GDPR - the countdown is on...
Is your organisation ready for the changes coming into force on 25 May 2018?
Like it or not, on 25 May 2018 changes are on the way. The date marks more than just the introduction of GDPR - it marks the date that GDPR will become legally binding.
Is your organisation ready for any changes? Do you really understand where the risk lies within your organisation and what needs to be addressed to reduce and remove those risks?
It can all seem pretty daunting but essentially GDPR is about giving individuals control of thier personal data i.e the right to know what is being held, how, for what purpose and the right to be forgotten.
One of the other biggest changes will be the regulatory powers that will be introduced - larger fines for failure to comply to GDPR or for data breaches.
So...where to start?
Start by taking it in steps.
Focus on the areas that really need fixing and be ready with an action plan of what to do if something should go wrong.
Doing an intial audit of your processes may seem like a daunting prospect, however choosing to ignore it all in the hope that it will just go away is not really an ideal option.
Look at processes where your organisation collects, holds and uses personal data:
- are there any risks to the data in these processes?
- what steps are needed to remove the risks?
- what resource can be given to address the risks and implement good practice going forward?
- what will your organisation do if there is a data breach?
There are a number of great resources readily available on GDPR and a good place to start is the Information Commissioners Office (ICO) website.
We have also produced a checklist of some of the key points to think about to get you started. If you want to have a chat about taking the first steps to getting GDPR ready, contact Anita Doris at anita.doris@cavanaghkelly.com
To view further information click here.
Whilst every effort has been made by CavanaghKelly to ensure the accuracy of the information here, it cannot be guaranteed and neither CavanaghKelly nor any related entity shall have liability to any person who relies on the information herein. Information given here is for guidance only. Detailed professional advice should be taken before acting on any information contained herein. If having read the guidance here, you would like to discuss further; a member of our team would be pleased to help you.