Here we are mid-August 2019 and checks for data management actions and GDPR are even more essential. We find ourselves once again thinking about making changes to the way we manage personal data. The biggest change to data management came and went, the GDPR Regulations seemed to be a big push for compliance. It is especially important that we turn our attention to the post-transition phase.
Our goal was to ensure we reached a minimum level of readiness before GDPR came into effect on May 25, 2018. Ideally, that would include being ready to undertake a gap analysis, produce risk impact assessments to complete a project initiation document. Those items could be some of the first items the regulator may wish to see. In addition some assurances that we have validated processes and activities already in place to sustain or refresh its status.
We were contacted by clients asking what the impact of GDPR might be on their tendering activity, we did assess it and managed the transition for those clients very easily. There were a number of reasons for this, but we are still waiting to see what the Public Sector procurement teams are going to do going forward. Requirements are bound to be profound as there will be a measure of compliance checking by buyers. Those businesses that have completed the preparatory and then transition work will be better placed to respond to the requirements imposed by the tendering process.
We have provided practical solutions that clients found particularity helpful in getting them prepared for GDPR, we will be rolling out some updated assessments and of course, we still have clients who over one year on are still not compliant. Checks for data management actions and GDPR are still essential.
GDPR is being placed centre stage by the Information Commissioners Office (ICO), and we have seen some sizeable fines being levied out, just this week information came out that the Canva App had information of over 164 million accounts stolen. There is a helpful set of information and other resources available on the ICO website, please follow this link.
If you’d like further information on GDPR then find that here how we can support the continued assessment and compliance for GDPR then do please get in touch.
