Steve Hewison

GDPR: When is a law a law?

  By Elodie Ellingsen, Data Privacy Officer The UK government website glossary defines a Regulation as “a legislative act of the EU which is directly applicable in Member States without the need for national implementing legislation. [Article 288 TFEU].” Did you know that under EU law, Regulations become automatically binding and directly applicable on the

GDPR: When is a law a law? Read More »

Access Control: SP19 is Here!

By Andrew Sawyer, Chief Operations Officer On the 23rd of October, we received the news those of us who work within SAP Access Risk & Provisioning have been waiting for. That’s right – SAP have released Support Pack 19 for Access Control 10.1 (cue the trumpets)! Among the many released notes, the highlight of this

Access Control: SP19 is Here! Read More »

GDPR: My organisation is paper-based, so it doesn’t apply to us…

Wrong. GDPR still applies, and here’s why. Records can be stolen and misused whether they are on paper or stored digitally. If the information included in a given record can be used to identify an individual, then it falls under General Data Protection Regulations. Consider all your organisation’s physical paper and digital records. Do they

GDPR: My organisation is paper-based, so it doesn’t apply to us… Read More »

How many consultancies can lay claim to educating an entire country?

By Steve Hewison, CEO The new EU General Data Protection Regulation has become a bigger and bigger news story throughout 2017, yet when Winterhawk, alongside our partners SAP, staged our first “Cyber Protection and GDPR” event back in October 2016, I got the distinct impression that people attended more out of curiosity, rather than a

How many consultancies can lay claim to educating an entire country? Read More »

GDPR and the Trade Unions: will this inspire a wave of protest?

The UK Data Protection Act has been around long enough. Customers and employees already have the right to request that organisations reveal what information is held about them. Typically, a customer/employee (which we’ll refer to as a “Data Subject” in this article) will contact the organisation’s Data Protection Officer (DPO) and along with the request,

GDPR and the Trade Unions: will this inspire a wave of protest? Read More »

Scroll to Top