GDPR (General Data Protection Regulation). More red tape!

[emanymton]

Am I living in a diffrent reality to everyone else?

I've heard nothing about this at work and have not had any of these resubscribe emails.

 

[kabbes]

Am I living in a diffrent reality to everyone else?

I've heard nothing about this at work and have not had any of these resubscribe emails.

That is really odd. This is like the #1 bogeyman in the corporate sector right now. Even clubs have had to create privacy policies and publicise them. I’m not sure how you’ve remained so thoroughly off-grid but fair play to you.

 

[emanymton]

That is really odd. This is like the #1 bogeyman in the corporate sector right now. Even clubs have had to create privacy policies and publicise them. I’m not sure how you’ve remained so thoroughly off-grid but fair play to you.

That's the thing, considering where I work I'm quite surprised we haven't heard anything. Unless the bit I work in is already considered compliant. But even so we normally have to do all sorts of shit that has nothing to do with us.

 

[kabbes]

That's the thing, considering where I work I'm quite surprised we haven't heard anything. Unless the bit I work in is already considered compliant. But even so we normally have to do all sorts of shit that has nothing to do with us.

At the very least, I’d have expected some bog-standard awareness training. What to do if you get a data request, making sure you don’t store personal data etc. Even if it’s just an online click-through thing.

 

[emanymton]

At the very least, I’d have expected some bog-standard awareness training. What to do if you get a data request, making sure you don’t store personal data etc. Even if it’s just an online click-through thing.

Yep I'd have thought so as well.

Oh well, It won't actually affect my job, its just odd to have heard nothing.

 

[alex_]

That's the thing, considering where I work I'm quite surprised we haven't heard anything. Unless the bit I work in is already considered compliant. But even so we normally have to do all sorts of shit that has nothing to do with us.

If they’ve got their shit together you’d definitely have heard about it - training everyone who handles data and talks to the public is table stakes.

Alex

 

[cheesethief]

I guess not, but any purge is a welcome one. I’ve always been apprehensive about using the unsubscribe option from companies i’ve never heard of, as I suspect some newsletters are fake and a tool to get you to confirm to spammers your email address is active. So I have a lot of unwanted shit coming in all the time.

Many of them are, it's the same with "reply to unsubscribe" text messages, there's a lot of phishing scams that rely on mass spamming to confirm live contact details. Sadly GDPR will do nothing to mitigate the bad guys - the clue's in the name - those who don't follow the rules aren't affected by them.

 

[krink]

I'm going to do a request to my youngest's school after the 25th. Is there a guide to this online or does anyone know how I do it? The info I want will be about him and me (he is 10 re consent). Cheers.

*I know I did the course but it was all very generalised. Plus I really can't remember.

 

[cheesethief]

I'm going to do a request to my youngest's school after the 25th. Is there a guide to this online or does anyone know how I do it? The info I want will be about him and me (he is 10 re consent). Cheers.

*I know I did the course but it was all very generalised. Plus I really can't remember.

You shouldn't assume that everything will suddenly be different after the 25th. That's when the EU ruling comes into affect, however the ICO is not going to be cracking down for quite a while. We've been told that as long as we can demonstrate how we're enforcing the ruling, that we're not just ignoring it, and that we've got a roadmap in place to full compliance, that will be acceptable for the near term. In other words, don't expect every organisation to have made provision for all the bells & whistles of the ruling from day one.

 

[Supine]

I wonder how many companies I can piss off by asking to be forgotten after they have supplied all info about me

 

[alex_]

You shouldn't assume that everything will suddenly be different after the 25th. That's when the EU ruling comes into affect, however the ICO is not going to be cracking down for quite a while. We've been told that as long as we can demonstrate how we're enforcing the ruling, that we're not just ignoring it, and that we've got a roadmap in place to full compliance, that will be acceptable for the near term. In other words, don't expect every organisation to have made provision for all the bells & whistles of the ruling from day one.

Not being able to fulfil a subject access request would be a pretty poor effort.

Alex

 

[cheesethief]

Not being able to fulfil a subject access request would be a pretty poor effort.

I'm sure you're right, what with all the money the government lavishes on our state schools, one would assume they'd have boundless capacity to implement every EU directive to its fullest in the timeliest fashion.

 

[alex_]

I'm sure you're right, what with all the money the government lavishes on our state schools, one would assume they'd have boundless capacity to implement every EU directive to its fullest in the timeliest fashion.

