Insulate Magazine Issue 15

The only independent insulation industry trade magazine
Essential Insight
GDPR
General Data Protection Regulation
The General Data Protection Regulation
(GDPR) will affect every organisation that
collects, handles or processes any form of
data where an individual is personally identifiable.
It covers employee, supplier, client and prospect
and marketing data – from the Post Room to the
Board Room.
The new legislation comes into force on 25th May, 2018
and replaces the current Data Protection Act. In basic
terms, it is an upgrade and gives individuals far more
control over how organisations can use, store or transfer
their data. It requires organisations to be more transparent
and accountable regarding their use and handling of
personal data.
There is a lot of miss-guided information circulating,
which should be addressed:
Brexit means nothing. The Data Protection Bill is
going through Parliament and this will be known as
the Data Protection Act 2017.
Compliance with the current Data Protection Act,
or being ISO certified does not render you compliant
with GDPR – there are marked differences.
GDPR is not Y2K all over again. GDPR compliance
is a Regulation - a legal requirement - with
the potential for fines to be administered in the event of
non-compliance.
There are three key terms to consider when preparing
for GDPR.
Accountability – you will need to document and
account for all data you have in-house and decisions
you make in the GDPR preparation process.
If you can document and justify your legal basis for
processing, then this is your case for retaining the
data.
Transparency – be open and transparent with the
data subject as to what you will be doing with the
data and why. What third parties will have access to
the data?
Trust – if you achieve the accountability and
transparency stages, then you gain the trust of the
data subject.
The benefits of getting it
right and embracing
GDPR are huge
www.insulatenetwork.com
31