What: The General Data Protection Regulation (GDPR) started to be enforced on 25th May 2018. This sits alongside the new Data Protection Act – Data Protection Act 2018 – which replaces the Data Protection Act 1998.

Why: The old data protection laws were implemented when there was no social media or cloud computing. It did not reflect how we now live and do business; we needed better ways to protect and use personal data.

Does Brexit make a difference? No, when Brexit happens the plan is to put the GDPR into UK law.

How to meet the GDPR requirements

1. Find out more about the GDPR principles to understand what needs to be done
2. Do an audit of all your personal data and determine where you already meet the GDPR principals
3. Plan out the changes required to processes, procedures and IT.
4. Implement the changes