Question mark

Will regulators actually fine businesses 4% of global turnover for committing a General Data Protection Regulation offence? What are the actual repercussions of failing to comply with GDPR?

It’s a headline-grabbing threat designed to leave you shaking at your keyboard, fearful that one wrong keystroke will siphon off €20m, or 4% of turnover, whichever hurts the most. The current maximum level of fine that can be levied under the Data Protection Act 1998 is peanuts in comparison, £500,000.

Some of the biggest fines levied by the UK’s data protection regulator, the ICO, would balloon under GDPR rules. TalkTalk’s 2016 fine of £400,000 would become nearly £60m

However, GDPR is not about fines. The ICO has made clear that maximum fines will not become the norm, nor will examples be made of big brands for minor infringements. As they’ve said, they prefer the carrot to the stick. The ICO’s record stands to reason. In 2016/17, the regulator dealt with over 17,000 cases. Only 16 resulted in a fine.

Learn more: download VinciWorks’ GDPR guide to make sure your business is ready for GDPR implementation on 25 May.

continue reading

As we approach a year since GDPR came into force, in a recent webinar we revisited our popular GDPR Mythbusters series with a new round of questions and answers about data protection. Our Director of Best Practice Gary Yantin and Director of Course Development Nick Henderson answered the following questions:

  • Are huge GDPR fines a myth?
  • Does anyone actually care about GDPR compliance?
  • Does enforcement really go beyond EU borders?
  • Does GDPR apply to me if I’m not based in the UK?
  • Does GDPR require me to appoint a DPO?

Watch now

continue reading

GDPR webinar banner

Should we be deleting our whole email marketing list? How much can you actually be fined for a GDPR offence? In this webinar, Director of Course Development Nick Henderson and Yehuda Solomont explored the myths surrounding GDPR and helped separate the facts from the fiction. The webinar is based on our GDPR Mythbusters blog series that we are publishing in the lead up to GDPR day.

The webinar focused on the following GDPR myths

  • You’ll be fined 4% of global turnover for your first GDPR offence
  • GDPR requires you to delete all of a person’s data if they ask
  • You can’t send marketing emails anymore
  • HR policies and practices won’t be affected
  • No one will know if I don’t comply with GDPR
  • Compliance will cost you business

Watch now

continue reading

2019 was another important year of growth from VincWorks, with 38 new compliance courses9 webinars with industry experts and the release of our new revolutionary compliance tracking tool, Omnitrack.

With the dust settling on GDPR, we focused our attention on new compliance topics and areas on the regulatory horizon. Below is a list of the areas that we focused on in 2019 and will continue to be a focus in 2020.

Compliance training roundup

During 2019 users completed an average of 4 compliance courses and 1.5 hours of compliance training.

The most popular compliance training topics were:

  • Cyber security
  • Anti-money laundering
  • Data protection
  • Anti-bribery
  • Criminal Finances Act
  • SRA regulation
  • Diversity and inclusion

Those topics constituted over 80% of all compliance training time in 2019.

The ten most popular courses were:

continue reading

The UK’s Equality and Human Rights Commission (EHRC) has issued guidance to inform firms they could be liable for being taken to an employment tribunal if they do not make reasonable adjustments for staff experiencing menopause.

Adjustments can include time off, flexible hours, relaxed uniform policies and rest areas. Failing to make reasonable adjustments can amount to disability discrimination, as menopause symptoms can have a long term and substantial impact on a person’s ability to carry out usual day-to-day activities.

continue reading

Many organisations discuss gender equality and promoting women, particularly older and more experienced women. But what does this look like in practice? What are the practical steps to supporting older women in the workplace, and how can barriers to success be overcome?

One highly effective strategy is making your organisation menopause friendly. Older women are one of the fastest growing in today’s workplace, and research has shown that nearly two-thirds of women have taken time off work due to their symptoms, with some even leaving their jobs due to not being supported in their workplace.

