A Practical Guide to GDPR for Property Professionals - 2nd Edition


Book Description

The General Data Protection Regulations (GDPR) have seen a big shake up in the management and handling of personal data across Europe. They have also been a beacon for other jurisdictions which are rolling out their own similar personal data protection rules. For businesses however, GDPR has been complex and often confusing. There have been conflicting views and guidance has often been delayed and confusing. For the property sector, GDPR has been particularly difficult, due to the movement of data between property owners, agents, legal professionals and tenants or purchasers for a range of different purposes. This confusion has only been enhanced by Brexit and the increasing divergence between the UK and the EU over data protection. This book aims to cut through the confusion by clearly explaining what the GDPR is, how it works, and how it applies to property transactions of all types coupled with a range of clear, accessible examples to illustrate the GDPR operating in practice. This second edition has been comprehensively updated to take into account the changes created by Brexit, the increasing volume of relevant case law, and the substantially updated guidance. It also expands on key areas and questions that arose from the first edition. ABOUT THE AUTHOR David Smith is a solicitor specialising in residential property, agency, and regulatory law. He is a partner at JMW Solicitors LLP in London. He is well known for his work in the residential property and agency field, especially in property licensing and consumer law and has advised local and national governments, large and small landlords and tenants and letting and estate agents across the sector. He has followed the GDPR since it was first announced and has provided training and advice on it to a wide range of property businesses. CONTENTS Chapter One - Introduction and Overview Chapter Two - Personal Data and Principles Chapter Three - Processing Chapter Four - Data Processors and Controllers Chapter Five - Data Subject Rights Chapter Six - Regulation Chapter Seven - Conclusion Glossary




A Practical Guide to GDPR for Property Professionals


Book Description

This book clearly explains what the GDPR is, how it works, and how it applies to property transactions of all types coupled with a range of clear, accessible examples to illustrate the GDPR operating in practice.




A Practical Guide to the General Data Protection Regulation (GDPR) - 2nd Edition


Book Description

The 2nd edition of this popular book provides both succinct analysis of all the key issues and a series of practical examples to help lawyers and non-lawyers alike comply with their obligations in a common sense and risk-focussed manner.




A Practical Guide to Data Protection (GDPR)


Book Description

A Practical Guide to the General Data Protection Regulation (GDPR) is written in an easy to understand and easy to reference format. Topics covered: 1. Principles relating to the processing of personal data. 2. Rights of the data subject. 3. Controller and processor obligations. 4. Transfers of personal data to third countries or international organisations. Compliance with data protection rules is not only a matter of risk mininisation. Compliance can: * Increase customer and employee confidence in the company. * Enhance brand image. * Help in the management of company information. * Act as a reminder to protect company data and company secrets. * Facilitate future products and services using such data - customer data is a key asset to the company. * Add to the value of the customer information and the value of the company.




The EU General Data Protection Regulation (GDPR)


Book Description

Six years have passed since the General Data Protection Regulation (GDPR) entered into force. With its numerous data protection obligations and the threat of high fines, companies had to change their approach to data protection. It has been an ongoing challenge for companies to keep up with the constant changes deriving from a plethora of new decisions by courts and supervisory authorities. The 2nd Edition of this book provides a practical overview of the requirements of the GDPR. Examples, tables, and checklists showcase the requirements of the GDPR, whilst also giving practical tips to tackle the regulatory challenges. The handbook examines the GDPR’s scope of application, the organisational and material requirements of the GDPR, the rights of data subjects, the role of the supervisory authorities, and enforcement and fines. The book has been completely revised for the second edition and takes extensive account of new data protection case law and regulatory guidelines.




A Practical Guide to Managing GDPR Subject Access Requests


Book Description

How should your company respond to requests from people who want to access their personal data? GDPR gives individuals the right to access and seek a copy of all of the personal data your company holds on them. This may include access to emails, call recordings, CCTV footage and any other record containing their personal data. A recent study showed that companies spend up to £1.58 million per year dealing with GDPR Data Subject Access Requests. The Information Commissioner's Office receives more complaints on Access Requests than any other issue. Access Requests are a legal minefield. If Access Requests are mishandled, they can leave companies open to fines, litigation and reputational damage. This book explains how to comply with Access Requests under GDPR including: Recognising Access Requests Understanding the rules and time limits Finding the data Redacting the data Understanding the exceptions to Access Requests Dealing with Access Requests from your own employees Drafting a company policy on Access Requests Training Staff on Access Requests This book aims to put your company on the right side of GDPR Access Requests. ABOUT THE AUTHOR Patrick O'Kane is an In-House Barrister and is Head of Privacy at a Fortune 500 Company where he helped lead a major GDPR project across a group of more than 100 companies. Previously, he led the Privacy Team at a large group of insurance companies in London. Patrick is the author of the book 'GDPR: Fix it Fast - How to Apply GDPR to your company in ten steps'. He has written on Privacy for numerous journals and magazines. Patrick is Certified in EU and US Privacy Regulation and was made a Fellow of Information Privacy by the International Association of Privacy Professionals in 2020. CONTENTS Chapter 1 - What is an Access Request? Chapter 2 - Which Categories of Data Can a Person Access? Chapter 3 - Access Requests: The Formalities Chapter 4 - The Search Chapter 5 - Third-Party Data Chapter 6 - Templates for Responding to Access Requests Chapter 7 - Training Staff on Access Requests Chapter 8 - Access Request Policies and Procedures Chapter 9 - Employee Access Requests Chapter 10 - Further Rights Under GDPR Chapter 11 - Exemptions Chapter 12 - Frequently Asked Questions




