GDPR Now!

GDPR Now!

By Karen Heaton/Data Protection 4 BusinessBusinessNewsBusiness NewsManagement
Download on the App Store

GDPR Now! episodes

  • Episode 11: Cookie Consent Software Reviewed! Part 2: Cookiebot v. Cookie Control v. CookiePro

    Managing consent for cookies has become a key issue. In this two-parter, we look at what the regulators (and in particular the UK ICO) require in relation to cookies (Part 1) and then – in an industry first - review three industry leading consent management tools: Cookie Control, Cookiebot, and Cookie Pro (Part 2).

    GDPR Now! Is brought to you by This Is DPO.

    www.thisisdpo.co.uk.

    Guest

    Karen Heaton
    Director, Data Protection 4 Business
    www.dpo4business.co.uk

    Host

    Mark Sherwood-Edwards

    Corrections & Clarifications

    Cookie Control from Civic UK

    -Cookie Control supports an unlimited number of categories. The categories can be updated/added at any point.
    -Cookie Control allows the user to define the time period that the consent is valid for. Also Cookie Control can be configured to request user consent if there is a change in the privacy policy of the website.
    -All Cookie Control Licences have no page limits including the free one. The Pro version simply offers more features like unlimited subdomains geolocation, multilingual support, integration with IAB and branding.
    -All licence costs are annual.

    Materials

    If you would like copies of the completed questionnaires, please email your requests to:
    or

    The three cookie consent tools reviewed are:

    Cookiebot
    https://www.cookiebot.com/

    Cookie Control

    https://www.civicuk.com/cookie-control

    CookiePro

    https://www.cookiepro.com

    Questions

    Questions, suggestion for improvement, ideas for issues to be covered in future episodes, or if you would like to appear one of our podcasts, please contact us at [email protected]

    Special Guest: Karen Heaton.

    31 min
  • Episode 8: Third Party Cookies - ECJ lays down new rules in Fashion ID case

    In the Fashion ID case, the European Court of Justice decides that website owners are now joint controllers with the provider of the third-party cookie, and that website owners are responsible for issuing the privacy notices for third party cookies and for collecting any consents that are required. And, to make things a bit more complicated, the ECJ comes up with a new approach to analysing the data journey and who is the controller! All this and more in this episode of GDPR Now!

    GDPR Now! Is brought to you by This Is DPO.

    www.thisisdpo.co.uk.

    Host

    Mark Sherwood-Edwards

    Materials

    You can try ADL Consulting’s "Introduction to Cyber Security" module for free here:
    https://adlconsulting.teachable.com/p/an-introduction-to-cyber-security

    Fashion ID

    ECJ Judgement: http://curia.europa.eu/juris/document/document.jsf;jsessionid=CF6549B82743BAC9782DB7D41AD478DF?text=&docid=216555&pageIndex=0&doclang=en&mode=lst&dir=&occ=first&part=1&cid=14417748

    Advocate General’s Opinion:

    http://curia.europa.eu/juris/document/document.jsf?text=&docid=209357&pageIndex=0&doclang=en&mode=lst&dir=&occ=first&part=1&cid=14418147

    Related documents

    Update Report Into Adtech And Real Time Bidding, ICO. https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2019/06/blog-ico-adtech-update-report-published-following-industry-engagement/

    Guidance On The Use Of Cookies And Similar Technologies, ICO. https://ico.org.uk/for-organisations/guide-to-pecr/guidance-on-the-use-of-cookies-and-similar-technologies/

    Délibération N° 2019-093 Du 4 Juillet 2019 Portant Adoption De Lignes Directrices Relatives À L'application De L'article 82 De La Loi Du 6 Janvier 1978 Modifiée Aux Opérations De Lecture Et Écriture Dans Le Terminal D'un Utilisateur (Notamment Aux Cookies Et Autres Traceurs), CNIL. https://www.legifrance.gouv.fr/affichTexte.do?cidTexte=JORFTEXT000038778053&dateTexte=&categorieLien=id

    Opinion 5/2019 On The Interplay Between The Eprivacy Directive And The Gdpr, in particular regarding the competence, tasks and powers of data protection authorities, adopted on 12 March 2019, EDPB.

    https://edpb.europa.eu/sites/edpb/files/files/file1/201905_edpb_opinion_eprivacydir_gdpr_interplay_en_0.pdf

    Questions, suggestion for improvement, ideas for issues to be covered in future episodes, or if you would like to appear one of our podcasts, please contact us at [email protected]

    19 min
  • Episode 7: Cyber security - everything a DPO needs to know. Part 1.

