Regardless of the size of a company, allocation of resources is of the utmost importance. Early-stage startups may not realize the possible consequences of not having a privacy program. This may be because management believes its resources are better allocated elsewhere. It took time, numerous conversations, and education for Irene Koulouris, CIPP/US, to get her team to understand why privacy was so important to the economic success of the company. In an article for The Privacy Advisor, Koulouri... Read More

The U.K. Information Commissioner’s Office issued a six-step guide for small businesses that receive data protection complaints. The steps are to acknowledge receipt of the complaint, find out the specific issue related to the complaint, provide updates to the data subject, record actions taken in response to complaint, formally respond to the individual with the outcome of the investigation, and review lessons observed.  Full Story... Read More

A report by Stericycle’s information security service Shred-it found 63% of high-ranking executives and 67% of small U.S. businesses do not have an incident response plan, while 75% of large U.S. businesses have experienced a data breach, Venture Beat reports. Also, one in four North American businesses expressed concerns a data breach is likely in the next 12 months. For consumers, nearly 70% of those surveyed were impacted by a data breach in 2021.Full Story... Read More

Ryan McErlane knows the challenges small- and medium-sized enterprises face on a daily basis, as he is the co-founder of one himself. McErlane heads up Dataships, a privacy technology vendor based out of Ireland that has created a solution specifically geared toward SMEs. While privacy tech vendors have focused on large, multinational organizations, McErlane said SMEs have not received the same level of attention. Now that those companies are starting to catch the eye of regulators, McErlane be... Read More