Hardly a week goes by without the term “health and safety gone mad” appearing in the news or, more frequently, in the comments sections of news stories. Health and safety legislation is used as the bad guy to explain away event cancellations, petty rules or the end of long-held traditions.

The truth is that health and safety laws have given the UK one of the world’s lowest workplace fatality rates. Though there’s clear room for improvement, having strong protection in the law allows the UK workforce to have a reasonable expectation that they’ll come home safe from work every single day. It’s a record to be proud of, and one that other countries are trying to match.

So why is something so positive often derided as being too tightly imposed? Why is it often the excuse brought out to explain why everything from beloved childhood games to standard workplace equipment are “no longer allowed”? More often than not, “health and safety” is being used as a convenient excuse to cut costs or to obscure poor customer service. In other cases, poor training or management concerns about being sued have led to the rules being interpreted in a much too strict manner.

This attitude has given rise to some entertaining myths:

1. Health and Safety Forced Children to Wear Goggles to Play Conkers

A myth that refuses to die, this story has been repeated in many different ways over the years. The truth is that no health and safety legislation requires it, and it may in fact have originated from a wrong interpretation of a one-off event.

Conkers can be played without goggles, but eye protection for children is often a good precaution to take when they’re doing any activity where eye injuries are a possibility.

2. Daffodils are Dangerous

The Health and Safety Executive (HSE) ran a project looking at health and safety myths until 2015. The public sent in many cases of “health and safety” being used as an excuse, from paperclips supposedly banned in offices to selfie sticks barred from nightclubs. Perhaps the most entertaining was daffodils being taken away from a village green. It remains to be seen what danger the daffodils – generally seen as innocent early spring decoration – were allegedly causing!

Needless to say, no health and safety legislation prohibits the use of flowers in a floral display.

3. Ladders are Banned

Repeated in different forms for many years, there is a common misconception that ladders are now banned.

Falls from height were the leading cause of fatal workplace accidents in 2018/19, so working at height remains one of the most dangerous things someone can do at work. The Work at Height Regulations 2005 were introduced with the aim of reducing the amount of deaths and injuries resulting from falls.

However, if a ladder is in good working order, properly secured, is the most sensible tool for the job at hand and is being used by someone who’s properly trained and prepared, there’s nothing to stop their use in any UK or EU legislation.

Though many of the Health and Safety myths are amusing, there can be serious consequences to the trivialisation of the term.

If “health and safety” is seen as a list of silly, impractical rules, people will be less likely to take the legislation seriously. Genuine recommendations might be at risk of being lumped in with “conker bans” and other myths, leading to confusion as to what is actually permitted in the workplace.

The UK’s health and safety legislation has led to one of the lowest workplace accident rates in the world. Myths that might make a good headline but undermine the good work that’s been done over recent decades to build this record risk putting UK workers in danger.

Thinking statue
When it comes to GDPR, do users have free will?

Is free will an illusion? Determinist philosophers might think so. Ancient Greek thinkers Leucippus and Democritus were two of the first to theorise that all processes in the world were due to a mechanical interplay at an atomic level, precluding the idea of human beings exercising any kind of free will in a universe operated by deterministic forces.

Aristotle, however, stated that we have the power to do or not to do, and free will can exist when we are aware of the particular circumstances of our actions. However, he still left unanswered the question of defining the choices we make based on causes outside of our control.

On-demand webinar – GDPR Mythbusters 2019

continue reading

As we approach a year since GDPR came into force, in a recent webinar we revisited our popular GDPR Mythbusters series with a new round of questions and answers about data protection. Our Director of Best Practice Gary Yantin and Director of Course Development Nick Henderson answered the following questions:

  • Are huge GDPR fines a myth?
  • Does anyone actually care about GDPR compliance?
  • Does enforcement really go beyond EU borders?
  • Does GDPR apply to me if I’m not based in the UK?
  • Does GDPR require me to appoint a DPO?

Watch now

continue reading
Creation of Adam painting

Was the General Data Protection Regulation handed down on tablets of stone? Were its articles intended to be revered, venerated and feared for all time? Or, as many businesses might prefer, is GDPR more of a set of guidelines, good ideas for living a moral life that don’t really matter if they aren’t actually followed?

One could be forgiven for mistaking some GDPR compliance professionals for wandering clerics; preaching the gospel of data protection and warning of the world to come. Yet, like every prophecy, the date of the apocalypse came and went, and nothing much happened… Or did it?

