GDPR & Data Protection Solicitors

On 25^th May 2018, the data protection law changed and The General Data Protection Regulation, which is known as the GDPR, came into force.

The GDPR increases the safeguards for individuals regarding their personal data and it makes organisations more accountable for how they use it.

You will need to ensure that your organisation is compliant with the Regulation. Some key steps you should consider in your GDPR planning are:

1. Carry out an audit of your data processing activities

2. Check whether you need to appoint a Data Protection Officer

3. Review your protection and security measures for personal data

4. Understand whether you need to keep data processing records

5. Review and update privacy notices

6. Ensure that there is a GDPR compliant contract between you and any organisation which processes personal data for you such as HR, payroll, IT etc.

7. Make sure you understand when you are required to report a data security breach and ensure you know how you will handle it

8. Check whether you are transferring any personal data outside the European Economic Area as this is restricted

9. Plan GDPR training of staff

For help with The General Data Protection Regulation, please get in touch with John Chadaway.