General Data Protection Regulation (GDPR) Guidelines

Data Protection Self Assessment- (GDPR)

Not long enough to the introduction of the new General Data Protection Regulation (GDPR), the Federation of Small Businesses (FSB) is making aware to all small and medium-sized enterprises (SMEs) that what needs to be done and the time is limited for them to prepare.

The business group stated that small businesses face an ‘uphill challenge’ in ensuring that they are compliant by the date when GDPR takes effect of 25 May 2018.

Under the new rules, organisations which collect, store and process individuals’ personal data will be subject to new obligations, with an increased emphasis on accountability and transparency. The financial penalties for failing to comply are severe, with fines costing up to €20 million or up to 4% of total annual worldwide revenue, whichever is the greater. (GDPR)

Mike Cherry, National Chairman of the FSB said:

‘As the GDPR deadline swiftly approaches, there is a real danger that many small businesses are yet to have adequately prepared for the changes. Fortunately for these businesses, there is still time on the clock to start, or finish, their preparations.’

‘The GDPR is the largest shake-up of data protection laws for years, and whether you are a personal trainer or a consultant, most businesses will have to implement changes to their current practices to make sure they are complying with the new rules.’

Further information on the (GDPR) can be found on the ICO website. Click Here!

Assessment Toolkit by ICO for (GDPR)

This self assessment toolkit has been created with small organisations in mind by ICO. It will be most helpful to small to medium sized organisations from the private, public and third sectors.

Good information handling makes good business sense. You’ll enhance your business’s reputation, increase customer and employee confidence, and by making sure personal information is accurate, relevant and safe, save both time and money.

Use these checklists to assess your compliance with data protection law and find out what you need to do to make sure you are keeping people’s personal data secure. Once you have completed each self assessment checklist a short report will be created suggesting practical actions you can take and providing links to additional guidance you could read that will help you improve your data protection compliance.

Before undertaking our Data protection assurance self assessment checklists (GDPR), you should first determine whether you process personal data as a “controller” or “processor”. The definition of these two terms can be found in our Guide to the GDPR.

In some instances, you will process personal information as both a controller and a processor. When this is the case, we would advise you complete both checklists.