Business owners urged to brush up on new data laws

BUSINESSES across Argyll and Bute are being urged to find out more about the new data protection regulations before they come into effect on May 25.

The General Data Protection Regulation (GDPR) will apply to all businesses and organisations that are offering goods and services to EU citizens, or to those monitoring the behaviour of EU citizens or who are processing personal data.

Business Gateway has introduced a new GDPR online tutorial and guide, a crucial addition to the DigitalBoost portfolio, which will help business owners to easily and efficiently comply.

GDPR is a complete update and overhaul of the existing data protection regime now including new data storage invention, giving greater protection and rights to individuals on how personal information can be used by organisations holding it.

Failure to comply with the GDPR regulations will result in significant fines being applied for infringements, which could be as much as €20m or four per cent of a company’s global turnover.

Business Gateway’s top tips on things Small to Medium Eneterprises (SMEs) need to be doing right now to prepare include:

1. Review it now – Preparing for GDPR will need full attention and it will take time to implement new processes and procedures across a business.

2. Understand the new changes – Many of them will impact current processes, such as an individual’s right to be forgotten and subject access requests. Business owners may need to draw up a plan for responding to such requests as with most cases under GDPR there is only one month to reply.

3. Map out what data and personal data is stored – It is essential to nderstand where it is stored, what systems are used, and how it is used.

Consider whether invasive means of collecting personal data are used and if the data is processed fairly and lawfully.

This means informing people about the purpose and use of personal data collected and how your business will process that. At this stage it may be worth considering a privacy impact assessment.

4. Securely delete old data – If storing data that is no longer required (and a business is not legally obliged to keep) then securely delete it.

Disposing of unnecessary data will help reduce risk. But make sure to securely erase it with specialist equipment and software.

5. Let employees and suppliers know – Make sure all employees and suppliers are aware of any changes to processes and procedures that may impact them.

6. Find out more – Visit the links below at Business Gateway’s website:

· Online Tutorial - bgateway. com/online-tutorials

· Online Guide - bgateway. com/gdprguide

Hugh Lightbody, lead officer, Business Gateway National Unit said: ‘At Business Gateway’s website, you’ll find comprehensive online guides to help you get to grips with the GDPR.

‘Our DigitalBoost programme is already a success and adding GDPR training to the programme will allow business owners to continue to make best use of digital and importantly help them to protect their business.’

Dates for a GDPR workshop will be confirmed soon – to register interest in attending contact the local office on 01546 808363.

DigitalBoost is funded by Digital Scotland and delivered by Business Gateway.

To find out more about how Business Gateway can help set up and develop a business call 01546 808363 or visit www. bgateway.com/argyll-and-bute.