The General Data Protection Regulation (GDPR) is a European legislation affecting all organisations that hold personal data on living individuals. It aims to ensure that organisations using and processing personal data do so fairly and lawfully and gives a number of rights to individuals in terms of how they can access their data and influence its use.

Please click ‘download files’ to view full inbrief.

• Basic concepts and data protection principles
• Ensuring you have a legal basis for processing
• Data minimisation and retention
• Privacy notices
• Meeting the accountability principle
• Data security and compliance checklist for an agreement with third party processors
• Data breaches
• Privacy impact assessments
• Transfers of data outside the EEA
• Responding to a DSAR and what information to provide
• Third party information

British businesses can’t count on Brexit to let them off the hook. The introduction of the UK GDPR via the Data Protection Act 2018 has largely meant that the provisions of the GDPR still apply to the UK with potential fines of 17.5 million or 4% of annual global turnover still being applicable to organisations in the UK.

The legislation is very much relevant for employers – all of whom will process data on their staff. Data protection compliance is necessarily becoming a high priority for many organisations as there is a potential for significant fines and reputational damage where organisations fail to comply.

This Inbrief looks at some of the key issues within...

Read Full Story: https://www.lewissilkin.com/en/insights/data-protection-and-employment