Development Environments A common and serious exposure.WHAT THE PROBLEM ISProduction data copied into environments with... The Core Principles What most regimes require.WHAT THE PRINCIPLES GENERALLY ARELawfulness, fairness and transparency... Training Staff on Data Protection Making it everyone's practice.WHY IT MATTERSMost breaches involve people, not technology.WHAT... Understanding Data Subject Rights Exemptions When rights do not apply in full.WHY EXEMPTIONS EXISTRights are balanced against other... Understanding Joint Controllers Shared decisions about data.WHAT MAKES PARTIES JOINT CONTROLLERSThey jointly determine the... Understanding Necessity and Proportionality The test behind most decisions.WHAT NECESSARY MEANSThe processing is required to achieve the... Understanding Regulatory Penalties What non-compliance can cost.WHAT REGULATORS CAN TYPICALLY DOInvestigate Require changes Order... Understanding the Accountability Principle Why documentation is an obligation.WHAT IT REQUIRESNot only complying, but being able to show... Using AI Systems With Personal Data Newer technology, existing obligations.WHAT DOES NOT CHANGEEvery data protection obligation... Website Forms and Data Collection The commonest collection point.WHAT EVERY FORM SHOULD HAVEOnly necessary fields A clear statement... What Personal Data Actually Is The starting definition.WHAT IT MEANSInformation relating to an identified or identifiable living... When Foreign Privacy Laws Apply to You Obligations beyond Nigeria.WHY A NIGERIAN BUSINESS MIGHT BE CAUGHTForeign regimes frequently... Where to Get Data Protection Help Sources and limits.WHAT THE REGULATOR PROVIDESGuidance Registration information Clarification of... Why Data Protection Law Exists The purpose behind the rules.WHAT THE UNDERLYING IDEA ISPeople should have some control over... Writing a Privacy Notice What you collect and why.WHY YOU NEED ONEIf your site collects any personal data, including...
Back

Are you happy with your experience? Leave us a review on Trustpilot.


Trustpilot