Mastodawn

Een cookiebanner zonder onderliggende trackerinventaris voldoet niet aan de cookieregels.
Toezichthouders vragen tijdens audits steeds vaker om beide: het toestemmingsmechanisme én de documentatie van waarvoor toestemming wordt gevraagd. Een CMP-scan vervangt de inventaris niet.
Nieuwe gids voor MKB-bedrijven over wat ePrivacy art. 5 lid 3 vereist, de vier trackercategorieën, en wat verandert onder het Digital Omnibus-voorstel.
https://readmodel.com/blog/article.php?slug=cookie-tracker-inventory-guide
#AVG #Privacy #Cookies #readmodel #locaverdi

"Cookie & Tracker Inventory: SMB Guide"

"Cookie and tracker inventory for SMBs in 2026. ePrivacy Art. 5(3) explained, what to inventory beyond cookies, and where your CMP fits in."

LOCAVERDI B.V.Apr 28

Six years after Schrems II, Transfer Impact Assessments remain the most operationally awkward part of GDPR for SMEs.
New guide covers what a TIA requires in 2026: the EDPB six-step methodology, current adequacy landscape, country-specific risk for the destinations SMEs actually use, and how to fit it onto your existing data map.
Schrems III pending at CJEU.
https://readmodel.com/blog/article.php?slug=transfer-impact-assessment-guide
#GDPR #SchremsII #DataTransfers #readmodel #locaverdi

"Transfer Impact Assessment: a 2026 SMB Guide"

"Transfer Impact Assessment for SMBs in 2026. Six years after Schrems II — what TIA actually requires, the EDPB six-step methodology, and where the Data Privacy Framework stands."

LOCAVERDI B.V.Apr 21

Ransomware resilience for SMEs isn't about buying expensive tools. It's about a short list of high-impact controls done properly.
New guide: 10-point plan aimed at organisations without dedicated security teams. Covers immutable backups, MFA, recovery drills, offsite storage, credential management, and what to actually test.
https://readmodel.com/blog/article.php?slug=ransomware-resilience-checklist
#RansomwareResilience #CyberSecurity #SMB #readmodel #locaverdi

"Ransomware Resilience: A 10-Point Plan"

A practical 10-point checklist to assess and improve your ransomware readiness — from immutable backups to MFA enforcement.

LOCAVERDI B.V.Apr 15

Five-minute Readmodel® demo: full compliance workflow in one walkthrough.
Create a project. Add Claude as an AI service. Add a user, their laptop, their access. Watch the risk register catch the gaps — missing 2FA, undocumented processor role, unreviewed access. Run an access review. Generate the printable ROPA with an AI-written summary section.
https://youtu.be/20VtaBhrfpQ
Free Explore tier: https://readmodel.com
#DataMapping #GDPR #ROPA #readmodel #locaverdi

- YouTube

Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.

LOCAVERDI B.V.Apr 14

GDPR, NIS2, and the EU AI Act overlap — but most organisations still manage them in silos.
The IAPP's 2024 Digital Governance Report calls this the "analog" maturity level. It creates blind spots, duplication, and slow incident response.
Our new article: why 2026 is the inflection point, and three practical steps toward integrated governance.
https://readmodel.com/blog/article.php?slug=digital-governance-beyond-gdpr
#DigitalGovernance #GDPR #NIS2 #readmodel #locaverdi

"Digital Governance in 2026: Beyond GDPR"

"Most organizations govern privacy, security, and AI in silos. The IAPP Digital Governance Report shows why integrated governance is now essential."

LOCAVERDI B.V.Apr 9

EU AI Act deadline: August 2, 2026. Four months away.
If your team uses ChatGPT, Copilot, or AI features inside your existing tools, you're a "deployer" under the Act. That comes with real documentation obligations.
Our new guide for SMBs: inventory AI services, classify risk, document human oversight, integrate with your ROPA. Practical, proportionate, built on the GDPR foundation you already have.
https://readmodel.com/blog/article.php?slug=ai-governance-guide
#EUAIAct #GDPR

"AI Governance: What SMBs Must Do by 2026"

"The EU AI Act takes effect August 2026. Learn what SMBs must document about AI usage, risk classification, and human oversight for compliance."

LOCAVERDI B.V.Apr 9

Following up on our ROPA tool guide from earlier this week — the question we kept getting was "where does the ROPA actually come from?"
The answer is the data map. A ROPA is the output; the data map is the input.
Our latest guide walks through the five steps of building a GDPR data map that stays current as your organisation evolves.
Read the full guide: https://readmodel.com/blog/gdpr-data-mapping-guide
#GDPR #DataMapping #Article30 #Compliance #readmodel #locaverdi

"Create a GDPR Data Map: Step-by-Step Guide"

"How to create a GDPR data map in 5 steps. Document your processing activities for Article 30 compliance — with practical examples for data controllers."

LOCAVERDI B.V.Apr 7

GDPR Article 30 requires a Record of Processing Activities. Most organisations maintain theirs in a spreadsheet — and most of those spreadsheets are out of date.
The cost shows up during audits, breach notifications, and DSAR responses.
Our latest guide covers:
• What Article 30 actually requires
• Why spreadsheets fail as a ROPA tool
• What to look for in a proper ROPA tool
Read the full guide: https://readmodel.com/blog/ropa-tool-guide
#GDPR #ROPA #DataMapping #Compliance #readmodel #locaverdi

"ROPA Tool: What It Is and Why You Need One"

Learn what a ROPA tool does, why GDPR Article 30 requires one, and how to create your Record of Processing Activities without spreadsheet chaos.

LOCAVERDI B.V.Mar 12

𝔰𝔥𝔦𝔟𝔠𝔬 Mar 11

In 2015 I was on a beach in Hawai'i helping build the prototype of what became Signal. I argued that the app needed pseudonyms because abusers know their victims' phone numbers. I lost the fight that day. History proved me right, and Signal would move to usernames under @Mer__edith's stewardship.

In this new essay, I trace the line from Barlow's Declaration of Independence of Cyberspace through smart-home forensics, metadata killings, and Archive Team's non-consensual Tumblr scrape to ask: when did we decide that a jpeg is a photograph, that a profile is a person, that storage is memory?

The answer involves a boat off Honolulu, the early days of Signal, Iran's missiles over Amazon's Dubai AWS facilities, and the communities already building for a world where the server goes dark. This is an essay about infrastructure, memory, archiving without consent, and what we lose when we mistake the filesystem for memory.

It is also the angriest and most personal text I've ever written. I'm furious, and you should be too. We bet an entire civilisation on a brutal and unreliable stack. Now, fate has come to collect that wager.

California has a lot to fucking answer for.

https://newdesigncongress.org/en/pub/who-will-remember-us-when-the-servers-go-dark/

LOCAVERDI B.V.Feb 25

Vind jij het niet OK dat je overal online gevolgd wordt? Vertrouw je de apps niet altijd meer die je regelmatig gebruikt? En hoe zit dat bij jouw eigen bedrijf of werkgever?

Wij helpen je met het in kaart brengen van jouw eigen situatie en de stappen die je kunt zetten voor een beter, betrouwbaarder en eerlijkere IT-omgeving.

Stuur gewoon even een berichtje als je meer wilt weten!

#opensource #it #nederland #eerlijk #lokaal