The 1998 Data Protection Act has had far-reaching implications for voluntary organizations which hold personal data on computer or on paper. The second edition of this practical guide has been revised and updated following the implementation of the Act to include more examples, model policies and statements, and decision-making flow charts, as well as authoritative answers to key questions, and a comprehensive index. It sets out clearly: what managers need to do in order to comply; who and what the Act applies to; when you need consent from the people whose data you hold; the rights of individuals as data subjects; the responsibilities of voluntary organizations; what managers need to do in order to stay within the law; and how to incorporate Data Protection into your policies and procedures.

The 1998 Data Protection Act provides a framework for the way in which organisations should collect and process personal information. It has far-reaching implications for library and information managers who hold personal data on computer or on paper, or who may be called on to advise their colleagues. This practical guide explains the legal requirements and illustrates the issues with dozens of relevant and informative case-studies.

An expert introduction More than 85% of businesses now take advantage of Cloud computing, but Cloud computing does not sit easily with the DPA. Data Protection and the Cloud addresses that issue, providing an expert introduction to the legal and practical data protection risks involved in using Cloud services. Data Protection and the Cloud highlights the risks an organisation’s use of the Cloud might generate, and offers the kind of remedial measures that might be taken to mitigate those risks. Topics covered include: Protecting the confidentiality, integrity and accessibility of personal dataData protection responsibilitiesThe data controller/data processor relationshipHow to choose Cloud providersCloud security – including two-factor authentication, data classification and segmentationThe increased vulnerability of data in transitThe problem of BYOD (bring your own device)Data transfer abroad, US Safe Harbor and EU legislationRelevant legislation, frameworks and guidance, including: the EU General Data Protection RegulationCloud computing standardsthe international information security standard, ISO 27001the UK Government’s Cyber Essentials scheme and security frameworkCESG’s Cloud security management principlesguidance from the Information Commissioner’s Office and the Open Web Application Security Project (OWASP) Mitigate the security risks Mitigating security risks requires a range of combined measures to be used to provide end-to-end security. Moving to the Cloud does not solve security problems, it just adds another element that must be addressed. Data Protection and the Cloud provides information on how to do so while meeting the DPA’s eight principles.

With a view to helping managers ask the right questions, Data Protection and the Cloud explains how you can effectively manage the risks associated with the Cloud and meet regulatory requirements.

This timely handbook details how all charities in Ireland can ensure that they are legally compliant with all aspects of charities law. This complex area is clearly and concisely explained by two leading experts in the charity law field. As well as fully outlining the legislation, including detailed coverage of the Charities Act 2009, this handbook considers the life cycle of a charity in Ireland: from its creation and registration to its governance and reporting obligations right through to its relations with other charities, at home or abroad, and the demise or dissolution of a charity. Examining the role of the charity trustee in both corporate and unincorporated charities, this book details the key relationships with relevant statutory agencies from the Charities Regulator through to Revenue and the Companies Registration Office. Setting out for the first time the practical issues facing charities operating in Ireland, this handbook is vital for any person concerned with the regulation of charities in this jurisdiction.

Provides commentary and analysis on the complex Law of Options affecting land. This book's coverage includes options to buy, options in wills, rights of pre-emption, transfer of options, options in leases, and remedies for breach of an option agreement

The EU's General Data Protection Regulation created the position of corporate Data Protection Officer (DPO), who is empowered to ensure the organization is compliant with all aspects of the new data protection regime. Organizations must now appoint and designate a DPO. The specific definitions and building blocks of the data protection regime are enhanced by the new General Data Protection Regulation and therefore the DPO will be very active in passing the message and requirements of the new data protection regime throughout the organization. This book explains the roles and responsiblies of the DPO, as well as highlights the potential cost of getting data protection wrong.

Data protection laws are new in Singapore, Malaysia, Philippines, Indonesia and Thailand. In Europe, the General Data Protection Regulation (GDPR) — a single law across all of EU – comes into force from May 2018. There are also strict laws in the US that govern the processing of personal data. Over a hundred countries in the world have a comprehensive data protection law and it is very easy for individuals and companies to breach these laws. Data or privacy breaches are on the rise and businesses can be prosecuted under data protection laws. Fines for non-compliance can be from S$1 million in Singapore, up to three years jail in Malaysia, and up to 4% of global revenues for EU countries. The focus on this book is operational compliance. The book is for everyone as all of us in the course of our daily work process personal data. Organised into sections, each idea provides practical advice and examples of how a breach of the law may happen. Examples cover HR, Finance, Admin, Marketing, etc, allowing the reader to relate to his or her own area of work

This practical hand book is designed to help small and slightly larger businesses look after their information and the information they hold on behalf of customers, clients and employees. It covers the Data Protection Act and other similar legislation, standards for data protection (BS10012) and information security (ISO27001) and is designed to help companies highlight their risks, weaknesses and threats.

For many small businesses, organisations, clubs, artists, faith groups, voluntary organisations/charities and sole traders, applying the General Data Protection Regulation (GDPR) has been like playing a game of "Snakes and Ladders". As soon as you move along the board and climb a ladder, a snake appears, which takes you right back to where you started. Conflicting advice abounds and there is nowhere for these individuals to go for simple answers all in one place. With the threat of fines seeming around every corner, now more than ever is the time for smaller organisations to get to grips with GDPR so that they can demonstrate their compliance. GDPR: A Game of Snakes and Ladders is an easy to read reference tool, which uses simple language in bite size easily signposted chapters. Adopting a no-nonsense approach, the Regulation is explained so that organisations can comply with the minimum of fuss and deliver this compliance in the shortest timeframe without the need to resort to expensive consultants or additional staff. The book is supported by a variety of easy to follow case studies, example documents and fact sheets. The author signposts warnings and important requirements (snakes) and hints and suggestions (ladders) and also provides a section on staff training and a Game of Snakes and Ladders training slide pack. Additional resources are available on the companion website. This user-friendly book, written by a Data Protection Officer and business management specialist will help you understand the Regulation, where it applies in your organisation and how to achieve compliance (and win at the compliance game).