CVG Solutions

We are taking a break ☕

and enjoy some well deserved time off with family in beautiful Scotland.

We'll be back soon 🥰

Are you confused about what exactly is personal data under GDPR?

In the 55th episode of our podcast 'Why such a fuss' (which is available on Spotify, Apple and YouTube), we provide clarity on data protection with Rowenna Fielding, a seasoned Data Protection Officer AKA Miss IG Geek.

We break down:

✅ The jargon of Article 4 of the GDPR into plain English

✅ Exploring what personal data really means in practical terms.

✅ Understanding why religion is classified as 'Special Category' data

✅When personal data is personal data in one scenario and not another Join us as we demystify all of these things about personal data.

Why personal data is like a 'yellow sticker'

If you would like to know more about General Data Protection, feel free to contact us: 📧 [email protected]

Ever wondered what terms like Records Management, Storage Limitation, and Data Retention really mean?

Do they sound like fancy corporate jargon that doesn't apply to your small business?

Maybe they are fancy words but guess what?

These practices are crucial for businesses of all sizes, including yours! Embracing them will empower and enable your business to thrive.

Don't miss out on this opportunity to gain some valuable insights! Join Emily Overton (Owner of RMGirl) and me (Owner of CVG Solutions) for a LinkedIn Live session where we'll demystify these concepts and show you how to put them into practice.

Mark your calendar for September 25th at 10 am and join us here: https://www.linkedin.com/events/storagelimitation7224713914310168576/theater/

Is Personal data in the Public domain still personal data?

The short answer is, Yes!

There is the misconception that because it’s in the public domain people/organisations seem to think that they can do what they want with it.

There is a difference between reading a comment and actively monitoring and commenting on their statement.

When an organisation, whether private or public, monitors an individual’s social media activities they are processing that individual personal data. Therefore, GDPR applies.

In fact, the UK GDPR explicitly states the requirement to provide transparency when obtaining data from a public source.

One of the main principles of the GDPR, in fact is the 1st principle, which is about TRANSPARENCY. This also feature as a right to be informed. So, if you are processing personal data that you have collected from a public platform you need to tell them!!

There are some exceptions such as a criminal investigation, obtaining legal advice or negotiations.

Look who I met with at the weekend!!!

Emily was visiting friends and family in Lincolnshire and so we took the opportunity to meet up for coffee and catch up, as we have recently started working together on a new client.

And it just happened that we were both wearing yellow…🤗☀☀☀

Are you sure you want to do this?

Me: Hello!
Unknown man voice: Hi, can I speak with Cristina, please?
Me: speaking
Unknown man voice: Hi, my name is Gavin and I’m calling from ABC Marketing (made up name to protect their identity) we specialise in supporting small businesses with their marketing strategy.
Me: where did you get my phone number from?
Gavin: I got it from your profile on LinkedIn
Me: did you check whether my phone number is registered with the TPS and the CTPS?
Gavin: but your phone number is listed on LinkedIn
Me: just because it’s listed on a social media platform it does not mean that you can call me and start selling to me. If you had bothered to check with the TPS and the CTPS you would have discovered that my phone number is listed and therefore by calling me, you are breaking the law.
Gavin: oh, oh didn’t know that!
Me: well now you do. I would encourage your organisation to revise your cold calling processes before you get into troubles

Moral of the story => if you are considering engaging a marketing organisation to support you with your marketing make sure they know the law and that their processes reflect that.

If you would like to know more about GDPR and how it applies to your organisation, please contact us [email protected]

Celebrating Friendship Day

Look who I ran into the other day at a networking?

It was such a delight to bump into Concetta in Peterborough we’ve known each other for several years and then life got in the way, and we lost touch.

We have so much to catch up on that we have arranged to meet up for coffee next week and have a proper nutter…Italian style! 😁

I’m so looking forward to this 🤗

Does the thought about sending data from the UK to the US bother you?

are you worried about its safety?

Fact is, data transfer regulations can be confusing, and many things could go wrong.

Join me in another podcast with Scott Sammons, as we break down the fuss surrounding UK to US data transfer.

In this podcast, we cover:
✅Why data transfer between the UK and US can be a concern.
✅ The potential risks involved and what could go wrong with your data during transfer.
✅ How the UK data bridge programme can help protect your data during transfer.
✅ Who is eligible to use the data bridge programme?

As a business owner or individual who cares about the safety of their data, you will find this podcast educational!

Why such a fuss on Apple Podcasts

Why such a fuss | Podcast on Spotify

https://youtu.be/pH3JSY5RfiA?si=gDR3SH0MV8EAeiQm

If you would like to know more about General Data Protection, feel free to contact us: 📧 [email protected]

Do you enjoy networking?

For a small business like mine, networking is key to building connections, boosting credibility, and establishing our name and reputation.

I don't network all the time—otherwise, I wouldn't get any work done! 😊 But there are some events I make a point to attend.

Just last week, I went to two networking events and ran into some familiar faces. Of course, I couldn't resist snapping a few photos!

