With one year to go until the General Data Protection Regulation (GDPR) comes into force across the European Union on 25 May 2018, the Office of the Information Commissioner and Data Protection Commissioner is today launching a website that will give advice and guidance to help island businesses get to grips with the new legislation.
Emma Martins (pictured), Data Protection Commissioner and Information Commissioner, said: “The microsite will become a useful portal for businesses looking for guidance. We will be uploading information as it becomes available.
“I want to give reassurance to businesses that GDPR is not a revolution, it's an evolution of current data legislation, so if you’re compliant currently, you have a great base from which to work.
“Local legislation is currently being drafted and Jersey’s and Guernsey’s governments have committed to a harmonised approach. When this legislation is finalised we can start to develop more detailed guidance.”
In order to be prepared, business are urged to have a detailed understanding of the data they hold and how they process this. This underpins the accountability aspect of GDPR. Any effective data governance strategy has to begin with a comprehensive data audit, which can be obtained by answering the following key questions:
• What personal data do you hold?
• Where is it from and where is it sent?
• Where is it stored and how is it secured?
• Why is it processed? For what purpose?
• How is the processing lawful and fair? Which of the conditions is met? Have you provided individuals with details about the processing of their data, including reference to the rights they have?
When it comes into force, the General Data Protection Regulation (GDPR) aims to strengthen data protection rights for individuals and harmonise compliance requirements for businesses.
For more information, business can go to www.thinkgdpr.org