GDPR -UK a Soft Touch

I found both links interesting, but Richard‘s ICO link was an illustration of the way that the UK will deal with GDPR issues after Brexit. I found particular interest in the ICO’s handling of TPS (Telephone Preference Services) complaints from people signed up to TPS, who were still receiving “cold calls” from telesales people.

I await a possible response from Ed with anticipation: very unlike you to miss something like this, Ed!

Luckily none of my customers do any email marketing. Most of them (now) have Synology NAS and Draytek routers so getting robust security is easier and everything gets encrypted. HTTPS certificates are a doodle from both manufacturers tie ins with Let’s Encrypt.

All PCs and laptops are encrypted and they are discouraged from using USB sticks, which they don’t have much need to now they have a VPN to the office. I usually create a single encrypted one for emergencies though.

The Synology’s allow you to create a secure “portal” for exchange of documents with customers so they don’t need to email out anything potentially sensitive. That takes the major cause of breaches out at a stroke. On top of that absolutely everything is logged by default. All backups are encrypted and stored in Synology’s Frankfurt data centre.

The TrueCaller app is Swedish, TrueCall box is British.

I’ve noticed that I now get a warning of a “possible spam caller” on my phone as part of Android. It’s not very accurate though! Had a legitimate call (probably from a call centre) that was warned and then a dialler that wasn’t. I really don’t get much crap on my mobile though, never have.

The landline was a different matter, it was getting ridiculous.

Dave Rice wrote:

All PCs and laptops are encrypted and they are discouraged from using USB sticks, which they don’t have much need to now they have a VPN to the office. I usually create a single encrypted one for emergencies though.

Here’s hoping they have a faster internet connection than my current workplace! Using work VPN is a nightmare. Even worse when used on a dodgy/slow hotel wifi – to the extent that my current projects are transported around with my on my portable SSD. Bitlocker encrypted throgh.

As to D-Dan’s comments, it has caused me issues with the cadets as well. Knee jerk reaction is that no information stored locally on squadrons, all has to rely on the MOD backed server system (which is just Office 365…) Great. Until you have a squadron where the internet isn’t working or where the squadron commander hasn’t been given the log in details to review all the information… happened to me more times than once so far. As far as I was aware, as long as I took reasonable precautions, it would be acceptable (i.e. keep cadet consent forms under lock and key).

I have a feeling that the data is already being sent through a VPN, even whilst in the office, as if I try and log in on an Apple device whilst in the office (in Manchester), it suggests that I’m signing in via London. In addition, trying to save files over the VPN from home can be slow – but I’m on a 70Mbps connection with Virgin (though there upload isn’t as good as the old BT line I was on).

Anyhow, may not be here for much longer if my interview on Monday pans out! (a move back to the Midlands beckons if everything works out…)

Dave Rice wrote:

Both work at full speed so it must be the Huawei itself. I suspect the CPU just isn’t up to it.

Maybe it’s prioritising bandwidth sending all that info home to China before it delivers it for you or your customer!!??

Based on personal experience one of the worst professions for breaching the GDPR are solicitors.  When I work for them and submit my invoice which inc my H/A, home tel no., my bank account details very often they are simply passed onto their clients for payment!!

I had one particular ‘rectal cavity’ of a solicitor who informed me that that was my problem and they / he intended to continue as he had done before.

A quick complaint to the ICO soon stopped that.

I have found the ICO very helpful at all times.