We can show you how to plan and comply with GDPR so you can get on with running your business.
What should you do now? Well, the ICAEW Institute of chartered accountants England and Wales suggests:
"As a start, you must evaluate whether your existing practices and procedures meet GDPR standards and then plan how you will address any shortcomings. This must be done in relation to any personal data you process or hold, whether on behalf of clients or your business. As a minimum, contract clauses on the sharing of data with others should be reviewed to check for compliance with the GDPR."
Background
After four years of preparation and debate the GDPR was finally approved by the EU Parliament on 14 April 2016. It will enter into force 20 days after its publication in the EU Official Journal and will be directly application in all members states two years after this date. Enforcement date: 25 May 2018 - at which time those organisations in non-compliance will face heavy fines.
In response to a question on Brexit at the select committee meeting, Karen Bradley, secretary of state for culture, media and sport, said: “We will be members of the EU in 2018 and therefore it would be expected and quite normal for us to opt into the GDPR and then look later at how best we might be able to help British business with data protection while maintaining high levels of protection for members of the public.”
As Computer Weekly has reported previously, UK businesses could face up to £122 Billion in penalties for data breaches when the new EU legislation comes into effect.
Writing for Computer Weekly in June 2016, Yves Le Roux, co-chair of the (ISC) Emea Advisory Council and technology strategist for CA Technologies, said 79% of Britain’s medium and large companies are unsure about their compliance, and many do not understand how the burden of compliance will be divided up.
PwC reported in its 2015 Information Security Breaches Survey that 90% of large companies have suffered a data breach over the last year with 74% of SMEs suffering the same fate. In addition IBM and Ponemon Institute recorded in their 2015 Cost of Data Breach Study the average loss of a data breach was $3.79m. The Online Trust Alliance discovered that 90% of data breaches could have been prevented using critical security best practices as 29% were the result of employee error (intentional or accidental) due to a deficiency in internal controls.
The Institute of Directors (IoD) stated in March 2017: "The new General Data Protection Regulation, which comes into effect in next May, will make companies much more accountable for their customers’ data. The IoD and Barclays are urging business leaders to step up their preparations now."
"This isn’t an IT issue, it’s a business survival issue."
Key Facts
Take a test to see how it could affect your business
How can we prepare you?
What should you to do next?
Contact Us
Margareta Zaveri MSc Bus, CIRM - Kantarell Limited
+44 7852 175866 - WhatsApp, Message & Call