GRG blog

No reason why organisations should not use it but they need to understand what it actually does Revealed: Metropolitan police shared sensitive data about crime victims with Facebook (msn.com).

ICO backs new data sharing schemes to protect gamblers from harm | ICO – really not sure that if you have an addiction that this type of check will work and may have adverse consequences in the long term if someone turns their life around.

Not if the answer you have to resolve requires you to find it in 2 days. The ICO has set up a service linked to finding answers to data sharing – pre-pandemic that timescale would have been ok. Post-pandemic expectations are higher with a need to work far faster.

That is mainly because organisations do not listen to the advice they have paid their staff to provide. With IG, we have to be at the top of our game because of the speed of change and the need for the public sector to save money. Organisations will not save money if they do not

In other words, the problems and issues they raise make sense to them but not maybe to anyone else. When that starts impacting the services they provide, those services go downhill fast.

That basically means that the data we use is accurate, and when it is not accurate, we can put it right. There seems to be a fire-and-forget approach by a lot of organisations that seem to be if something is entered on the system and it is wrong, then no one has the responsibility to

Not really based on this “They are failing their residents.” – ICO takes action against Croydon Council for failing to respond to Freedom of Information requests | ICO linked to Croydon Council and the fact that they actually got worse. It is a hidden cost burden for any public sector organisation (same with SAR’s) where

They should ask the teenager to come in for a chat about what happens next if they use the NHS for anything. We do not educate service users on how to take responsibility for their own health or what that means about how to access NHS services. GP’s will say they are not funded for

A really simple rule of thumb – if you keep call recordings expect a data subject to want to have a copy. If you don’t want them to have a copy – destroy the recording at the appropriate time. Of course, never destroy the recording when someone asked for it – that might force the

There had to be a lot of leeway on the ground for staff that physically had to be there all the time and the job could be done no other way. That meant we took a blind-eye to some things recognising that some rules would be a hindrance if they were strictly enforced. That was