GDPR – As The Dust Settles…

Some Businesses have been worrying about GDPR d-day for years!

With all of the press coverage of the new regulations, the amount of “consent” emails and also the threat of a 20 million Euro fine, it’s not surprising many of us felt uneasy about 25th May! 

Having said that, on May 25th the Information Commissioner reassured us that small businesses that do not handle large amounts of data will not be under close legal scrutiny. 

So for many SMEs, there is no need to panic!

It is recognised that all businesses will not be entirely GDPR compliant as of yet, but that they should be working towards data protection compliance. GDPR Compliance is important not only to comply with the law but also build trust with your users and in your brand.

We can also be reassured that the ICO is not just there to fine and bring legal action, but also to help and guide business and organisations through the change.

A quick GDPR checklist: 

1. See what data you have
2. Come up with a policy that means you comply with the law
3. Make sure that your clients and prospects know what you are doing with their data – this will usually be via a privacy notice on your website
4. Provide a privacy notice to all employees

Wider GDPR considerations: 

1. Conduct a data flow audit on your business
2. Train staff on the new regulations
3. Consider appointing a data protection manager or officer if necessary
4. Review current contracts with suppliers and customers 
5. Prepare tools and processes to document and implement compliance
6. Ensure policies are in place for data subject access requests
7. Prepare a plan for data breaches and notification requirements 
8. Update your privacy policy for your website

It’s not too late to put these steps in place. Our team of specialist solicitors can  assist you to ensure you are GDPR compliant – don’t hesitate to get in touch with our experts by calling 01202 525333, or alternatively by sending us an email enquiry.