GDPR (General Data Protection Regulation) is a new regulation which came into effect on 25 th May 2018 which affects any organisation, club or association that collects or processes personal data.
What is personal data? Any data that can clearly identify a person – i.e telephone number; personal email; photographs; address; date of birth; bank details; ethnic origin; religion;criminal records; medical & health records; pension details. This is not information on other companies / it is personal data.
This means that all organisations must carefully consider the data they receive, hold or process within the company, how it is used, stored, shared and retained; as there will now be a number of requirements under the new regulation. Penalties will be in force should an organisation fail to implement the new requirements or in the instance of unreported data protection breach.
Any individual will now have the “right to be forgotten” and therefore every organisation must have the policies, processes and mechanisms in place to show evidence that they have carried out the review and assessment to complete this.
To this end, I-Net Consultancy Services have developed our RADAR package to assist in assuring compliance to GDPR requirements and we offer the following...