The 1998 Data Protection Act has had far-reaching implications for voluntary organizations which hold personal data on computer or on paper. The second edition of this practical guide has been revised and updated following the implementation of the Act to include more examples, model policies and statements, and decision-making flow charts, as well as authoritative answers to key questions, and a comprehensive index. It sets out clearly: what managers need to do in order to comply; who and what the Act applies to; when you need consent from the people whose data you hold; the rights of individuals as data subjects; the responsibilities of voluntary organizations; what managers need to do in order to stay within the law; and how to incorporate Data Protection into your policies and procedures.

The 1998 Data Protection Act provides a framework for the way in which organisations should collect and process personal information. It has far-reaching implications for library and information managers who hold personal data on computer or on paper, or who may be called on to advise their colleagues. This practical guide explains the legal requirements and illustrates the issues with dozens of relevant and informative case-studies.

An expert introduction More than 85% of businesses now take advantage of Cloud computing, but Cloud computing does not sit easily with the DPA. Data Protection and the Cloud addresses that issue, providing an expert introduction to the legal and practical data protection risks involved in using Cloud services. Data Protection and the Cloud highlights the risks an organisation’s use of the Cloud might generate, and offers the kind of remedial measures that might be taken to mitigate those risks. Topics covered include: Protecting the confidentiality, integrity and accessibility of personal dataData protection responsibilitiesThe data controller/data processor relationshipHow to choose Cloud providersCloud security – including two-factor authentication, data classification and segmentationThe increased vulnerability of data in transitThe problem of BYOD (bring your own device)Data transfer abroad, US Safe Harbor and EU legislationRelevant legislation, frameworks and guidance, including: the EU General Data Protection RegulationCloud computing standardsthe international information security standard, ISO 27001the UK Government’s Cyber Essentials scheme and security frameworkCESG’s Cloud security management principlesguidance from the Information Commissioner’s Office and the Open Web Application Security Project (OWASP) Mitigate the security risks Mitigating security risks requires a range of combined measures to be used to provide end-to-end security. Moving to the Cloud does not solve security problems, it just adds another element that must be addressed. Data Protection and the Cloud provides information on how to do so while meeting the DPA’s eight principles.

With a view to helping managers ask the right questions, Data Protection and the Cloud explains how you can effectively manage the risks associated with the Cloud and meet regulatory requirements.

This timely handbook details how all charities in Ireland can ensure that they are legally compliant with all aspects of charities law. This complex area is clearly and concisely explained by two leading experts in the charity law field. As well as fully outlining the legislation, including detailed coverage of the Charities Act 2009, this handbook considers the life cycle of a charity in Ireland: from its creation and registration to its governance and reporting obligations right through to its relations with other charities, at home or abroad, and the demise or dissolution of a charity. Examining the role of the charity trustee in both corporate and unincorporated charities, this book details the key relationships with relevant statutory agencies from the Charities Regulator through to Revenue and the Companies Registration Office. Setting out for the first time the practical issues facing charities operating in Ireland, this handbook is vital for any person concerned with the regulation of charities in this jurisdiction.

Provides commentary and analysis on the complex Law of Options affecting land. This book's coverage includes options to buy, options in wills, rights of pre-emption, transfer of options, options in leases, and remedies for breach of an option agreement

The EU's General Data Protection Regulation created the position of corporate Data Protection Officer (DPO), who is empowered to ensure the organization is compliant with all aspects of the new data protection regime. Organizations must now appoint and designate a DPO. The specific definitions and building blocks of the data protection regime are enhanced by the new General Data Protection Regulation and therefore the DPO will be very active in passing the message and requirements of the new data protection regime throughout the organization. This book explains the roles and responsiblies of the DPO, as well as highlights the potential cost of getting data protection wrong.