What You Need to Know About the GDPR


Book Description

Privacy leaders in the European Union have spent years preparing their organizations for the implementation of the General Data Protection Regulation (GDPR). Effective May 25, 2018, Canadian businesses must comply with the new regulations to do business with EU companies.Whether or not your organization is impacted by the new regulation, the GDPR has set the new gold-standard for data privacy-one worth understanding as the world of data protection continues to evolve and the consequences for non-compliance are heightened.This four-part webinar series (Nov 8, Nov 28, January 22 and March 26) will uncover the key questions and considerations for Canadian businesses as it relates to the impact and adaption of GDPR in Canada. These discussions will look beyond current GDPR standards to examine the future of privacy legislation and how organizations can equip themselves to adhere to a higher standard of data use and protection.




A Practical Guide to Managing GDPR Data Subject Access Requests - Second Edition


Book Description

Second Edition including updated case law and legal references. How should your company or law firm respond to requests from people who want to access their personal data? GDPR gives individuals the right to access and seek a copy of all of the personal data your company holds on them. This may include access to emails, call recordings, CCTV footage and any other record containing their personal data. A study showed that companies spend up to £1.58 million per year dealing with GDPR Data Subject Access Requests ('DSARs'/'Access Requests'). The Information Commissioner's Office receives more complaints on Access Requests than any other issue. Access Requests are a legal minefield. If Access Requests are mishandled, they can leave companies open to fines, litigation and reputational damage. This concise practical guide explains how to comply with Access Requests under GDPR. The book explains how to: Recognise Access Requests Understand the UK data protection framework post-Brexit Comply with the rules and time limits on Access Requests Find the personal data Redact the personal data Understand the exceptions to Access Requests Assess how legal professional privilege impacts Access Requests Deal with Access Requests from your own employees Draft a staff policy on Access Requests Train Staff on Access Requests Deal with other GDPR rights such as the 'Right to Erasure' Draft responses to employees and clients seeking access to their personal data This book aims to put your company on the right side of GDPR Data Subject Access Requests. ABOUT THE AUTHOR Patrick O'Kane is a in-house barrister with a large multinational organisation. Patrick is also the author of the books 'GDPR: Fix it Fast - How to Apply GDPR to Your Company in Ten Steps' and 'A Practical Guide to GDPR in Financial Services'. He has written on Privacy for numerous journals and magazines. CONTENTS Chapter 1 - What is an Access Request? Chapter 2 - Which Categories of Data Can a Person Access? Chapter 3 - Access Requests: The Formalities Chapter 4 - The Search Chapter 5 - Third Party Data Chapter 6 - Training Staff on Access Requests Chapter 7 - Employee Access Requests Chapter 8 - Further Rights Under GDPR Chapter 9 - Exemptions Chapter 10 - Frequently Asked Questions Appendix 1 - Templates for Responding to Access Requests Appendix 2 - Access Request Policies




A Practical Guide to the General Data Protection Regulation (Gdpr)


Book Description

Contains a succinct summary of the key changes being introduced by the GDPR and what needs to be done practically in response. Written in an accessible style with lots of useful resources. Suitable for lawyers and non-lawyers alike who seek to better understand this topic and to comply with their obligations in a common sense, risk focussed manner.




A Practical Guide to GDPR in Financial Services


Book Description

Financial services companies have faced some of the biggest GDPR fines. This book aims to put companies in this sector on the right side of GDPR. It has been estimated that 1.1 million people work in financial services jobs in the UK. Financial services companies hold vast quantities of personal data. And given the vast resource of many of these firms, they often have the means and the technology to process personal data in a myriad of ways including: using Artificial Intelligence to build customer profiles employee monitoring customer marketing carrying out Know Your Customer Checks transferring data around the globe There are numerous GDPR issues that companies in financial services must address. This book seeks to provide companies in this sector with practical solutions on GDPR.