One year countdown to GDPR: What you need to consider.

As discussed in our previous blog post there is just one year to go before the new EU GDPR (General Data Protection Regulation) comes into action. It is vital that all organisations comply with the new regulation in plenty of time of the deadline on May 25th 2018.
Here we go through the key area your organisation will need to focus and action on.

1. Determine where personal data is stored.
It is very important that all methods of storing personal data are accounted for, from individual devices to external hard drives and cloud storage systems. Physical sign in books, listing visitor & pupils names, contact numbers and vehicle reg will also need to comply with the new regulations. We're able to help with digital sign in solutions should they be necessary. ( Contact us for more information & visit our latest blog post on making this switch & how we can have you up and running.)

2. Align everyone in the organisation.
Ensuring everyone in the organisation is up to date with the new regulation is key, this includes IT, marketing, customer support and admin teams.

3. Actioning new processes.
From making sure there is an unsubscribe/opt out option with all marketing materials sent out to ensuring personal data files are encrypted and secure, make sure your organisation complies with every aspect of the regulation in plenty of time. Allowing individuals to have access to their data, should they wish, is also key.

4. Audit preparation.
Incase of an audit request, ensure you're complying with proper data governance, security and monitoring. It should be easy to access all data to those in the business who need to, with it being clear who has access to what and what data is being used for which projects.

If you're worried about ensuring your organisation complies with GDPR or need some help putting some of these actions in place, give us a call on 0117 2140 299 or contact us here.

Quick Top Tip
Have all data stored in one centralised location. By doing this, teams are able to access all data when needed, an individuals' request for their data information or changes can be actioned quickly and potential audits will be easy to prepare for.