The General Data Protection Regulation (GDPR) is a European Union regulation that replaced the current Data Protection Act 1998 and came into force on 25th May 2018.
GDPR has been in development since 2012 by the European Union Parliament and the Trust to harmonise and strengthen the rights of data subject across Europe, including when data is transferred to third party countries.
The Regulation enhances the rights of individuals whose personal data is processed by an entity and allows for new changes such as the right to be forgotten and right to erasure.
It also provides for increased accountability and processes to demonstrate compliance. For example; we may be required to either appoint a Data Protection Officer (DPO) or designate individual to take proper responsibility for the important task of data protection compliance. Also the requirements for consent are now much higher.
All breaches will have to be reported to the Information Commissioners Office within 72 hours and the potential fines for breaches are up to €20 million.
| Name | Date Uploaded |
|---|---|
| Data Registration Certificate | |
| Subject Access - Request Form | |
| Data Audit Schedule | 4th June 2019 |
| GDPR - Document Retention and Disposal Policy 2019 | 4th June 2019 |
| GDPR - Document Retentions - Appendix A | 4th June 2019 |
| GDPR - The Management Of Transferable Data Policy 2019 | 4th June 2019 |
| Social Media Policy Statement - May 2019 | 4th June 2019 |
| FOI Policy 2019 | 4th June 2019 |
| Data Protection Policy May 2019 | 4th June 2019 |
| GDPR - Information Data Protection Policy 2019 | 4th June 2019 |
We will continue to ensure compliance with GDPR. Should you wish to know more about the GDPR, please visit the Information Commissioner’s Office Dedicated Webpage on the ICO website.