    Cyber security for DPOs.

    Cyber security isn’t usually the primary responsibility of the DPO, but you can’t be an effective DPO if you don’t understand the security regime in your organisation and the trade-offs behind them. In this episode, we look at cyber security: what does it really consist of? how best to think about it? and what are the most common areas of vulnerability?

    GDPR Now! Is brought to you by This Is DPO.

    www.thisisdpo.co.uk.

    Guest/s

    Andy Larkum
    CEO of ADL Consulting
    https://adlconsulting.co.uk

    Host

    Mark Sherwood-Edwards

    Materials

    Breaking News!

    You can try ADL Consulting’s "Introduction to Cyber Security" module for free here:
    https://adlconsulting.teachable.com/p/an-introduction-to-cyber-security

    Cyber Essentials self-assessment questionnaire:

    https://adlconsulting.co.uk/getting-help-cyber-essentials - see heading "What's Involved"

    ISO 27001

    https://adlconsulting.co.uk/iso27001-consultancy

    Training:

    https://adlconsulting.co.uk/staff-training
    https://adlconsulting.teachable.com

    Questions, suggestion for improvement, ideas for issues to be covered in future episodes, or if you would like to appear one of our podcasts, please contact us at [email protected]

    Special Guest: Andy Larkum.

    1 hr 8 min
  • Episode 6: Cyber insurance - everything you need to know

    About this episode.

    Cyber insurance is key to managing data protection risks. In this episode, we take a look at how cyber insurance works, what risks it covers, and how best to buy it.

    GDPR Now! Is brought to you by This Is DPO.

    www.thisisdpo.co.uk.

    Guest/s

    Richard Spragg
    www.rfib.co.uk

    Host

    Mark Sherwood-Edwards

    Materials

    2018 Cost of a Data Breach Study: Global Overview
    Ponemon Institute
    www.ibm.com/security/data-breach

    On breach and planning for breach, see also:

    https://thisisdpo.co.uk/2019/02/04/preparing-to-deal-with-a-data-breach-the-role-of-the-dpo/

    Questions, suggestion for improvement, ideas for issues to be covered in future episodes, or if you would like to appear one of our podcasts, please contact us at [email protected]

    Special Guest: Richard Spragg.

    39 min
  • Episode 5: Cookies and the GDPR – ICO v CNIL

    GDPR Now! is brought to you by This is DPO, www,thisisdpo.co.uk.

    *Cookies and the GDPR– ICO v CNIL. *

    About this episode:

    Both the UK’s ICO and France’s CNIL have issued updated guidance on cookies. You would have thought that this is all old stuff, but the ICO’s paper comes hot on its Adtech paper where it stated that the UK industry does not understand the rules around cookies, nor the interrelationship between cookies and the GDPR. In this podcast, we take a look at the eprivacy directive and see to what extent it makes sense and can be reconciled with the GDPR. There are some surprises as it turns out that the CNIL has invented a new legal type of cookie. This podcast is essential listening for anyone who wants to use cookies, whether first party or third party.

    Host: Mark Sherwood-Edwards of This Is DPO.

    www.thisisdpo.co.uk
    Telephone: 07748 761972

    Material referred to:

    Here’s the important paragraph from the ICO’s Guidance on the use of cookies and similar technologies (bottom of page 46):

    The ICO cannot exclude the possibility of formal action in any area. However, it is unlikely that priority for any formal action would be given to uses of cookies where there is a low level of intrusiveness and low risk of harm to individuals. The ICO will consider whether you can demonstrate that you have done everything you can to clearly inform users about the cookies in question and to provide them with clear details of how to make choices. For example, the ICO is unlikely to prioritise first party cookies used for analytics purposes where these have a low privacy risk, or those that merely support the accessibility of sites and services, for regulatory action.

