05 Jun

GDPR is coming – will you be compliant?

By: Dave Newland

GDPR is coming – will you be compliant?

With just under 1 year now until GDPR comes into effect, companies need to review and assess how GDPR impacts them and put plans in place to be compliant.

GDPR Compliance requires detailed planning for the imposing obligations and requirements for businesses. Some of these requirements are to appoint a Data Protection Officer; the ability to erase data on request as well as providing any data breach notifications within 72 hours. Failure to comply with the legislation can include fines of up to 4% of annual worldwide turnover or €20,000,000.

Are you able to provide your clients with:

The categories of personal data you have about them in your files and databases which include what data you hold about the individual.
What countries its held or accessible from (if its cloud stored where the servers are located).
Do you know what data your 3rd parties hold which you disclosed.
What safeguards have put in place in relation to the 3rd parties.
How long you store personal date for.
Has any personal data in the past been disclosed inadvertently or via a security breach.
What business procedures and technologies are in place to monitor data.
The triaging and awareness measures put in place across your organisation to ensure conformity with GDPR.

At APS, we can help your organisation with:

Assessment to meet the specific requirements of GDPR
Privacy Impact assessment.
Data inventory and flows.
Compliance and monitoring solutions delivery.
Business Readiness and Training.
Liaising with external legal and regulatory teams.