AggregateIQ (AIQ), a Canadian analytics firm that worked for Vote Leave to target ads at Brexit voters, has been hit with the first GDPR notice. The notice, issued by the UK’s Information Commissioner’s Office (ICO), accused the company of processing people’s data “for processes which they would not have expected.” The data was collected before GDPR regulations came into effect on 25 May, but the ICO has said it is concerned about the “continued retention and processing” of the data, therefore GDPR applies to AIQ’s handling of the information.
To get an idea of how your organisation is doing in maintaining GDPR compliance, check out our CyRegGDPR™. It’s an easy, step-by-step tool to guide you in sustaining GDPR compliance.
To read more, click here.