Data protection

Do you know what your duties are under the General Data Protection Regulation?

Are you holding data longer than is strictly necessary?

Data protection has been hitting the headlines more and more frequently recently, with various organisations “losing” personal data and being subject to heavy fines from the Information Commissioner’s Office as a result. Many people have concerns about what information companies hold about us and how that data might be used.

In the UK, the collection and use of personal data is governed by the General Data Protection Regulation, and the Data Protection Act. Your business, if it is holding information about employees, customers, suppliers or anyone else, is affected and has particular obligations. In particular you will also need to ensure that you have a privacy policy in place.

If you have never really considered how well you protect your company data, or if you have not reviewed this for some time, then it is a good idea to carry out a data protection audit. This would:

• ensure that you are properly registered as a “data controller” with the Information Commissioner
• identify and address potential data protection or privacy weaknesses or problems within your business
• assess the level of compliance with current data protection or privacy laws applicable to your business
• put in place guidelines that can ensure continued compliance as the law changes.

If you feel your business would benefit from a privacy and data protection audit or if you do need a privacy policy please contact us.

Based in Stoke-on-Trent, Staffordshire, our commercial solicitors have a reputation for providing accurate advice, and dealing with complex problems in an efficient manner.   To find out more, contact us on 01782 577000.