Data Protection Act and GDPR Policy

GDPR outlines European regulations that apply to the UK and that the UK has introduced by the Data Protection Act 2018. They have similarities, but cover different aspects of data protection.

What is Data Protection?

Data protection covers all processing, storing, organising, using, sharing and deleting of data on and offline. Securing data can mean enforcing a clear desk policy, shredding paper, locking drawers etc. and extends to wider use, such as where the data is stored, on which servers or cloud, and for how long. 

Why do you need a Data Protection Act and GDPR Policy?

The rise of the internet has led to an information boom, and personal information is constantly being transferred over the web. To protect a person’s fundamental right to privacy, governing bodies like have created laws and regulations in regards to data protection; imposing many legal duties, responsibilities and obligations on businesses. No where is this felt more than the IT industry.

As an employer, you need a policy in place to comply with the legislation. This should outline any penalties that may arise if people do the wrong thing and you need to prove that all your staff have received training and know the rules.

Do you suspect a breach? Don't dawdle. You must report a breach within 72 hours.

Speak to an expert