What are the new rules?

Q What are these new data protection rules?

A The General Data Protection Regulation is a new, Eu-wide law that gives greater power to regulators to penalise companies who mishandle personal data or are not transparent about how their business uses it.

Q What does it mean for consumers?

A It’s designed to protect consumers by requiring companies to get clear consent from them before processing their data and using it to contact them. It also means people have a right to easily access their data, find out how it is being used, and request that it is deleted.

Q Which businesses are affected by the rules?

A They affect any company selling to EU consumers, whether based in the EU or not.

Q I’ve noticed I’m getting a lot of spam recently. Why?

A Consumers are being bombarded with emails asking for their permission to keep sharing and using their data ahead of the deadline on May 25. After this date, the new rules will make it harder to spam people. So although people may notice more junk mail in the coming weeks, it should mean they receive less in the long run.

Q Will consumers be safer from breaches?

A Under the new rules, companies must notify people within 72 hours of them coming to light.