GRG blog

Over the weekend the Guardian ran an article about NHS care organisations and their website cookie compliance: https://www.theguardian.com/society/2023/may/27/nhs-data-breach-trusts-shared-patient-details-with-facebook-meta-without-consent If your website is using anything like Facebook Pixel this: The Privacy and Electronic Communication Regulations (PECR) is the legislation covering this. The Information Commissioner is consistently happy to fine organisations for breaches under this – the

When someone does not want you to know what the policy is Secret Home Office policy to detain people with NHS debt at airport found unlawful (msn.com). It seems like there was a fundamental failure to understand FOI let alone the other legislation linked to Oversea Visitors and the right to stay – the debts

When it is the NHS and they are giving staff the chance to have the backdated award over 10 months so it doesn’t impact Universal Credit payments if you receive them. It does raise a number of questions and I am sure that NHS organisations will be getting FOI questions.

. .

Facebook has been fined £1b by the EU Meta: Facebook owner fined €1.2bn for mishandling data – BBC News. The question has to be asked – is it the purists that only care or do the actual users not see an issue, and unconsciously accept that by using a free service, there is a tradeoff

These days a lot of what you think might be data protection just comes down to poor line management of people. There is also the bit where the pandemic changed working expectations to the point that some people no longer know what boundaries exist when they are working. When that happens, the data protection side

It is nice to be surprised by what people do when they are working – or rather you cannot believe what they have chosen to do and where they have decided to do it.