Enter your Name and Email address to download the "The 5 Steps Towards GDPR Compliance"
Find out more
For organisations, GDPR means that strict new enforceable limits and controls are put in place over how information belonging to EU citizens can be processed. To comply with GDPR, new policies, procedures and potentially extra security may need to be put in place, and failure to do so could result in huge GDPR fines.
GDPR COMPLIANCE ISN'T JUST ABOUT DOING IT BUT BEING ABLE TO DEMONSTRATE IT.
As qualified GDPR consultants, we can assist with the steps involved in becoming GDPR compliant
The EU - General Data Protection Regulation (GDPR) will supercede the current "Data Protection Act" from 25th May 2018. It will become a legal requirement to protect the "Personal Information" of EU citizens wherever it is held in the world. In October 2016 it was agreed that the UK Government would implement this regulation into UK law, so even post Brexit, UK organisations will still need to be compliant with GDPR.
GDPR will introduce new limits and controls on the way any organisation, business or charity, can retain and process "Personal Identifiable Information" belonging to a living European Citizen.
1) GDPR will limit how an organisation can process personal information.
2) GDPR will increase a Data Subject's rights over the usage and processing of their personal information
3) GDPR will enhance Data Protection and Cyber Security
Reason 1 - From 25th May 2018, it will be a legal requirement for all UK organisations to be compliant with GDPR.
Reason 2 - The penalty for breached, leaked, deleted or compromised personal information could be greatly reduced if the organisation has taken appropriate measures to comply with GDPR.
GDPR Articles 33 & 83 - "If 'Personal Data' which could result in the risk to the rights and freedoms of a natural living person who is a European Citizen, is breached, leaked, deleted or compromised after May 25th 2018, the organisation will be obliged to notify the Information Commissioners Office (ICO) within 72 Hours and also those affected as soon as possible. The ICO will then issue a penalty to that organisation which is effective, proportionate and dissuasive and could be anything up to 20 Million Euros or 4% of their total worldwide annual turnover of the preceding financial year, whichever is higher. "
Reason 3 - Data Breaches can greatly impact the organisations public reputation.
(TalkTalk lost over 100,000 customers as the result of their Data breach in 2015).
Organisations should use this time between now and the 25th May 2018, to identify all the "Personal Information" that they hold, to ensure that they have, or can obtain, explicit consent to continue using it or have some other legal right to do so. They should also enhance the security and protection around the way they process information, to ensure that they are fully GDPR compliant.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form :(
