Belated Happy Birthday GDPR!

[Ditto]

Apologies GDPR - we missed your birthday, but here is a belated

 

We're now one year in and I thought we could reflect on how the last year has gone. Here's some thoughts for starters.

 

 

• It's has led to change and there is a better awareness to protecting data.
  
• Some were frightened, others disengaged, but overall it's been less dramatic than many thought.
  
• It's the start of the journey only. It will take effort to continue to keep going forward. I'm not sure it will get the drive it needs.
  
• There is a lot of high level risk-based advice, but very little practical guidance for schools.
  
• The ICO have used their powers, even against individuals.
  

 

What are your reflections one year on?

[GrumbleDook]

Although, as a company, we marked ‘the one year on’, as an individual I’m tending to benchmark against where we are compared to when Becta releases their guidance over 10 years ago.

A lot of the advice out there still applies. It needs tweaks and some of the questions schools ask themselves need another shake, but that will come with time.

There is still lip service in some places, but it will improve.

[enjay]

What are your reflections one year on?

 

All the positives you list, especially the increased awareness, but on the other side:

* there has been a lot of misinformation and confusion

* companies have exploited the above (was it on here I read about someone replacing all their shredders with "GDPR-compliant shredders"?)

[DJ-1701]

Apologies GDPR - we missed your birthday, but here is a belated

 

We're now one year in and I thought we could reflect on how the last year has gone.

 

I hope you have permission from GDPR to put it's personal details in the public domain?

[Arthur]

GDPR fines total €56M in first year as Facebook faces 11 investigations

 

The stats are in for the first year of GDRP, Europe’s gold-standard data privacy law. GDPR fines totalled €56M, with more than 200,000 investigations, 64,000 of which were upheld.

 

However, the fines were dominated by a single case, with most ranging in the single-digit thousands …

 

As our sister site 9to5Google noted back in January, €50M of the €56M total was a single fine against Google. France’s National Data Protection Commission (CNIL) found that the company failed to comply with its obligation to be transparent about the data it was collecting and using to serve personalized ads.

 

Essential information, such as the data processing purposes, the data storage periods or the categories of personal data used for the ads personalization, are excessively disseminated across several documents, with buttons and links on which it is required to click to access complementary information

 

Legal database Lexology rounded-up the GDPR fines imposed in each European country, finding that relatively few fines have been imposed, and these were generally for small sums.

 

Google aside, examples ranged from countries like Slovakia and Sweden, who have yet to issue a single fine, to countries like Poland, Portugal, Spain, which have fined companies several hundred thousand Euros.

[enjay]

The headline "GDPR fines total €56M in first year as Facebook faces 11 investigations" somewhat distorts the fact €50M of the €56M was to Google, not Facebook!

[GrumbleDook]

The headline "GDPR fines total €56M in first year as Facebook faces 11 investigations" somewhat distorts the fact €50M of the €56M was to Google, not Facebook!

 

Since when has facts made any relevance to click bait articles?

[enjay]

Since when has facts made any relevance to click bait articles?

 

Good point well made, sir!

[Sonic007]

We are more careful with our data and policies now but teachers are still the biggest problem holding us back.

[GrumbleDook]

We are more careful with our data and policies now but teachers are still the biggest problem holding us back.

 

To paraphrase the late, great Roy Castle ....

 

"Education, Education, Education is what you need. If you want to be the best, if you want to beat the rest, education is what you need!"

 

I talked about the constant drip feed of reminders to staff at the conference last week. That single 30-60 min session they do once a year within Inset is not enough.

ICO do posters, we do posters ... there are lots of things that can help.

[Ditto]

Woah, that's taken me back and I'm now stuck with what I believe they now call an "earworm" - thanks!

All I can hear in my head is "Data Protection - that's what you need". For those who of want a bit of nostalgia - head to https://www.youtube.com/watch?v=K-gJV_kM33M. I'm not sure if it was deliberate, but it's got a bit of 'Convoy' sound to it.

Right, back to 21st century before the white coats come to get us!