Last week I received another email sales pitch to my DPO email address (e.g. dpo@somedomain.com). Ignoring for now any legal requirements, do they actually get any sales through DPO email addresses?

Surely better to filter this out at the selection stage!

Happy to share that I have started another new engagement this week providing programme management services to a leading Content Management System provider.

I am looking forward to steering the successful delivery of multiple workstreams and ensuring the required end stated benefits are achieved.

Within Project Management, Risks and Issues are standard items to understand and manage, but what is the difference?

Ask the simple question "Is it something that might happen or is it something that has happened". If it is happening, it is an issue. If it may happen in the future, it is a risk.

In a recent project a question was raised by the HR director on how to handle the personal data of unsuccessful candidates. They already had a recorded legal basis for processing personal data for employees, but this did not cover individuals who were not subsequently employed.

Transparency is key when looking to ensure you are not abusing personal data. Within #GDPR this is covered by the right to be informed. This requires you to tell the individual how their personal data will be used and what information is captured.

Good news from 2024, made me smile a little
informationisbeautiful.net/visualizatio...

An old bugbear resurfaced this week, with a negative #requirement. The ones, which start with "This solution will not". So, for this year I would like to see an end to negative requirements, or I may need to resort to adding "There will be no pink elephants in this solution”!

At Xmas, we think of family & friends, with hopefully a chance to meet up & chat. In business we also look to speak with customers & suppliers and it is important to consider #privacy and the #legalbasis for this festive reach out and do not become the Christmas Grinch, connecting with Who knows!

Data, data everywhere but not a bit of insight to be seen! A frustration felt by many businesses, where having data is not the issue, but knowing which piece of data can be trusted and more importantly the origin of the data (#dataprovenance) is the key for any data led initiative

With a new engagement comes new projects, with many stages in the delivery but how do you start the project?
For myself a #mindmap is key, which allows you to both summarise project detail and also identify gaps or areas of undefined deliverables.

How do you start a project?

For data privacy use a 3 line defence:
- 1st Line Operational (Ensure individuals who are handling, owning & processing personal data understand the data used and processes involved)
- 2nd Line Specialist (Management of data privacy, so think DPO)
- 3rd Line Audit (Check and recheck!)

With the new US presidency will the US Data Privacy law be impacted. Listening to the rhetoric, around illegal immigration, will this mean increased surveillance and how will this impact individuals' privacy rights?
Will the increased surveillance be countered by a central #privacy charter?

Last night I finished a book which I had dragged out over the last few days as I did not want to finish reading it. I have done this with films and occasionally with a good wine (taking smaller and smaller sips). Made me wonder have I ever done this with a piece of work? Am I alone in this?