GDPR

GDPR - General Data Protection Regulations are very topical at the moment, and the new laws come into force in May, 2018.  I thought it may be worth putting something together to help you prepare for it.  The ICO website is excellent and most of the information here is from the site.   This legislation will replace all current legislation around EU and it is all about protecting the rights of EU citizens as 'digital citizens' on a global basis no matter where their data is processed. 

The act talks a lot about Controllers and Processors - you could be both.  Here is a summary of them.

Data Controller - is a person who (either alone our jointly or in common with others) determines the purposes for which and the manner in which any personal data are, or are to be processed.

Data Processor - in relation to personal data, means any person (other than an employee of the data controller) who processes the data on behalf of the data controller.

Processing - in relation to information or data means obtaining, recording, holding the information or data or carrying out any operation on the information or data.

See attached for further info.

There are  key principles that we have to follow:      https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/principles/

There are 12 key steps to help you prepare for the changes, please see link.  https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/

Hope this helps !

Please don't hesitate to contact Jan on 07968 325271 if you require any support.