Burnetts logo

GDPR: Top 5 Tips for Businesses

GDPR: Top 5 Tips for Businesses

With time running out in the lead up to GDPR, Data law expert Vaughan Jones gives his top five practical tips for businesses to help prepare.

The General Data Protection Regulation (GDPR) will come into force on 25 May 2018, replacing current legislation, the Data Protection Act 1998 (DPA).

Due to technological advances since the DPA was introduced many years ago, there has been a huge increase in the volume of digital information that is stored. The current system of data protection is therefore no longer suitable.

The GDPR aims to make data protection consistent across Europe, minimise the risk of breaches and uphold the protection of personal data.

5 Top tips for businesses

In the face of the new regulations, my top tips for businesses are:

  1. Don’t collect data about people that you don’t really need – the GDPR is big on data minimisation: think about why you hold data about individuals.
     
  2. Consider how long you keep data for: you shouldn’t retain personal data for longer than is necessary.
     
  3. Review your privacy policy and fair processing notices so that they are GDPR-compliant.
     
  4. Make sure that your staff who handle data protection requests are up to speed with the new rights that the GDPR gives to individuals (such as that you may no longer charge for dealing with subject access requests).
     
  5. Keep a record of your GDPR preparations so that you can show that you are GDPR-compliant: the new regulation requires you to be accountable for this.

It is recommended that those within your organisation are aware of, and understand, the changes to data protection due to the implementation of the GDPR and its impact.

If you have any questions relating to data protection and the GDPR, please contact Vaughan Jones on 01228 552321 or email rmvj@burnetts.co.uk.

About the author

Vaughan Jones profile photo

Vaughan Jones

Vaughan Jones is Partnership Chair and a specialist in corporate law.

Published: Thursday 29th March 2018
Categorised: Commercial Client, Corporate Law, Education, Employment, HR, Information Law, Lawyers for Business, Legal Services in Newcastle, Penrith, Public Sector, Regulatory, Small Business / New Business, Tourism & leisure, West Cumbria

All Factsheets