Thursday 22 February 2018

Surely the GDPR doesn't apply to us?

It probably does.

The GDPR applies to almost every organisation in the UK.

For example, if you have employees you will have to store their details somewhere and that is 'Processing' in GDPR terms, even if it is done on paper!

If you think you might be exempt then check carefully on the ICO website as linked below

https://ico.org.uk/for-organisations/business/



Monday 22 January 2018

What is the GDPR?

General Data Protection Regulations

GDPR is a set of new Regulations that come into Law on the 25th May 2018.  There is a LOT of news about the GDPR with many web pages making headlines about the massive fines and other penalties associated with non compliance.

Overall the GDPR is a good thing™  We like that companies should try to take care of our data.  How happy would you be if your employer published your name, address and pay details on the Internet?

We especially like that when companies and large organisations start making decisions based on our data they are legally obliged to make sure that data is accurate.  Imagine being turned down for a loan because the lenders could not be bothered to get your details right?

So the GDPR is coming (even if/when we exit the EU it will be enshrined in UK law) so we are here to help you make a plan and get it documented and, most importantly, implemented.

Friday 19 January 2018

Welcome to GDPR Basics

We have worked through the ICO 12 step plan for our training centre and found it quite daunting at first.  There are many concepts that were hard to understand and we had to speak to specialists to get the correct answers.

Many of our friends and clients have asked what they need to do so we have developed a simple portfolio which covers the basic concepts and allows a small business to work through and be confident that they have addressed the requirements of the GDPR.

We must stress that this is the 'BASICS' - not GDPR Advanced or GDPR Exhaustive.  If you have complex requirements such as handling children's data or very sensitive data or exporting data outside the EU then we are going to point you towards a specialist who can help with your particular requirements.

For those companies who deal primarily B2B or who have very simple data flows then we can help you work through the 12 point ICO plan then formulate and document your strategy.