Our Employment partner, Richard Thomas, is featured in Business News Wales today, talking GDPR and how Welsh businesses can prepare.
Read his full comment in the article below.
We're running several GDPR courses to provide you with more information about how to prepare for the upcoming regulation. For details, or to book, click here.
All organisations – regardless of sector or size – will have to comply with the new GDPR. Welsh businesses need to make sure they’re putting their responsibility to safeguard individuals’ personal data at the heart of their practice. Conducting a thorough assessment of their current practice – looking at why they’re collecting data, and how they’re processing it – is a key first step for all organisations. Under GDPR an individual’s consent to the collection and processing of their data must be specific, informed and ‘freely’ given and can be withdrawn at any time. So, businesses are going to have to think much more carefully about the legitimate reasons they are using employee and customer data – and rely upon these reasons, rather than consent.