Main Image

How to prepare for the GDPR

The GDPR comes into force on 25th May 2018, but organisations are recommended to start preparing for the changes as soon as possible to avoid non-compliance and ensure that any changes to processes and procedures can be tested, and that training can be implemented in good time.

Here is a list of some of the key items to consider and plan for when preparing your organisation for the General Data Protection Regulation:

  • Ensure understanding of the new GDPR obligations
  • Put in place HR, legal, IT and compliance teams
  • Carry out a data audit
  • Carefully assess current HR and marketing data, and related processing activities
  • Identify any gaps with complying with the GDPR
  • Marketing databases almost certainly will need to be cleansed
  • Review current privacy notices and update them
  • All information must be easy for individuals to understand
  • Assess the legal grounds for processing personal data
  • Check whether or not consent obtained meets GDPR requirements
  • Ensure procedure exists to assist prompt notification of any breach
  • Train employees to recognise and address data breaches
  • Put appropriate policies and procedures in place
  • Determine whether data protection officer must be appointed and think about how best to recruit, train and resource one

Want to know more?

Click here to view SA Law's dedicated GDPR hub page for more practical information, views and insight from our expert teams. 

CONTACT CHRIS

If you would like more information or advice relating to this article or an Employment law matter, please do not hesitate to contact Chris Cook on 01727 798089.

General Data Protection Regulation FAQs - What is the GDPR?

The General Data Protection Regulation, commonly referred to as the GDPR, is a set of data protection principles and rules that aim to protect data of…

more info
Companies: A caution over data protection

All organisations that process personal information must comply with the data protection principles enshrined in the Data Protection Act 1998 (the DPA),…

more info
What should you do to ensure compliance with the data protection act

The Court of Appeal (CA) has overturned the High Court decision that data controllers can refuse to comply with a data subject access request on the basis…

more info