Posts

Showing posts from February, 2018

Client Blog: GDPR – Time to Start your Journey to Compliance!

Image
If you haven’t done so already, now is definitely the time to start your planning in respect of GDPR. GDPR is the General Data Protection Regulation, which is already in place in the UK. However, it will come info force from 25 th  May 2018 – by which time your organisation truly does need to be compliant and to have a framework in place which demonstrates this. Furthermore, in case you are waiting to see what happens in respect of Brexit – don’t. Whether the UK remains in the EU or not will make absolutely no difference. As of May 2018, your data should be secure and your systems should support privacy by default. The ICO (Information Commissioner’s Office) will be in a position to impose stiff administrative fines on those who exhibit serious data protection failings. With fines starting at €10m or 2% of the previous year’s global turnover (whichever is the higher), these are no “slap on the wrist”. In addition, on top of the above fines, organisations must take into...

Client Blog: GDPR – What is a Subject Access Request?

Image
GDPR is the General Data Protection Regulation, which is already in place in the UK. However, it will come into force from 25 th  May 2018 – by which time your organisation needs to be compliant and to have a framework in place which demonstrates this compliance. As of May 2018, your data should be secure and your systems should support privacy by default. The introduction of new technological capabilities and the adoption of a variety of digital channels has enabled most companies to gather an unprecedented amount of customer data. GDPR has been designed to give European citizens more control over the data that organisations collect, how they store it and how that information is then used. Furthermore, the general public will be able to request a copy of all data that is being held by a company by using a Subject Access Request (SAR). These have been available for a while, however new rules mean that as of May this data must be produced within 30 days and free of charge. ...