I met up with my partner in crime, Julie Marsh from our LinkedIn Live sessions, Deborah Bircham and Claire Watson from our solopreneur support group, L’Alveare, and Liz Drury from Net4Bizz. We share knowledge, insights, experiences, and support each other whenever needed.

These incredible women embody resilience, passion, determination, and courage every single day, and I'm privileged to have them in my circle.

Do you network? How do you build support around you? I'd love to hear about it!

It’s happened again!

In the last week alone, several small businesses have reached out because they missed out on contracts due to issues with their GDPR compliance.

This trend shows that big companies are now checking if small businesses are up to scratch with GDPR rules.

If you're a small business aiming to work with large corporations, is your strategy up to date with GDPR requirements?

If not, it’s time to rethink and make sure you have:

📌 All the necessary policies in place.
📌 Proper processes established.
📌 Adequate training for your team.
📌 Documentation of what data you collect, when you collect it, the purpose, lawful basis, retention periods, data sharing, third parties involved, and more.

Feeling unsure or overwhelmed?

Don’t worry, we’re here to help!

We simplify everything into easy-to-understand steps that can be implemented right away.

Interested in learning more? Give us a call at 01775 660506 or email us at [email protected].

AI: How Does It Really Affect Us?

AI is everywhere these days, but how exactly is it changing the world around us?

Join me and Scott Sammons as we dive into the impact of AI development on humanity!

In this podcast, we chat about:
• Why we need AI regulation
• How AI is transforming our work today and what it means for the future
• The importance of transparency in data use in our data-driven world
• Understanding what data means and how it's used

We wrap up with a discussion on why being aware of data is crucial as AI continues to advance.

Whether you're curious about AI or concerned about its impact, this podcast is for you!

https://www.youtube.com/watch?v=ygy18U6uq3k

I'm thrilled to share some exciting news! 🥳

Our podcast "Why Such a Fuss" is now on YouTube with its very own channel!

The first episode drops tomorrow, featuring a fascinating topic and an amazing guest.

Stay tuned for tomorrow’s post for more details and the link. 👀

Don’t miss it! 😉

Can Anyone Be a DPO?

When it comes to the role of a Data Protection Officer (DPO), the regulation is crystal clear: no conflicts of interest allowed.

This means CEOs, Managing Directors, and even Sales, Marketing, Operations, HR, or IT Directors are off the table. The DPO role must either be independent or fall under Legal and Compliance.

According to Article 37(5), a DPO must be chosen based on professional qualities, especially expert knowledge in data protection laws and practices.

So, an accountant who is also a Managing Director but lacks expertise in data protection just won't cut it as a DPO.

Assigning the DPO role to someone without the right knowledge is not only unprofessional but also non-compliant with regulations. It exposes the organization to risks and sets up the ill-prepared individual for failure. In short, no one wins in this scenario.

If your organization doesn't meet the DPO criteria, it's better not to appoint one. However, if you think a DPO would be beneficial, ensure you pick the right person with the right expertise and no conflicts of interest. If you can't find someone suitable within your organization, consider hiring externally.

Want to know how GDPR affects your business? Give us a call at 01775 660506 or email us at [email protected]. We're here to help!

Can AI Steal Your Vote? ✅

That was the eye-catching title of a recent episode of Dispatches. If you haven't seen it yet, I highly recommend you check it out. It will give you a clear insight of just how advanced AI has become and how easily it can dupe us.

So, does this mean our democracy is in danger?

This question reminds me of a recent episode of the Why Such a Fuss podcast, where Emma Martin and I discussed this very issue.
Our discussion was centred on Mark Coeckelbergh's book, 'Why AI Undermines Democracy and What to Do About It'. The Dispatches episode brings the themes of this book to life in a compelling way.

If you're curious and want to dive deeper into this topic, you can watch the Dispatches episode here: Watch Can AI Steal Your Vote? Dispatches | Stream free on Channel 4
It’s a real eye opener 👀

Why such a Fuss features on Spotify and Apple
Apple podcast https://lnkd.in/emeWhrYv
Spotify podcast https://lnkd.in/eUQsqr3x

Something New is brewing….

I’m always on the lookout for new ways to help people and businesses to gain more understanding and awareness on GDPR which is part of our everyday activities because data is everywhere.

With that in mind, I’m really excited to be working on something new that will be ready to launch in the next couple of weeks

So, watch this space 😉and keep an eye out for further announcements.

Tomorrow
9:00 - 4:00pm
Brightfield Business Hub, Peterborough

We are exhibiting amongst many other small businesses from the local area.

It is our first time exhibiting at the BBH and we are really excited!!

If you are in the area or need an excuse to take a break come say Hi! 👋

We love to see you 🤗

-learning

Are you an HR consultant?

Do you recommend HR systems to your clients?

Yes

Let’s talk!

While I'm not an HR professional and can't speak to the system's functionality, I do have some important insights about their GDPR compliance—or lack thereof.

I am primarily referring to a very popular HR system provider amongst small businesses that HR consultants tend to push/recommend onto their clients.
This particular HR system provider states, in its privacy notice, that they share your data i.e. your clients' employee data with third parties, but they don’t specify who these third parties are. This omission breaches Article 13(1)(e) of the GDPR, which requires them to state the recipients or categories of recipients.

