GDPR

You are here:

GDPR will apply to all businesses, charities and organisations that process personal data whether employee or client data.

individuals have more control over their personal data
individuals have the ‘right to be forgotten’
individual’s data must be kept up to date and limited to only data required to carry out your work
All data breaches must be reported to included ransomware attacks within 72 hours of being discovered
Fines have been increased and can be up to 4% of global turnover or 20 million euros whichever is the greater

Compliance Summary

The public have a legal right to access any data you have collected about them.
The public have the right to ask for their data to be removed from your data lists and deleted.
You need to provide details of how you use their data and where you are storing public data.
You need to notify both the individual and the Supervisory Authority of any data breaches. Notification must be sent within 72 hours.
The public have the right to ask you to transfer their data to another party.
You must have a Disaster Recovery plan in place and it must be tested regularly.
You must safe guard personal data.
Data must be encrypted, you must ensure confidentiality, integrity and availability.
Access controls must be in place. Staff and suppliers should only have access to data that is required to do their job.

In order to comply with GDPR, Smart IT provides a range of products and services which can help make your organisation as compliant as possible.