6 ISSUES FOR JUST £6 Subscribe to Business & Professional Life today CLICK HERE

GDPR: Stop rushing and get it right

PUBLISHED: 15:00 06 March 2018 | UPDATED: 15:00 06 March 2018

Darren Sherborne, Sherbornes Solicitors Ltd.

Darren Sherborne, Sherbornes Solicitors Ltd.

Archant

The new GDPR regulations come into force this spring, but there’s no need for businesses to panic. Darren Sherborne, of Sherbornes Solicitors Ltd, explains what to do

On the May 25, 2018, new regulations come into force concerning data protection. If you haven’t heard, the General Data Protection Regulations (“GDPR”) will impose considerable financial penalties for those who fail to comply. At least, that’s the headlines. The same headlines warn us that compliance is very difficult, and that time is running out. Of course, these make great headlines, and “experts” such as myself are gearing up for the influx of work as frightened business leaders race to comply. Add a little perspective to the pot and the reality may be a little different.

It is true that the new Regulations are complex and not easy to understand. It is also true that the Regulations set out financial penalties of up to 4% of turnover for any errant organisation. However, the Information Commissioner (a nice lady from Canada) has been expressing some frustration with the advisory industry for what has been described as scaremongering. I would go as far as saying that some of the commercially induced panic is actually doing more harm than good and I urge any business to stand back and ask whether their response to the new Regulations is properly thought through.

The reason for a slightly slower, more considered response are as follows:

• The Regulations have come about as a result of a European Directive. That cannot have force in English Law without an act of parliament. That act of parliament, at the time of writing (January 2018) is not yet finished. In other words, things may yet change.

• The Information Commissioner (ICO) has said, repeatedly, that her office will not be rushing out on the 25th May and begin prosecutions. In fact, the ICO has said the opposite. She has said that for the first year she expects business to prepare, but as long as they comply with the last Data Protection Act (1998) properly, it will not be a problem.

• It is also important to have some perspective on the ICO, which in the vast majority of cases only levy fines as a result of organisations self-reporting breaches. The ICO has also been less than a runaway success in its litigation. In fact one barrister told me that the ICO success rate in litigation is almost zero.

• One of the most important reasons for a considered approach is the nature of one of the restrictions. In order to process personal data, you will have to publish the reason for processing it. For the vast majority of processing, the reason for allowing you to process the data will be “consent”. However, once published, you cannot then change that reason, without going back to the data subjects and getting fresh consent. Therefore rushing and getting the reason for processing wrong will leave an organisation having to do the whole process again.

There is no doubt that the new Regulations are onerous and complex. However, there is every reason not to rush attempts at compliance. After all, the act of parliament is not even finished.

Simple initial steps can get you thinking along the right lines. Examine consent and the process you use to get consent (for processing data). It can no longer be by means of a pre-ticked box, or lost in terms and conditions. It will need to be a separate document, that people can opt into, not out of and the mechanism for withdrawing consent will need to be just as easy as it was to provide consent.

Think also about transmitting sensitive data. You will need a process of protecting it during transmission. That may be encryption or some other method, but don’t just buy a policy off the shelf and then not follow it. If you do this, you will be wasting the one year grace period the ICO is giving, which could be used to try and test procedures, so that compliance does not become the rushed minefield that some organisations are apparently wading into blindly.

Darren Sherborne is a Senior Employment Solicitor at Business law firm Sherbornes Solicitors Ltd in Cheltenham.

0 comments

Welcome , please leave your message below.

Optional - JPG files only
Optional - MP3 files only
Optional - 3GP, AVI, MOV, MPG or WMV files
Comments

Please log in to leave a comment and share your views with other Cotswold Life visitors.

We enable people to post comments with the aim of encouraging open debate.

Only people who register and sign up to our terms and conditions can post comments. These terms and conditions explain our house rules and legal guidelines.

Comments are not edited by Cotswold Life staff prior to publication but may be automatically filtered.

If you have a complaint about a comment please contact us by clicking on the Report This Comment button next to the comment.

Not a member yet?

Register to create your own unique Cotswold Life account for free.

Signing up is free, quick and easy and offers you the chance to add comments, personalise the site with local information picked just for you, and more.

Sign up now

More from Cotswold Life

Fri, 09:54

Celebrating the region’s successes in engineering, manufacturing and innovation, our worthy winners of the fourth annual Cotswold Life EMI Awards were announced at a glittering black-tie ceremony held at Cheltenham Racecourse

Read more
Wed, 16:14

Tracy Spiers takes Emily, daughter number two, who shares her love for anything historical, to this vibrant place and get lost in a heady mix of wild bears, Middle Age punishing devices, timber-framed buildings and live bees

Read more
Wed, 15:29

When Charles Martell became the latest High Sheriff of Gloucestershire, he started discovering things about the county he never knew – not to mention things about himself, too. Katie Jarvis spoke to him about saw pits, walnuts, peaceable towns and pink-headed ducks

Read more
Wed, 15:10

We can’t complain about the glorious summer we’ve enjoyed in this Cotswolds this year, and it’s been especially welcomed at our annual village fairs. Our editor Mike Lowe suggests some light-hearted modifications of our centuries-old tradition...

Read more
Wed, 14:16

“Rosconn is a customer centric business where the needs of the landowner are put first.”

Read more
Wed, 10:21

Did you attend the C2S and SsangYong Launch Event? If so, you could be in our social photos!

Read more
Wed, 09:34

The Gloucestershire-based firm of Business Advisers and Chartered Accountants will share their expertise to help boost companies’ exports

Read more
Wed, 09:21

“Venturefest has been at the heart of our county’s innovation and entre-preneurial community for so long that we have to make sure we keep innovating our-selves to maintain interest and support. I think we achieved that this year in so many ways!”

Read more
Tue, 16:41

The weekend is fast approaching and for those still deciding how to spend their Friday through to Sunday, we pick 5 of the best ways to spend your weekend in the Cotswolds

Read more
Tue, 16:18

The former Royal Mail sorting office in Oxford, renamed OxBox is to be given a new lease of life after being taken over by a rapidly expanding biotech company

Read more
Tue, 16:10

The UK’s growth index is at its highest level since 2005. Lucy Parford uncovers the companies behind the upturn

Read more
Tue, 11:59

The event will take place on Wednesday November 7 2018 at Hatherley Manor Hotel

Read more

Whether you’re thinking of keeping a couple of goats as pets or rearing a small herd for milking or meat production, Lizzie Dyer of Just Kidding can tell you everything you could possibly want to know about these idiosyncratic creatures

Read more
Mon, 16:39

St Mary de Crypt Church and the Old Crypt Schoolroom in Gloucester produced two world famous Christian leaders, schooled ‘Long John Silver’, and is the burial place of ‘Ebenezer Scrooge’

Read more

Newsletter Sign Up

Sign up to the following newsletters:

Sign up to receive our regular email newsletter

Our Privacy Policy

Latest Competitions & Offers

Topics of Interest

Food and Drink Directory A+ Education

Subscribe or buy a mag today

subscription ad

Local Business Directory

Property Search