An idiots guide to GDPR...

GDPR – What is this you ask? To put it simply, I don’t know... Just kidding! I have written this article with the hope that it can give you some key facts in regards to the legislation that is coming into play next year.

For many recruiters the term GDPR has been flying around for months now, however who has really taken notice of it until more recently? Well to start with the simplest thing first; what does it stand for? General Data Protection Regulation (you are welcome).

In under 6 months, Europe’s data protection rules will experience the biggest change it has undergone in 20 years! This new legislation will change the way businesses and public sector organisations handle customer information.

I have to admit after doing my research on GDPR I was surprised by the amount of scaremongering around what the impact might be for businesses.

However I get why so many people may be confused. Fear not! I am going to try and make things clearer for you.

Here are the top facts on what you need to know about GDPR;

1)      GDPR is Europe’s new framework for data protection laws – it will be replacing the previous 1995 data protection directive.

2)      They have been discussing this legislation for FOUR YEARS – now they have finally adopted GDPR by both the European Parliament and the European council.

3)      GDPR comes into force on the 25th May 2018.

4)      This will give people new rights to access the information companies keep about them, obligations for better data management for businesses and of course new fines!

5)      Brexit will not affect this, we will still follow this legislation.

6)      Individuals, organisations and companies that are either controlling or processing personal data will be impacted by GDPR.

7)      Information considered sensitive such as name, address, genetic data, information about political/religious views, sexual orientation and more will be covered by GDPR.

8)      Where GDPR is different to other legislations is that even pseudonymised personal data can fall under the act (if like me you didn’t know what pseudonymised meant until reading this article then click the word and it will direct you to the meaning, again you are welcome!)

9)      It will allow people to access information companies have on them easily, new fine regimes and clear responsibility for organisations to get consent off people they collect info on.

10)  If an individual asks for the information the organisation has on them, the organisation will have to produce this within one month

However I don’t claim to be an expert on GDPR and honestly I am trying to get my head around all of it still!

If you would like to learn more then have a read of the full legislation, I warn you it is 88 pages long!!!!

Keen to hear people’s thoughts on GDPR and the changes your business are making to comply, especially keen to hear other recruiters thoughts on the new legislation.