    Guidance on the use of cookies and similar technologies, ICO

    https://ico.org.uk/for-organisations/guide-to-pecr/guidance-on-the-use-of-cookies-and-similar-technologies/

    Délibération n° 2019-093 du 4 juillet 2019 portant adoption de lignes directrices relatives à l'application de l'article 82 de la loi du 6 janvier 1978 modifiée aux opérations de lecture et écriture dans le terminal d'un utilisateur (notamment aux cookies et autres traceurs), CNIL

    https://www.legifrance.gouv.fr/affichTexte.do?cidTexte=JORFTEXT000038778053&dateTexte=&categorieLien=id

    Opinion 5/2019 on the interplay between the ePrivacy Directive and the GDPR, in particular regarding the competence, tasks and powers of data protection authorities, adopted on 12 March 2019, EDPB.

    https://edpb.europa.eu/sites/edpb/files/files/file1/201905_edpb_opinion_eprivacydir_gdpr_interplay_en_0.pdf

    Contact details

    You can contact the show at [email protected].
    If you have questions, comments, suggestions for topics, or would like to appear on the show, please contact us on the email above.

    32 min
  • Episode 4: Disproportionate, intrusive and unfair – the ICO report on ad tech and real time bidding – Part 2.

    GDPR Now! brought to you by This is DPO. www. thisisdpo.co.uk

    Disproportionate, intrusive and unfair – the ICO report on ad tech and real time bidding – Part 2.

    This is part 2 of a two-parter.

    About this episode:

    In its recent paper, Update report into adtech and real time bidding, the ICO has set out a biting criticism of how real time bidding (RTB) currently operates in the UK. The phrase disproportionate, intrusive and unfair occurs three times, and intrusive on its own is used an additional three times. The paper is not intended as formal guidance, but it gives a clear sense of direction. The ICO also adds that the issues it raises in this paper are not the only concerns it has with programmatic advertising.
    Although the ICO has stated that it will take another six months to investigate further, it is already clear that the ICO will intervene. The ICO’s paper, and its forthcoming intervention, are likely to have a substantial impact in the programmatic industry in the EU and the US. It is no exaggeration to say that the ICO’s intervention is likely to have a bigger impact on this industry than the GDPR. To give some idea of scale: the worldwide spend of on digital advertising is expected to reach US$98bn in 2020. In Europe, the UK is by far the largest market, followed by Germany and then France (approx. US$15bn, US$8bn, US$4bn, respectively, in 2018).

    In this episode, three luminaries from digital advertising get together to discuss the ICO’s report and the possible ways forward.

    Guests:

    Andy Houston
    Product Director, Crimtan
    https://crimtan.com/

    Omar Oakes

    Global Technology Director, Campaign.
    https://www.campaignlive.co.uk/

    John Mitchison

    Director of Policy and Compliance
    Data & Marketing Association
    http://www.dma.org.uk

    Host: Mark Sherwood-Edwards of This Is DPO.

    www.thisisdpo.co.uk
    Telephone: 07748 761972

    Material referred to:

    Update report into adtech and real time bidding, ICO.
    https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2019/06/blog-ico-adtech-update-report-published-following-industry-engagement/

    Crimtan’s ActivID

    https://crimtan.com/activeid/

    Contact details

    You can contact the show at [email protected].
    If you have questions, comments, suggestions for topics, or would like to appear on the show, please contact us on the email above.

    Special Guests: Andy Houston, John Mitchison, and Omar Oakes.

    24 min
  • Episode 3: Disproportionate, intrusive and unfair – the ICO reports on ad tech and real time bidding (Part 1).

    GDPR Now! brought to you by This is DPO.

    Disproportionate, intrusive and unfair – the ICO report on ad tech and real time bidding (Part 1).

    This episode is Part 1 of two parts.

    About this episode:

    In its recent paper, Update report into adtech and real time bidding, the ICO has set out a biting criticism of how real time bidding (RTB) currently operates in the UK. The phrase disproportionate, intrusive and unfair occurs three times, and intrusive on its own is used an additional three times. The paper is not intended as formal guidance, but it gives a clear sense of direction. The ICO also adds that the issues it raises in this paper are not the only concerns it has with programmatic advertising.

    Although the ICO has stated that it will take another six months to investigate further, it is already clear that the ICO will intervene. The ICO’s paper, and its forthcoming intervention, are likely to have a substantial impact in the programmatic industry in the EU and the US. It is no exaggeration to say that the ICO’s intervention is likely to have a bigger impact on this industry than the GDPR. To give some idea of scale: the worldwide spend of on digital advertising is expected to reach US$98bn in 2020. In Europe, the UK is by far the largest market, followed by Germany and then France (approx. US$15bn, US$8bn, US$4bn, respectively, in 2018).

