Description
Understand your GDPR obligations and prioritise the steps you need to take to comply The GDPR gives individuals significant rights over how their personal information is collected and processed, and places a range of obligations on organisations to be more accountable for data protection. The Regulation applies to all data controllers and processors that handle EU residents’ personal information. It supersedes the 1995 EU Data Protection Directive and all EU member states’ national laws that are based on it – including the UK’s DPA (Data Protection Act) 1998. Failure to comply with the Regulation could result in fines of up to €20 million or 4% of annual global turnover – whichever is greater. Topics covered include: – The DPO (data protection officer) role, including whether you need one and what they should do; – Risk management and DPIAs (data protection impact assessments), including how, when and why to conduct one; – Data subjects’ rights, including consent and the withdrawal of consent, DSARs (data subject access requests) and how to handle them, and data controllers and processors’ obligations; – How to adjust your data protection processes to comply with the GDPR, and the best way of demonstrating that compliance; and – A full index of the Regulation to help you find the articles and stipulations relevant to your organisation. Supplemental material While most of the EU GDPR’s requirements are broadly unchanged in the UK GDPR, the context is quite different and will have knock-on effects.?You may need to update contracts regarding EU–UK data transfers, incorporate standard contractual clauses into existing agreements, and update your policies, processes and procedural documentation as a result of these changes. We have published a supplement that sets out specific extra or amended information for this pocket guide. Visit: www.itgovernancepublishing.co.uk/topic/uk-gdpr-supplemental-material
Reviews
There are no reviews yet.