Posts

Google Workspace for Education: Spain’s first GDPR fine against a school and what it demands of every school
Of interest to youSpain's first GDPR fine against a school over Google Workspace for Education: €20,000 for an insufficient legal basis, incomplete information and a deficient DPIA. What failed, how it was calculated and what to check at your school.

Loss of an Employee Document and GDPR Breach Notification
Of interest to youWhy losing an employee document may be a personal data breach and when employers must assess GDPR notification duties.

LinkedIn Contacts: Privacy, Fake Profiles and Business Risks
Of interest to youRisks of accepting LinkedIn contacts without checking them: fake profiles, phishing, social engineering and professional exposure.

How to Choose a Good Data Protection Service for Your Company
Of interest to youKey points for choosing a reliable data protection service: GDPR knowledge, processor agreements, clear deliverables and ongoing support.

How to Protect Against a Trojan: Measures for Businesses and Users
Of interest to youWhat a trojan is, how it infects devices and how to reduce the risk of data theft, fraud and personal data breaches.

Images of Minors in Schools: Consent, Websites and Social Media
Of interest to youWhen a school may publish photos or videos of students, how to manage consent, social media, families and image removal.

Employee Health Data: How to Process It Under the GDPR
Of interest to youHow to process employee health data: what the company may know, common mistakes, confidentiality, minimisation and AEPD guidance.

Data Protection Officer: When Appointing a DPO Is Mandatory
Of interest to youWhen appointing a Data Protection Officer is mandatory, DPO functions, common mistakes and official AEPD, EDPB and LOPDGDD sources.

Fine for adding someone to a WhatsApp group without consent
Of interest to youThe AEPD fined a sports club 4,000 euros for adding a former user to WhatsApp groups without consent. GDPR lessons for companies.

