The responsibilities that companies take on if they hold personal data have been significantly reinforced by the regulator over the last year. This, together with increased third party and cyber-risks, mean that companies need to think carefully about what data they really need to hold, for how long and who they share it with.
Data subject access requests (DSARs) are not new, but are gaining increased prominence and public interest as a result of the introduction in May 2018 of the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA).
Two’s company… and a risk: Third Party Risk Management Introduction 70 million. This was the number of customers of the retail…
Living without LIBOR: Managing the transition to risk free reference rates Introduction In the face of uncertainty we tend to do…
Anti-Money laundering in the Real Estate Industry: Can we learn from the financial services experience? Introduction Anti-Money Laundering and Counter-Terrorist…
A Control Engineer’s view of the Three Lines of Defence (Part 2) Introduction In the earlier note we looked at…