The clock is ticking fast regarding compliance with the General Data Protection Regulation (GDPR), which will be fully enforced from 25 May 2018, with severe penalties for non-compliance.
The GDPR represents a significant compliance burden for almost all UK businesses, as even small businesses hold important personal information. If you have not already started your review of the impact of the GDPR on your business and begun to adapt, time is fast running out.
The Information Commissioner's Office (ICO) has launched a dedicated telephone service aimed at helping small businesses prepare for the changes in the law. The service goes live today, 1 November 2017, and is based around the ICO's existing public helpline. Those from small organisations seeking information on the GDPR should dial the helpline on 0303 123 1113 and select option 4 to be transferred to staff who can offer support.
In addition, the ICO has published a useful checklist entitled 'Preparing for the General Data Protection Regulation (GDPR) – 12 Steps to Take Now'.
The Data Protection Bill, which brings the GDPR into UK law, will add additional compliance requirements over and above those in European legislation.
The ICO has a guide to these differences, as well as further general guidance on preparing for the data protection reforms.