How are you guys coping with GDPR compliance?

[swinny]

What is this anyhow?

[Steve Bullman]

Lots and lots more red tape

[GardenKit]

25 minutes ago, swinny said:

What is this anyhow?

Its a new compliance regulation called General Data Protection Regulation (GDPR). Its very complex but ALL business, however small, have to comply.

Basically it is to ensure that information you store about customers is secure, and that the customer is fully aware of how you use the information you store. He also has to give consent for you to keep data on file, and to use it to contact him.

Its much more involved than this and presumably has massive impact on big business practices, especially those holding sensitive information about customers, but ANY data held that can lead to identification of a customer counts.

For instance, even a clipboard in the front of the van with customer details on the job sheet is not secure.

 

Its truly massive, and we all have to comply or risk very large fines. 

 

I really don't understand how it impacts the small business, hence this thread.

[aspenarb]

I Just had a squint at this and other than parting with the registration fee and keeping the details of Mrs Miggins .69 Butthole Rd, Titsbury, Berks away from prying eyes there does not seem much to do.

https://government.diginomica.com/2018/01/22/gdpr-compliance-here-are-the-14-things-you-actually-need-to-do/

 

Extract

9. Smaller firms have less to do

Smaller firms – those defined as having 250 employees or less – do not have to comply with all GDPR rules as standard. If your organisation falls into this band, there’s no need to have documentation of why personal data is being collected and processed, the information you’re storing or how long for. Smaller firms are not required to maintain a record of processing activities unless this carries a risk to the rights and freedoms of data subjects, it is a regular occurrence, or it relates to certain data like criminal convictions and offences.

 

 

 

 

[richy_B]

Is it business to domestic (individuals) only? It doesn't seem to to cover business to business.

[Parker]

Has anyone got to the bottom of this and worked out what we should / shouldn't be doing?!

[Steve Bullman]

1 hour ago, Parker said:

Has anyone got to the bottom of this and worked out what we should / shouldn't be doing?!

You almost certainly have nothing to worry about, a generic policy will cover you

[Steve Bullman]

http://jamieking.co.uk/blog/cyber-security/policies/free-sample-privacy-policy.php

[Mark Bolam]

[Steve Bullman]

GDPR