Guidelines to GDPR

U nderstanding the new regulations for the already-instated General Data Protection Regulations, or GDPR, can be a difficult task. Here is a quick guide to understanding the details on possible fines as well as what can be considered as data in your workplace. On May 25th, 2018, the GDPR regulations will go into effect, strengthening data protection laws in Europe while also increasing the obligations and responsibilities for organisations and businesses in how they collect, use and protect personal data. In order to comply completely with the new regulations, create an inventory that examines each piece of data your organization holds under the following guidelines; why are you holding it? How did you obtain it? Why was it originally gathered? How long will you retain it? How secure is it, both in terms of encryption and accessibility? And do you ever share it with third parties and on what basis might you do so? This will give you a good understanding of the type of data you have in your workplace and if it is legal to have such data. Furthermore, within the boundaries of fines, it is important to note that the most serious of fines will come along with the failure to report a breach in your data protection as well as a fine for allowing the breach to occur in the first place.