Cargando…

Data Protection and Compliance Second edition.

This comprehensive guide for those with little or no legal knowledge provides detailed analysis of current data protection laws. It enables the reader to operationalise a truly risk-based approach to data protection and compliance, beyond just emphasis on regulatory frameworks and legalistic complia...

Descripción completa

Detalles Bibliográficos
Clasificación:Libro Electrónico
Autor principal: Room, Stewart
Otros Autores: Maher, O'Brien, Niall, Panagiotopoulos, Adam, Nahid, Shervin, Hall, Richard, Thuraisingam, Tughan, Drury-Smith, James, Davis, Simon
Formato: Electrónico eBook
Idioma:Inglés
Publicado: Swindon : BCS Learning & Development Limited, 2021.
Edición:2nd ed.
Temas:
Acceso en línea:Texto completo
Tabla de Contenidos:
  • Front Cover
  • Half-Title Page
  • BCS, THE CHARTERED INSTITUTE FOR IT
  • Title Page
  • Copyright Page
  • Contents
  • List of figures and tables
  • Contributors
  • Copyright notices
  • Abbreviations
  • Preface
  • PART I THE BIG PICTURE
  • 1. INTRODUCTION TO DATA PROTECTION
  • What is data protection?
  • Does data protection mean privacy?
  • What is privacy?
  • Are there exceptions to the right to privacy?
  • What else should be protected?
  • Protecting fundamental rights and freedoms ('human rights')
  • Protecting the free movement of personal data (data flows, transfers and shares)
  • The protected activities
  • Protecting processing
  • Protecting personal data undergoing processing
  • Special category data (or 'sensitive personal data')
  • Thematic priorities of data protection, trends and hot topics
  • supporting a risk-based approach
  • AdTech and cookies
  • Advanced technology and data processing techniques
  • Advanced surveillance
  • Artificial intelligence
  • Automated facial recognition
  • Connected vehicles
  • Children
  • Cybersecurity
  • Data subject rights
  • timetable breaches
  • Democracy
  • HR problems
  • International transfers
  • Privacy and electronic communications ('ePrivacy')
  • Profiling
  • Virtual voice assistants
  • Core law
  • The UK Data Protection Act and its relationship to the GDPR and other EU law
  • The Data Protection Convention
  • Regulatory guidance and decisions
  • Court judgments
  • Related law
  • Data protection penalties and litigation
  • The regulatory bear market
  • Summary
  • 2. INTRODUCTION TO THE GDPR
  • Brexit: the impacts for data protection and the impacts for this book
  • The land mass in Europe to which the GDPR applies
  • Recitals and articles of the GDPR
  • Jurisdiction of the GDPR
  • Nationality and location of people
  • A.3.1
  • processing in the context of EU establishments
  • A.3.2
  • targeting people in the EU
  • Material scope of the GDPR
  • The building blocks of the GDPR
  • The actors
  • Compliance framework
  • the standards of protection
  • Data protection principles
  • Lawful bases of processing
  • Necessity
  • Consent for processing
  • Compliance framework
  • controls
  • Appropriate technical and organisational measures
  • Appropriate safeguards
  • Prescribed controls
  • Anonymisation and pseudonymisation
  • Accountability
  • Assessing appropriateness of controls
  • Critical outcomes to be achieved
  • Transparency
  • Clarity of the lawful basis of processing
  • Control
  • Compensatory mechanisms to remedy non-compliance
  • Regulator's enforcement powers
  • Data subjects' enforcement powers
  • Where the GDPR does not apply
  • exceptions and restrictions
  • Domestic processing
  • Restrictions and the UK DPA
  • Brexit
  • the UK, Frozen and EU GDPR
  • UK GDPR
  • Frozen GDPR
  • Brexit
  • international transfers of data
  • Summary
  • 3. INTRODUCTION TO EPRIVACY
  • Regulating the electronic communications sector
  • The relationship between data protection and ePrivacy