{"id":13112,"date":"2017-04-19T15:39:32","date_gmt":"2017-04-19T15:39:32","guid":{"rendered":"https:\/\/digital-sentinel.com\/?p=13112"},"modified":"2017-04-19T15:39:50","modified_gmt":"2017-04-19T15:39:50","slug":"gdpr-2018-data-protection-changes","status":"publish","type":"post","link":"https:\/\/digital-sentinel.com\/regulation\/gdpr-2018-data-protection-changes\/","title":{"rendered":"GDPR: 2018 data protection changes"},"content":{"rendered":"
Changes to data protection rules will have major implications for your business<\/h2>\n
\n
The EU General Data Protection Regulation (GDPR) has become law.<\/p>\n
There’s good news and bad. On one hand, you have until 25 May 2018 to comply with the legislation. On the other, while that may sound a long time, there’s a lot to do, so start your preparations now.<\/p>\n
The GDPR replaces the old Data Protection Directive, which was brought into play back in 1995, and updates it to keep pace with the changing data-protection landscape of the modern online world, protecting the privacy and security of all the data collected by organisations, large and small, across the European Union.<\/p>\n
So, while some might see the GDPR as “yet another regulation from Brussels”, it protects an important aspect of human rights, and improves information security for us all – and don’t think for a moment that just because the UK has voted to leave the EU it’s any less relevant to your company.<\/p>\n
Why is GDPR necessary?<\/strong><\/p>\n
As individuals, we’re expected to hand over personal data as part of some sort of online transaction. We do it when we book a flight online, access our bank accounts, or keep in touch with our social circles.<\/p>\n
We accept this as part of living in the modern world. But that doesn’t mean we shouldn’t be concerned about what happens to that data once it’s been handed over. Hopefully, we don’t need to explain why it’s important for individuals to know what personal data about them is stored by third parties, and what measures are in place to prevent a breach. The GDPR is designed to give EU citizens more transparency and control over just that.<\/p>\n
If you’re managing a business, you might be worrying about the cost of this latest layer of red tape. The GDPR simplifies the regulatory environment for most businesses, while at the same time bringing information security front and centre, which is never going to be a bad thing.<\/p>\n
The principle at the heart of the GDPR is that personal data “can only be gathered legally, under strict conditions, for a legitimate purpose”. It codifies such things as a right to be forgotten, as well as a data breach notification requirement. Failure to comply can lead to financial penalties, so it isn’t something you can ignore.<\/p>\n
The Brexit (non)-issue<\/strong><\/p>\n
It matters not a jot that the UK voted to leave the EU: your business still needs to comply with GDPR. Prior to the vote, we spoke to John Culkin, director at Crown Records Management, who warned: “It would be tempting for businesses to think that if the UK leaves the EU then the GDPR rules wouldn’t apply to them. That isn’t the case.<\/p>\n
“Although an independent Britain wouldn’t be a signatory of the regulation, it would be impossible for businesses to avoid its implications. Any company holding identifiable information of an EU citizen, no matter where it’s based, needs to be aware.”<\/p>\n
At any rate, the General Data Protection Regulation merely reinforces certain aspects of good information governance, which all companies should already be embracing anyway.<\/p>\n
“There’s no point ignoring privacy by design, when that is good procedure” Culkin concludes. “The same is true of measures to protect a business from data breaches. These have reputational as well as financial implications \u2013 no matter who imposes the fine.”<\/p>\n
The UK government has published a consultation looking for comment from businesses and other organisations on possible exemptions and adjustments to GDPR and how the regulations will apply in UK law.<\/p>\n
The \u201ccall for views\u201d by the Department for Culture, Media and Sports (DCMS) on the General Data Protection Regulation derogations also seeks opinions on the cost impact for businesses.<\/p>\n
The deadline for comments is 10 May. The document can be viewed by clicking on this link<\/a>.<\/p>\n