55% of UK small business are unaware of the GDPR
May 2018 will see the implementation and enforcement of the EU General Data Protection Regulation (GDPR). This new legislation will change businesses’ legal responsibilities in the processing of personal data. Becoming compliant will enable businesses to avoid significant fines yet over half of the UK’s SMEs are still unaware of the legislation.
According to a recent survey, when questioned, a whopping 27% of senior decision makers within UK SMEs were unfamiliar with the changes to the data protection regulations.
Additionally, 20% of all respondents confirmed that their organisation was yet to implement procedures to prepare them for the GDPR.
Companies are facing substantial fines for non-compliance and it is vital that all companies take the necessary steps to prepare them for the changes that come into effect on 25th May 2018.
Under the new GDPR, it is critical for company-wide changes to be put in place to ensure compliance is met and procedures are followed from 25th May 2018 if not before.
The volume of personal data collected by companies and used around the world is constantly increasing. It is essential that all businesses understand how the new legislation will affect their company to ensure that they become fully compliant and begin using data differently in order to avoid large penalties. Controllers and processors need to understand what personal data they hold and how it’s being used so they can get a greater understanding of the challenges ahead.
It is essential for companies to implement more robust internal data policies, processes and procedures and factor in training and monitoring to ensure greater transparency surrounding the use of personal information.
To find out more about preparing for GDPR, download 5 key steps to GDPR readiness here.
Further guidance can also be found via the Information Commissioners Office website here.
Consent Management Solutions
Lead Consent is the latest data processing solution with auditable reporting and secure record storage. Lead Consent was devised with the new data protection regulation in mind to allow users to safely and securely manage their marketing data.
Lead Consent is a data processing solution that enables users to prepare their data for GDPR ‘readiness’.
Lead Consent’s entry level product ‘Lead Consent’ offers companies of all sizes, the ‘kit’ needed to bring their existing data into line with the new legislation which affects the way that the data of EU citizens is processed.
In advance of the GDPR enforcement date, this system will allow users to request the relevant consents from contacts within their historical databases. Proof of the consenting individuals is then stored safely and securely within Lead Consent, providing them with compliant marketing data for future processing.
The system provides a secure audit trail and storage of consents received and affords companies of all sizes the peace of mind that marketing data complies with the new GDPR stipulations. Once consent is received, organisations can continue to use this data for email, postal or telephone marketing purposes depending upon the level of consent supplied.
Once the cut-off date of 25th May is reached, organisations that do not obtain the relevant consents stipulated by the GDPR will no longer be able to market to their existing databases, irrespective of how they came across the data.
To prepare your marketing data for GDPR compliance ‘readiness’, sign up to Lead Consent today.
*This post should not be relied upon as legal guidance. If you are unsure about your obligations under the GDPR, you should seek legal guidance regarding the full scope of your compliance obligations and requirements to ensure that you are fully aware of every eventuality and consequence for non-compliance.