What the H3ll is GDPR……

…and why should I care?

Have you heard it said? Have you spent nights lying awake worrying about it…..or does the phrase GDPR not register for you?

Well the EU General Data Protection Regulation (GDPR) comes into force in the UK in May 2018, it is anticipated to have a significant impact on the businesses across the UK.

It so hard when dealing with these kinds of thing to remain interested, it’s not the sort of thing that will become dinner party conversation but trust me, we all need to have a brush up on this one. Although it’s a replacement for the Data Protection Act of 1998 it takes the compliance for the storage, collection and protection of data to a new level.

It’s a little bit daunting because ultimately these new regulations mean businesses are required to gain consent for all data collected from individuals, and provide clear and comprehensive privacy notices to help these individuals understand what they are opting into. Crucially, organisations of all sizes need to be able to prove that consent was given if they want to process any form of personal data.

If you break the rules, “gulp”, well then the European Supervisory Authorities can fine you up to 20 million euros or 4% of your annual turnover.

So working, as I do, at a marketing company is going to change, the purchase of data will need clear lines of authority and the client supplied data for marketing purposes will need direct permissions, in writing, before anything can be sent.

Also remember the protection of this data is also your responsibility so the advice would be to appoint a data protection officer and consider the training required, if you hold any client or employee data.

Finally, if you think the looming Brexit will save you, think again, GDPR will apply in the UK from 25 May 2018 and the government has confirmed that the UK’s decision to leave the EU will not affect the commencement of the GDPR. If you currently are subject to Data Protection Rules – this effects you.