Subject access requests have been part of data protection law since 1998, the gdpr means you cannot charge for them.

Telling the ico you cannot do one = massive fail.

Alex

 

[bemused]

I have to say, this has worked wonders getting me off all those shitty mailings that won't let you unsubscribe. I also understand it requires websites to let you delete your accounts?

 

[moochedit]

I wonder how many companies I can piss off by asking to be forgotten after they have supplied all info about me

If i ask barclaycard to forget about me does that mean i can wipe all my debt to them and get out of paying them back?

 

[alex_]

If i ask barclaycard to forget about me does that mean i can wipe all my debt to them and get out of paying them back?

Nope - they’ll hold your data under a contractual obligation.

Erasure only applies to consent and something else called legitimate interests.

Alex

 

[moochedit]

I have to say, this has worked wonders getting me off all those shitty mailings that won't let you unsubscribe. I also understand it requires websites to let you delete your accounts?

Including urban? (cue a thousand requests to the mods to "forget" drunken 3am posts and the bunfights that followed)

 

[moochedit]

Nope - they’ll hold your data under a contractual obligation.

Erasure only applies to consent and something else called legitimate interests.

Alex

 

[mrs quoad]

Besides, GPDR can occasionally be a great way of spotting annoying idiots

Those as might wibble whingeingly on in pubs about red tape/bureacracy/blah-blah ....

@op

 

[Nivag]

Yup, I've destroyed your data
I was making sure old hard drives were safe to dispose of, I wasn't expecting it to shatter!!

 

[Supine]

Nottingham council are now on their third, rather desperate, email. I don't live there anymore so it'll be good to lose the spam.

 

[SheilaNaGig]

I’m being asked by captini to access my account (I’m not aware of any account) with my email address and a pin code to see my account preferences.

Aren’t they supposed to make this dead easy for me? I stupidly filled in a marketing questionnaire about a year ago and have since been bombarded with an idiotic spamtsunami of epic proportions. Captini being a marketing tool, I suspect that a lot of it is via them. I’d love to be off their list but if I click through it’s telling me I have to reapply for a forgotten pin code to be sent to my email address in order to access my account.

I’ve never knowingly signed up with this lot, and I don’t remember any pin code.

Should I ignore it or click through?

 

[MickiQ]

Most of the ones I have received are from online shopping, holiday parking etc andare along the lines of "under GDPR we can't keep bombarding you with unsolicited emails if you don't reply Yes"
I am steadfastly ignoring the lot.

 

[alex_]

I’m being asked by captini to access my account (I’m not aware of any account) with my email address and a pin code to see my account preferences.

Aren’t they supposed to make this dead easy for me? I stupidly filled in a marketing questionnaire about a year ago and have since been bombarded with an idiotic spamtsunami of epic proportions. Captini being a marketing tool, I suspect that a lot of it is via them. I’d love to be off their list but if I click through it’s telling me I have to reapply for a forgotten pin code to be sent to my email address in order to access my account.

I’ve never knowingly signed up with this lot, and I don’t remember any pin code.

Should I ignore it or click through?

If in doubt ignore it.

Alex

 

[existentialist]

I (and one of my comrades) have had some er interesting communicating from a senior Scientologist stating they have ‘documentation’ on me. Wonder if I can get a copy of it under GDPR (or national equivalent)

They'll almost certainly try to claim some religious exemption, and then go to unfeasible legal lengths to protect it....

 

[alex_]

They'll almost certainly try to claim some religious exemption, and then go to unfeasible legal lengths to protect it....

There aren’t any religious exemptions, and from the point they refuse you report them to the ico who will deal with it from there on.

( in this instance them refusing is about the perfect outcome )

Alex

 

[SheilaNaGig]

If in doubt ignore it.

Alex

Thanks. My understanding is that I have to actively opt in, that’s right isn’t it. So if I ignore it, they have to remove my details, yes?

 

[SheilaNaGig]

Should we expect an email from Urban asking us to opt in?

 

[alex_]

Thanks. My understanding is that I have to actively opt in, that’s right isn’t it. So if I ignore it, they have to remove my details, yes?

Yes, consent needs to be positive and they should be able to evidence that you did it.

Alex

 

[alex_]

Should we expect an email from Urban asking us to opt in?

I don’t think urban holds any personal data does it ?

Alex