GDPR is your company ready?

General Data Protection Regulation (GDPR)  will come into effect across the EU on 25th May 2018 replacing the existing Data Protection Act.

This new regulation introduced by the European Commission, main purpose is to strengthen Data Protection for individuals within the EU and to simplify these regulations for businesses operating inside & outside the EU by unifying the legislation.

The reforms will also address current challenges in the processing of personal data; including profiling, data portability and the ‘right to be forgotten’. User settings will automatically be privacy friendly and the development of products and services will take account of privacy considerations from the outset. Data Controllers will be obliged to maintain internal records of Data Processing activities. However, SME’s employing less than 250 will not need to maintain such records unless they process sensitive personal data or the data processing they undertake is not occasional or likely to result in a risk for the rights and freedoms of data subject’s.

All businesses will be obliged to comply with the regulation

The penalties for non-compliance comprise of a fine of up to 4% of worldwide turnover or €20 million (whichever is greater). Regulators strongly encourage the spreading of the message about privacy and security and this might have an impact on decisions about when to enforce as well as how much to assess in fines.

Do you have customer data that is collected online through Websites, Induction Systems, Hosting, Cloud Storage or Social Media?