If you’re reading this, you likely fall into 1 of 3 camps:
If 1., then good for you, I would do the same. If 2., then you’ve come to the wrong place unless you’re prepared to put in significant effort. If 3., then you’re right! 🙂
Continue reading “How to Make Lots of Money From GDPR”This is the final part in my GDPR Step-by-Step series, and one that, in my cynicism, I see very few organisations even trying to attempt. I have lost count of the number of companies with whom I have tried to implement a continuous compliance program, only to have them stop once they received their initial ‘certification’. In this respect, GDPR will be no different from something like PCI.
Continue reading “GDPR Compliance Step-by-Step: Part 6 – Operationalise”As a consultant there’s nothing I like more sitting around a table with a bunch of really smart people simplifying complex issues and guiding them towards an appropriate and effective security program.
Then someone has to go spoil the ride by saying; “That sounds great David, when can we expect the report?” [sob]
‘Documentation’ really should be a 4-letter word.
Continue reading “GDPR Compliance Step-by-Step: Part 5 – Documentation”Taking a week’s break from my Step-by-Step series in order to have one final rant [I promise] about the use of GDPR fines/penalties in marketing material. Hopefully this third attempt will sort the problem out once and for all, I DO have 400 followers after all.
In my business, I am advising everyone who will listen to not do business with ANY organisation using fear, uncertainty and doubt (FUD) as a tactic to sell. If they were offering decent services they would not have to resort to such unprofessional and unethical practices.
Continue reading “Do Not Hire Companies Using GDPR Fines as a Sales Tactic”If you are looking for a clear and legally accurate treatise on how to apply the 6 lawful bases for processing to your business, you have: