Monthly Archives: May 2018

GDPR is here. Compliance has just begun.

The General Data Protection Regulation has now come into force. The UK’s third generation of data protection law has received Royal Assent and its main provisions commenced on 25 May 2018. The new Act aims to modernise data protection laws to ensure they are effective in the years to come. VinciWorks has hosted a number of webinars to help businesses prepare for the EU-wide law.

On 24, VinciWorks hosted a full-day live webcast to answer questions, interview experts and review the changes to data protection law under GDPR.

Watch #GDPRday highlights

Full-day live GDPR webcast schedule

10:00am – Q&A on lawful basis for processing, Gary Yantin and Nick Henderson, VinciWorks

11:00am – GDPR Mythbusters, Webinar replay

11:30am – So you’ve been appointed DPO. What now? Interview with Andrew Moyser, MHA MacIntyre Hudson Chartered Accountants

12:00pm – Live Q&A on privacy notices and DPIAs, Alyssa Redsun and Nick Henderson, VinciWorks

1:00pm – Data Protection Impact Assessments, Webinar replay

2:00pm – The ICO’s view – what will change after GDPR? Richard Nevinson, Information Commissioner’s Office

2:15pm – GDPR – getting it right, Alex Brown, Simmons & Simmons

2.30pm – Live Q&A – ask us anything (about GDPR), Gary Yantin and Nick Henderson, VinciWorks

3:30pm – Privacy notices, Webinar replay

4:30pm – Dawn raids – preparing for the unexpected, Karla Gahan, VinciWorks

5:00pm – Closing remarks and guidance

View full schedule and presenter bios

Continue reading

Free on-demand GDPR webinar – conditions for processing

GDPR webinar banner

Under GDPR, you need an approved ‘condition for processing’ for every data processing activity, but you don’t always need to seek consent. With just a week until GDPR comes into force, Director of Course Development Nick Henderson and Director of Best Practice Gary Yantin hosted another webinar to take a deep dive into understanding the conditions for processing data which underpin all uses of personal data.

The webinar covered:

  • When do we need consent and when do we not?
  • How to rely on legitimate interest
  • Data processing scenarios
  • Answering your questions on the topic

Watch now

Continue reading

GDPR course for American-based staff

GDPR: An American Perspective GDPR course screenshot

While the General Data Protection Regulation (GDPR) is an EU-wide regulation, its reach is global. Facebook, for example, look like they will be complying with GDPR following Mark Zuckerberg’s hearing and mixed reports on whether the social media platform will comply on a global scale. EU-based businesses with offices in the US will need to ensure they comply with GDPR. VinciWorks’  course, GDPR: An American Perspective, allows businesses to train their staff based in the US on GDPR from the perspective of an American.

Free demo

Continue reading

Bribery whistleblowing policy template

Man passing over a bribe

The Bribery Act 2010 defines bribery in a very broad way, namely as a gift or donation intended to “induce a person to perform improperly, a relevant function or activity”. When it comes to any compliance matter, it is important to install a culture whereby all staff feel comfortable raising any concerns they may have, be it regarding the actions of a client, a colleague or a member of the management team. VinciWorks has therefore created a bribery whistleblowing policy template that can easily be edited to suit your organisation and include the appropriate contact people.

Download policy template

Continue reading

The anti-money laundering resource page

Anti-money laundering resource page

Hundreds of firms have download VinciWorks’ free tools for AML compliance

Does your organisation have everything in place to ensure it is complying with the Money Laundering Regulations 2017? Do you have the latest policies and anti-money laundering training in place? VinciWorks’ anti-money laundering resource page provides helpful tools that can be used by entire organisations to help ensure compliance.

The resource page includes:

View resource page

On-demand GDPR webinar – Data Protection Impact Assessments (DPIAs)

GDPR webinar banner

With GDPR day less than a month away, Director of Course Development Nick Henderson continued  to help organisations prepare for the new EU wide regulation. During the webinar, Nick guided listeners through the process of conducting a DPIA. He also answered questions on the topic of DPIAs and gave guidance on next steps to those who have already begun the process.

Read more: The VinciWorks GDPR training suite

The webinar covered:

  • The seven steps of conducting a DPIA
  • The suggested DPIA timeline
  • What to do if you haven’t yet started conducting your DPIAs
  • Who should be responsible for conducting and monitoring DPIAs
  • Shared tips from attendees

Key findings

  • 55% of attendees said they haven’t consulted externally on their DPIA while 27% said they have and 8% said they haven’t but they should have done
  • Biometric and genetic data are now special categories of data under GDPR and are required to be included in a DPIA
  • It is important to act on the recommendations of the DPIA and often are required to share findings with a third party, such as the Information Commissioner’s Office (ICO)
  • Only 4% of attendees have conducted a DPIA on everything while 30% are planning to begin the process soon

Watch now

Continue reading

British Overseas Territories must adopt public registers of beneficial ownership

A stack of coins with a figurine standing by it

Amendment to the Sanctions and Anti-Money Laundering Bill

On 1 May, Foreign Office minister Alan Duncan announced that the government would not oppose a Labour amendment to the Sanctions and Anti-Money Laundering Bill currently going through parliament that will introduce public ownership registers in Britain’s overseas territories.

The 14 overseas territories, including the British Virgin Islands and the Cayman Islands, will be forced to introduce the public registers by 2020 or have them imposed by the UK government. The amendment will not apply to the Crown Dependencies of Guernsey, Jersey and the Isle of Man as Parliament cannot legislate for them, but Conservative MP Andrew Mitchell who introduced the amendment along with Labour MP Margaret Hodge hoped the crown dependencies would also embrace the registers.

Continue reading