Protecting your information

ON MAY 25, there is a new law coming into force that organisations that hold data have to comply with. It is called the General Data Protection Regulation (GDPR).

This is similar to the existing Data Protection Act but with some significant enhancements.

Generally, organisations have to look at what data they hold and have policies and procedures in place to make sure that they are legally holding the data.

If they hold data on you they need to tell you what their legal basis is for holding that data, how long they are going to hold it for and that you have the right to complain to the Information Commissioners Office if you thing that there is a problem with the way they are handling your data.

Organisations will have to update how they handle your requests for information (subject access requests).

Mostly, they cannot now charge for these, and have to comply within a month (previously it was 40 days).

However, they can refuse a request if they think it is ‘manifestly unfounded or excessive’.

They also need to make sure that they have your proper consent to store your data.

This is why you might find so many organisations (banks, etc.) now contacting you about this change in the law and re-asking your consent to continue storing your information.

This new consent needs you to be pro-active.

They cannot imply from your silence or lack of activity that you continue to consent.

If you want to know what data they hold about you then ask them (see above).

 You can get help, information and advice from your local Citizens Advice or visit www.citizensadvicewokingham. org.uk or contact Citizens Advice Wokingham at Second Floor, Waterford House, Erfstadt Court, Wokingham RG40 2YF. Tel: 0300 330 1189. email: public@ citizensadvicewokingham.org.uk