Additionally, they mention cross-border data transfers, focusing only on data transfers outside the EU. What about the UK?

The UK left the EU in January 2020, and since they are a UK-based organization, should comply with UK GDPR. Despite this, their documentation only refers to EU Standard Contractual Clauses, with no mention of the UK Addendum or the International Data Transfer Agreement (IDTA) mandated by the UK GDPR for data transfers outside the UK to countries without adequacy status.

It's unclear whether they have simply failed to update their documentation post-Brexit (i.e. since 2020) or if they’re neglecting compliance altogether. It begs the question, what else have they failed or neglected to maintain? 🤔

As an HR professional, it’s crucial to recognize that recommending a non-compliant provider could put your clients at risk, potentially harming your credibility and professionalism, too. To avoid this, my suggestion is simple: do your homework! 📑

Engage a GDPR professional to help assess and verify the compliance of any products/providers before recommending them to your clients. This not only ensures you provide the best advice but also enhances your reputation, builds trust with your clients and give you and your client peace of mind. 🏝️

#

How should my personal data be handled during a General Election?

The Information Commissioner's Office (ICO) has released a detailed guide outlining what we should expect regarding the use of our personal data by political parties and campaigners.

This guidance was developed in collaboration with other regulators and the House of Commons Authority to provide increased support for MPs.
John Edwards, the Information Commissioner, has also reached out to political parties, reminding them of their data protection responsibilities.

We should expect clear information, especially if a political party is using profiling techniques. Additionally, we should be informed about targeting social media advertising and for them to follow the law with regards to direct marketing.
I am eager to see how well they adhere to these guidelines! 😁

https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/05/the-general-election-and-my-personal-data-what-should-i-expect/

Why I do what I do?

GDPR is a hard sale, people shy away from it, it is often referred to as the 'elephant in the room' 🐘

GDPR is there to create a balance between your rights and freedom and the interest of businesses to make money.

From a business perspective it is your ally to be trustworthy and thus generate business growth.

This testimonial is why I do what I do and why this charity has achieved greater recognition and growth 🎖📈

'Are you using an app to learn another language?'

There are many out there just watch out!

Someone I know downloaded such an app on her phone and then when the bombardment of notifications and pushy messages telling her that she wasn't good enough.

Imagine how damaging this could be for children's confidence. They're still developing emotionally, so criticism hits them hard, especially since their online and real lives blend together more seamlessly.

Kids these days spend hours glued to screens, leaving them vulnerable to this kind of pressure. It's emotional manipulation, plain and simple.

Sending reminders is one thing, but telling someone they're failing just because they haven't logged in recently crosses a line.

It's being marketed as 'staying motivated', but it feels more like coercion.

Whenever you sign up for something and hand over your personal info, be aware of what you're giving away!

Why is educating the next generation about data protection important?

I ask Emma Martins (Chief Commissioner of the DMC) to share with me how she tackled this issue in her former role of Data Protection Commissioner of the Channel Islands. We also discuss why this is so important for the future of humanity.

Whether you prefer Apple or Spotify podcast we are there 👍 remember to click subscribe ✅

Apple podcast https://lnkd.in/emeWhrYv

Spotify podcast https://lnkd.in/eUQsqr3x

22nd May 10am - is it in your diary yet?

Make sure you don’t miss out on the next When HR meets GDPR session.

This time marsh and I will be sharing some crucial insights about employee performance data.

Ever wondered if you should disclose such data upon receiving a SAR?

Let's tackle that together. Mark your calendars for May 22nd, 10 am, and join us for an enlightening discussion."

https://www.linkedin.com/events/unlockingthemystery-understandi7189682973883969536/theater/

We are at it again!

We are exhibiting at the Big Business Event on 16th May.

come and say Hi! - we are on stand 17

We look forward to seeing you

Have you ever wondered where the data in an employee performance review is personal data?

What happens if an employee submits a SAR? should the performance be released? are there any exceptions that the employer could use?

If you would like to know this and more why not join Julie Marsh from Apiary Solutions and I to our LinkedIn Live on May 22nd 10am https://www.linkedin.com/events/unlockingthemystery-understandi7189682973883969536/theater/

What if I were to tell you that AI undermines democracy? 🤖

Would you dismiss this statement, or would you be curious to find out more about it?

If curiosity is your flavour, then join me and Emma Martin (former Data Protection Commissioner of the Channel Islands and now Chief Commissioner for the DMC) in our fascinating discussion on AI and how this technology could shake the very foundation of our democracy in my Why Such a Fuss podcast.

Our conversation is inspired by the eye-opening book 'Why AI undermines Democracy and What to do about it' by Mark Coeckelbergh.

Join us as we navigate the twists and turns of AI's impact on democracy. Spotlighting the critical necessity for well-crafted guidelines, steadfast standards, and robust regulations to safeguard the essence of our democratic principles!

Apple podcast https://podcasts.apple.com/us/podcast/why-such-a-fuss/id1739360078

Spotify podcast
https://open.spotify.com/show/3dzhs5avb77lDySHBfwQAn