    In this episode, three luminaries from digital advertising get together to discuss the ICO’s report and the possible ways forward.

    Guests:

    Andy Houston

    Product Director, Crimtan
    https://crimtan.com/

    Omar Oakes

    Global Technology Director, Campaign.
    https://www.campaignlive.co.uk/

    John Mitchison

    Director of Policy and Compliance
    Data & Marketing Association
    http://www.dma.org.uk

    Host: Mark Sherwood-Edwards of This Is DPO.

    www.thisisdpo.co.uk
    Telephone: 07748 761972

    Material referred to:

    Update report into adtech and real time bidding, ICO.

    https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2019/06/blog-ico-adtech-update-report-published-following-industry-engagement/

    Crimtan’s ActivID

    https://crimtan.com/activeid/

    Contact details

    You can contact the show at [email protected].

    If you have questions, comments, suggestions for topics, or would like to appear on the show, please contact us on the email above.

    Special Guests: Andy Houston, John Mitchison, and Omar Oakes.

    45 min
  • Episode 2: Subject access requests, personal data and the case of Rudd v Bridle with Ashley Winton and Laura Scaife.

    GDPR Now! brought to you by This is DPO.

    Subject access requests, personal data and the case of Rudd v Bridle with Ashley Winton and Laura Scaife.

    About this episode:

    Dr Rudd served a subject access request on Mr Bridle, and was not satisfied with the information he received back. Amongst allegations of fraud and conspiracy, the issue went to court. Who was the controller, and did the journalism and regulatory exemptions apply? One of the key issues was – what is personal data? The judge reached a conclusion, but was he right?

    Guests:

    Ashley Winton, McDermott, Will & Emery
    London: +44 20 7577 6939
    https://www.mwe.com/people/winton-ashley/

    Dr. Laura Scaife, McDermott, Will & Emery

    London: +44 20 7577 6934
    https://www.mwe.com/people/dr-laura-scaife/
    http://www.privacypractice.co.uk/

    Host: Mark Sherwood-Edwards of This Is DPO.

    www.thisisdpo.co.uk
    Telephone: 07748 761972

    Material referred to:

    Rudd v Bridle https://www.bailii.org/ew/cases/EWHC/QB/2019/893.html.

    For a written analysis of the case: https://thisisdpo.co.uk/2019/07/12/durant-rides-again-subject-access-requests-and-personal-data-revisited-in-rudd-v-bridle/

    Contact details

    You can contact the show at [email protected].
    If you have questions, comments, suggestions for topics, or would like to appear on the show, please contact us on the email above.

    Special Guests: Ashley Winton and Laura Scaife.

    54 min
  • Episode 1: GDPR One Year On - with James Leaton Gray

    GDPR Now! brought to you by This is DPO.

    Episode 1 – GDPR One Year On.

    About this episode:

    One year on, what’s GDPR looking like inside most companies. Is an ongoing thing, or is privacy a one-off? What’s the most effective form of governance, and what’s the role of DPOs in that mix? Plus lots of related issues.

    Guest: James Leaton Gray, Director of The Privacy Practice.

    http://www.privacypractice.co.uk/
    Telephone: +44 7740 818036

    Host: Mark Sherwood-Edwards of This Is DPO.

    www.thisisdpo.co.uk
    Telephone: +44 7748 761972

    Material referred to:

    Tim Berners Lee’s company

    www.inrupt.com
    https://www.wired.co.uk/article/inrupt-tim-berners-lee

    The Furman report

    The Economic Value of Data: Discussion Paper, HM Treasury, August 2018, and Unlocking Digital Competition: Report of the Digital Competition Expert Panel March 2019.
    https://www.gov.uk/government/publications/unlocking-digital-competition-report-of-the-digital-competition-expert-panel

    Contact details

    You can contact the show at [email protected].
    If you have questions, comments, suggestions for topics, or would like to appear on the show, please contact us on the email above.

    45 min

About GDPR Now!

From the publisher's feed

GDPR Now! is brought to you by Data Protection 4 Business and focuses on Data Protection regulations and all issues related to data security and privacy. Our goal is to discuss important topics which help businesses comply with data protection regulations while protecting their business interests in a practical and pragmatic way.