Everyone seems to be doing it. How many emails have you received this week with a "Covid-19 update" subject line? Sent by businesses you might have had some kind of contact with at some point in the last 10 years. Dressed up as service emails - even though you don't actually have any kind of … Continue reading Don’t dig the hole deeper
[Link updated as the ICO has moved its blog] On the 25th of April, I wrote GDPR: you're all getting it wrong. On the 9th of May, Steve Wood (the Deputy Commissioner) wrote this: https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2018/05/blog-raising-the-bar-consent-under-gdpr/ See? I may be a voice in the wilderness, but I'm not (always) wrong.
If I get one more email telling me that “GDPR means we have to ask you to opt-in” I think I’m going to go postal. Let’s do this slowly, and this time with feeling. Marketing (and fundraising) emails are covered by the Privacy and Electronic Communications Regulation 2003. That’s right, a 15-year-old piece of legislation. … Continue reading GDPR: you’re all getting it wrong
Today’s report that Evernote have been hacked raises an interesting point. Evernote deny that any content has been breached, which is fine as far as it goes. I use Evernote but since it has no encryption at rest I wouldn’t put anything in there that I wouldn’t want on the front page of the Times. … Continue reading Another day, another breach