Get ready for the new data protection rules

12th September 2017

The government is to introduce new data protection rules under the General Data Protection Regulation (GDPR) which takes effect from 25 May 2018.

Under the GDPR businesses will have increased obligations to safeguard the personal information of individuals which is stored by the business. These rules apply to the information of customers, suppliers or employees. Generally for those who are currently caught by the Data Protection Act it is likely that you will have to comply with the GDPR.

GDPR will apply to data ‘controllers’ and ‘processors.’ Processing is about the more technical end of operations, like storing, retrieving and erasing data, whilst controlling data involves its manipulation in terms of interpretation, or decision making based on the data. The data processor processes personal data on behalf of a data controller. Obligations for processors are a new requirement under the GDPR.

The GDPR applies to personal data which is wider than under the Data Protection Act (DPA).

One key change to the current DPA rules is that those affected will have to show how they have complied with the rules. Proof of staff training and reviewing HR policies are examples of compliance.

Under GDPR, higher standards are set for consent. Consent means offering people genuine choice and control over how their data is used.

Overall, the aims of GDPR are to create a minimal data security risk environment, and to protect personal data to rigorous standards. For most organisations, this will entail time and energy getting up to speed with compliance procedures. Reviewing consent mechanisms already in place is likely to be a key priority. In practice, this means things like ensuring active opt-in, rather than offering pre-ticked opt-in boxes, which become invalid under the new rules.

Organisations will also have to think about existing DPA consents. The ICO’s advice is that:

‘You should review how you seek, record and manage consent and whether you need to make any changes. Refresh existing consents now if they don’t meet the GDPR standard.’

Where the current consents do not meet the new GDPR then action will be needed.

The fines for non compliance are severe at up to 20 million euros or 4% of total worldwide annual turnover (if higher).

The Information Commissioner’s Office (ICO) has published some very useful information and a 12 step planning guide to help organisations get ready ahead of the May 2018 deadline.

 

 

For further information and advice get in contact with our team at Decisive:IT who can offer practical advice and take you through the steps you need to take to ensure you are compliant with the upcoming GDPR changes.

 

Other helpful links: ICO getting ready GDPR 12 steps.pdf



 
Other items in Blogs
 
Lisa Smith
13th July 2020 COVID-19 – Eat Out to Help Out Scheme

Following the Chancellor’s recent announcement, HMRC has issued guidance for businesses to register for the Eat Out to Help Out Scheme, which will enable them to offer a discount to diners from 3 August 2020.   The Scheme can be used:   all day every Monday, Tuesday and Wednesday from 3 to 31 August 2020,…

Read More »

Lisa Smith
9th July 2020 REMINDER – Deadline for SEISS grant is 13 July 2020

Further to my blog on 22 June 2020 (please see below), just a reminder that the deadline for applying for the first SEISS grant is 13 July.   Those eligible under the Self-employment Income Support Scheme (SEISS) will be able to claim a second and final grant in August 2020.The grant will be worth 70%…

Read More »

Lisa Smith
9th July 2020 VAT savings for the hospitality and tourism industries

As part of the Government’s measures to try to stimulate the economy, the Chancellor has announced a reduction in the rate of VAT payable by the hospitality and tourism industries.   From 15‌‌‌ ‌July 2020 until 12‌‌‌ ‌January 2021, the rate of VAT will be reduced to 5% on any eat-in or hot takeaway food…

Read More »

Ian Piper
8th July 2020 Summer Budget: What’s in it for SME’s?

As we all slowly unwind from Coronavirus lock-down and the end of furlough support rapidly approaches, Chancellor Rishi Sunak has taken the unusual step of making fiscal announcements in the Summer, to try and head off a recession. New initiatives, of interest to SME’s, include:   Job Retention Bonus – £1,000 bonus paid per employee…

Read More »

Edward Hopkins
7th July 2020 Tax Codes: Do you understand yours?

Your tax code can be confusing but it is extremely important to understand. That small string of numbers and letters informs your employer or pension provider how much tax free allowance you are entitled to.   An incorrect code will have very real consequences. If too much tax is being deducted from your monthly income,…

Read More »

Nick Edgley
3rd July 2020 31 July: Is full amount of income tax payable?

Many taxpayers who are required to file a self-assessment tax return to HM Revenue & Customs should now be preparing for their next half-yearly tax payment which is due by 31st July. The amount payable is the second payment-on-account for the 2019/20 tax year and is automatically calculated as half of the total tax liability…

Read More »