On-demand webinar – GDPR Mythbusters 2019

continue reading
Screenshot from a newspaper article
As GDPR came into force in May 2018, many people questioned the hype around compliance with the regulation

VinciWorks has revisited our popular GDPR mythbusters series to separate the data protection facts from fiction.

GDPR received the kind of hype normally saved for a celebrity meltdown or an Avengers movie. In 2018, the eponymous EU directive, otherwise known as Regulation 2016/679, scored higher in Google search rankings than Beyoncé and Kim Kardashian. GDPR notched up over 300,000 media mentions, three times as many as Mark Zuckerberg managed. It even spawned a sub-culture of memes as EU citizens drowned under a flood of emails informing them of privacy policy updates and “click here to re-subscribe”.

On-demand webinar – GDPR Mythbusters 2019

continue reading
Silhouhette of a spy
The Information Commissioner’s Office (ICO) is deploying agents around the world to clamp down on those failing to comply with GDPR

As a year since the introduction of the EU’s General Data Protection Regulation (GDPR) approaches, we revisit our popular GDPR Mythbusters series to separate the data protection facts from fiction.

GDPR’s reach promised to be global. Companies around the world would fear the shadow of the EU regulators. They would quake in their sandals or snow boots as diligent Europeans pursued international data bandits across baking desserts and frigid tundra in the name of justice; serving enforcement actions on those crooks, wherever they may hide.

Read more: GDPR training for US-based staff

continue reading

As a year since the introduction of GDPR approaches, VinciWorks revisits our popular GDPR mythbusters series to separate the data protection facts from fiction.

Just six minutes after GDPR came into force on 25 May, 2018, two European advocacy groups, Quadrature du Net and None Of Your Business (NOYB), filed complaints against search giant Google. Similar complaints were also levied against the titans of the internet age: Facebook, WhatsApp and Instagram. These actions were not confined to just one jurisdiction. The white knights of data protection made their mark in the halls of national regulators in Paris, Vienna, Brussels and Berlin.

The complaint? Nothing greater than the default advertising settings that come when signing up for a standard Google account. Users must agree for their personal data to be used in order to show them personalised adverts, and Google requires people to agree to those terms and conditions via pre-ticked boxes in what NYOB calls “forced consent.”

On-demand webinar – GDPR Mythbusters 2019

continue reading

GDPR webinar banner

Should we be deleting our whole email marketing list? How much can you actually be fined for a GDPR offence? In this webinar, Director of Course Development Nick Henderson and Yehuda Solomont explored the myths surrounding GDPR and helped separate the facts from the fiction. The webinar is based on our GDPR Mythbusters blog series that we are publishing in the lead up to GDPR day.

The webinar focused on the following GDPR myths

  • You’ll be fined 4% of global turnover for your first GDPR offence
  • GDPR requires you to delete all of a person’s data if they ask
  • You can’t send marketing emails anymore
  • HR policies and practices won’t be affected
  • No one will know if I don’t comply with GDPR
  • Compliance will cost you business

Watch now

continue reading

Phone showing GDPR comes into force on 25 May
The General Data Protection Regulation comes into force across the EU on 25 May 2018

It’s not true. If you do absolutely nothing to prepare for GDPR, take 25 May off, put your out-of-office on and don’t pay any attention to anything related or connected to GDPR, you’ll be found out pretty quickly.

What happens if I don’t comply with GDPR?

First of all, people will know you aren’t complying because your privacy notices will not be GDPR compliant. They must identify the legal basis for processing data, and if that’s consent, then the consent being taken must comply with GDPR rules.

GDPR consent rules are a lot more specific than previous ways to collect consent, so much so that consent which does not meet GDPR requirements will not be valid after 25 May and you’ll be in breach of GDPR if you rely on it.

continue reading

HR Polices and Procedures book
To what extent will HR policies and procedures be affected by GDPR, which comes into force on 25 May?

With so much attention given to the marketing and IT departments when it comes to GDPR compliance, it’s easy to overlook the other parts of the business that will be impacted. HR is probably one of the most affected areas in a business, as the new rules apply to employee information as well, not just customers. GDPR is about the regulation of all personal data, and HR departments have a lot of it.

GDPR requires you to identify the lawful basis for processing data. This would normally be consent, i.e. the person agrees for their data to be processed. But GDPR complicates this when it comes to employee/ employer relationships. Under GDPR, consent has to be freely given, and not as a condition for another service, such as a job. Due to the imbalance in a relationship between the employee and the employer, it is not clear that relying on consent would hold up under GDPR. Consent can also be withdrawn at any time under GDPR, and without a fallback ready, processing activities would need to stop.

continue reading