<div style="display:inline;"> <img height="1" width="1" style="border-style:none;" alt="" src="//googleads.g.doubleclick.net/pagead/viewthroughconversion/1028731116/?value=0&amp;guid=ON&amp;script=0">
6 ISSUES FOR JUST £6 Subscribe to Business & Professional Life today CLICK HERE

GDPR: Stop rushing and get it right

PUBLISHED: 15:00 06 March 2018 | UPDATED: 15:00 06 March 2018

Darren Sherborne, Sherbornes Solicitors Ltd.

Darren Sherborne, Sherbornes Solicitors Ltd.


The new GDPR regulations come into force this spring, but there’s no need for businesses to panic. Darren Sherborne, of Sherbornes Solicitors Ltd, explains what to do

On the May 25, 2018, new regulations come into force concerning data protection. If you haven’t heard, the General Data Protection Regulations (“GDPR”) will impose considerable financial penalties for those who fail to comply. At least, that’s the headlines. The same headlines warn us that compliance is very difficult, and that time is running out. Of course, these make great headlines, and “experts” such as myself are gearing up for the influx of work as frightened business leaders race to comply. Add a little perspective to the pot and the reality may be a little different.

It is true that the new Regulations are complex and not easy to understand. It is also true that the Regulations set out financial penalties of up to 4% of turnover for any errant organisation. However, the Information Commissioner (a nice lady from Canada) has been expressing some frustration with the advisory industry for what has been described as scaremongering. I would go as far as saying that some of the commercially induced panic is actually doing more harm than good and I urge any business to stand back and ask whether their response to the new Regulations is properly thought through.

The reason for a slightly slower, more considered response are as follows:

• The Regulations have come about as a result of a European Directive. That cannot have force in English Law without an act of parliament. That act of parliament, at the time of writing (January 2018) is not yet finished. In other words, things may yet change.

• The Information Commissioner (ICO) has said, repeatedly, that her office will not be rushing out on the 25th May and begin prosecutions. In fact, the ICO has said the opposite. She has said that for the first year she expects business to prepare, but as long as they comply with the last Data Protection Act (1998) properly, it will not be a problem.

• It is also important to have some perspective on the ICO, which in the vast majority of cases only levy fines as a result of organisations self-reporting breaches. The ICO has also been less than a runaway success in its litigation. In fact one barrister told me that the ICO success rate in litigation is almost zero.

• One of the most important reasons for a considered approach is the nature of one of the restrictions. In order to process personal data, you will have to publish the reason for processing it. For the vast majority of processing, the reason for allowing you to process the data will be “consent”. However, once published, you cannot then change that reason, without going back to the data subjects and getting fresh consent. Therefore rushing and getting the reason for processing wrong will leave an organisation having to do the whole process again.

There is no doubt that the new Regulations are onerous and complex. However, there is every reason not to rush attempts at compliance. After all, the act of parliament is not even finished.

Simple initial steps can get you thinking along the right lines. Examine consent and the process you use to get consent (for processing data). It can no longer be by means of a pre-ticked box, or lost in terms and conditions. It will need to be a separate document, that people can opt into, not out of and the mechanism for withdrawing consent will need to be just as easy as it was to provide consent.

Think also about transmitting sensitive data. You will need a process of protecting it during transmission. That may be encryption or some other method, but don’t just buy a policy off the shelf and then not follow it. If you do this, you will be wasting the one year grace period the ICO is giving, which could be used to try and test procedures, so that compliance does not become the rushed minefield that some organisations are apparently wading into blindly.

Darren Sherborne is a Senior Employment Solicitor at Business law firm Sherbornes Solicitors Ltd in Cheltenham.


Welcome , please leave your message below.

Optional - JPG files only
Optional - MP3 files only
Optional - 3GP, AVI, MOV, MPG or WMV files

Please log in to leave a comment and share your views with other Cotswold Life visitors.

We enable people to post comments with the aim of encouraging open debate.

Only people who register and sign up to our terms and conditions can post comments. These terms and conditions explain our house rules and legal guidelines.

Comments are not edited by Cotswold Life staff prior to publication but may be automatically filtered.

If you have a complaint about a comment please contact us by clicking on the Report This Comment button next to the comment.

Not a member yet?

Register to create your own unique Cotswold Life account for free.

Signing up is free, quick and easy and offers you the chance to add comments, personalise the site with local information picked just for you, and more.

Sign up now

More from Cotswold Life


Imposing manor houses, quiet medieval villages, idyllic swathes of countryside - the Cotswolds offers a lot for location scouts in the film business. We pick 19 famous filming locations in the Cotswolds, as seen on screens big and small

Read more

A bracing walk up to the summit of Bredon Hill is the perfect way to see in the Spring. A local saying warns ‘When Bredon Hill has on his hat, men of the vale beware of that’, but whatever the weather the charm of Elmley Castle and its inn will more than compensate!

Read more

With an average audience of 2.5 million viewers and a global audience, it’s safe to say Father Brown is a hit. We talk through the gorgeous Cotswold villages and locations that have been used as the backdrop to BBC One’s popular crime-solving drama...

Read more
Yesterday, 14:50

Conference date announced with early bird tickets now on sale

Read more
Wed, 17:26

We’ve teamed up with Prescott Bike Fest to offer five readers a pair of tickets – and one lucky winner the chance to enjoy a thrilling passenger ride experience in either a Morgan Three Wheelers or with a racing sidecar team

Read more
Wed, 14:55

We look through the keyhole of some of the Cotswolds’ most luxurious houses on the property market

Read more
Wed, 14:27

Our editor Mike Lowe explains why we shouldn’t “allow our displeasure at the antics of the big charities to deter us from supporting the local charities which do so much good work.”

Read more
Wed, 10:57

Cllr Caroline Evetts hosted a glittering evening to more than 100 people, the masked ball was held to support the Mayor’s three charities

Read more
Wed, 10:41

There will opportunities to find out about employment opportunities when Stagecoach West holds a recruitment day at its depot in London Road, Gloucester

Read more
Wed, 10:32

Cirencester’s new Barn Theatre is up and running with its first production: a musical adaptation of Frances Hodgson Burnett’s classic children’s book, The Secret Garden. Katie Jarvis is utterly captivated...

Read more
Tue, 14:21

According to many, there’s no such thing as a free lunch. This may be true, but, thanks to Carluccio’s there is now such a thing as a free breakfast, as long as you wear a certain item of clothing

Read more
Tue, 11:25

The Cotswold Life Food & Drink Awards is undoubtedly one of the biggest events in the Cotswold calendar and this year we’ll be celebrating our 16th anniversary

Read more
Tue, 10:58

It’s easy to buy a da Vinci masterpiece...you just transfer $450 million to your current account and keep bidding. We talk to Cheltenham’s Fresh: Art Fair co-founder Anthony Wardle about the nuances of buying contemporary art

Read more
Tue, 10:58

This year’s ChipLitFest boasts an impressive line-up of names from the media and literary world

Read more
Great British Holidays advert link

Newsletter Sign Up

Sign up to the following newsletters:

Sign up to receive our regular email newsletter

Topics of Interest

Food and Drink Directory
A+ Education

Subscribe or buy a mag today

subscription ad

Local Business Directory

Cotswold's trusted business finder

Job search in your local area

Property Search