Verifying Identity Before Fulfilling a GDPR Request
|

Verifying Identity Before Fulfilling a GDPR Request

You can ask for ID before fulfilling GDPR requests — but only when necessary. Here’s how to verify identity without breaching privacy. The UK GDPR allows companies to request ID if they have reasonable doubts about the identity of the requester. But be careful — asking for too much ID or failing to protect it…

When Is a Data Protection Impact Assessment (DPIA) Required?
|

When Is a Data Protection Impact Assessment (DPIA) Required?

Not sure when you need to carry out a DPIA? Here’s how professional services firms can stay compliant and reduce risk. Data Protection Impact Assessments (DPIAs) are a legal requirement under the UK GDPR when processing is likely to result in a high risk to individuals’ rights and freedoms. Common DPIA Triggers in Professional Services…