If, like many business owners, you've convinced yourself that GDPR doesn't apply to you because you believe you don't deal with consumers and you don't handle personal data then you need to stop and think again.
Just ask yourself the following 3 questions:
- Do we have any employees?
- Do we receive or send emails even if only to business contacts?
- Do we store contact details for individuals even if they are business contacts?
If the answer to any of these questions is "yes", your business is processing personal data and GDPR, which governs how businesses must handle that data, unquestionably applies to you.
The General Data Protection Regulation or GDPR is new data protection law that comes into force on 25 May 2018.
The headline grabbing change is that, for a serious breach of GDPR, a business can be fined up to 4% of its annual turnover or €20m (whichever is the greater). This alone should be enough to make any business ask itself what steps it should be taking to comply. Now!
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.