In this webinar, VinciWorks compliance experts will take you through the steps your organisation can take to become menopause friendly. From implementing a menopause leave policy to environmental factors affecting a workplace, this session will inform you on why making your organisation menopause friendly is a cost-effective, impactful and necessary initiative.

The webinar featured an interview with Dr Rebecca Lewis from the highly respected Newson Health Menopause and Wellbeing Centre.

This session covered:

  • The basics of menopause as a diversity and inclusion issue
  • Building a coalition for progressive menopause change in an organisation
  • Countering common myths, stigmas and stereotypes
  • Top tips for implementing a menopause leave policy
  • Tackling environmental, organisational and cultural factors on menopause

Watch on-demand

Artificial intelligence (AI) is rapidly changing the workplace. Generative AI tools like ChatGPT and Dall-E now allow people worldwide to accomplish more than humans ever dreamed possible. This creates many challenges for compliance departments, which have to deal with various regulatory issues related to the use of AI, from GDPR to discrimination.

In this webinar, we explored the concepts and terms used in discussing AI and bust some of the myths. We discussed best practices for using AI in the workplace with our team of compliance experts and uncovered the risks and opportunities of using AI at work.

This webinar covered:

  • Understanding AI in the workplace
  • AI and data privacy
  • AI and intellectual property
  • AI and discrimination
  • AI and conducting an effective risk assessment
  • AI and cybersecurity
  • Plagiarism in the age of AI

Watch Now

Domestic abuse can take many different forms and is not always easy to spot – in fact, even the person on the receiving end may not recognise it for what it is. There can be many reasons why people experiencing domestic abuse are reluctant to speak up or seek help, from fears around their personal safety to concerns about being judged by their friends and family, employer or colleagues.

With many people working from home for a protracted period during the Covid pandemic, instances of domestic abuse have increased dramatically and had a devastating impact both on employees’ physical and mental health and on their performance at work. Being able to spot where domestic abuse may be occurring and taking appropriate action to protect and support their staff is therefore a crucial aspect of employers’ duty of care. 

continue reading

Combination lock showing 2019

This time last year, GDPR dominated the compliance agenda for 2018. Like many promised cliff edges, the data protection ravine many feared business would collapse into didn’t quite materialise. While some websites are still blocking users from the EU due to alleged ‘GDPR’ issues, the shift to a new data protection regime seemed to go not too badly. This isn’t because GDPR isn’t being taken seriously, quite the opposite. The promise of eye-watering fines and enforcement action spurred a multi-industry push to get GDPR compliance right.

For that reason, GDPR stays in the lead of our top compliance trends for 2019.

1. Moving from GDPR compliance to best practice

As GDPR day on 25 May 2018 approached, businesses big and small rushed to get their privacy notices updated and flooded all of our inboxes asking us to accept their new terms of re-give consent. Most of this was pointless and unnecessary, not to mention greatly annoying to us all. Plus it exposed a rather gaping failure to grasp the six conditions for processing data under GDPR and the myth that consent is always the best or strongest condition.

continue reading

GDPR webinar banner

Over the weeks leading up to the General Data Protection Regulation (GDPR) coming into force, VinciWorks has hosted a number of webinars on the topic, answering hundreds of questions in the process. You can get instant access to all our GDPR webinar recordings by clicking on the links below.

Understanding the Data Protection Act 2018

In our webinar on understanding the Data Protection Act 2018, VinciWorks’ GDPR experts Nick Henderson and Gary Yantin explored the newly enacted DPA 2018 and the key differences and derogations from GDPR you need to know about.

Watch webinar

Full-day GDPR webinar

On 24 May, the day prior to GDPR coming into force, VinciWorks hosted a full-day webinar including live Q&As, interviews with GDPR experts and helpful advice on complying with the new regulation.

Watch full webcast

GDPR – Data Protection Impact Assessments

During this webinar, Nick guided listeners through the process of conducting a DPIA. He also answered questions on the topic of DPIAs and gave guidance on next steps to those who have already begun the process.

Watch webinar

continue reading