...no such thing as becoming #GDPR compliant, GDPR #compliance is ongoing

I recently read an article concerning #GDPR and support the notion, 'There’s no such thing as becoming GDPR compliant, GDPR compliance is ongoing!'

Here’s a short summary of what you can do to ensure you are and remain compliant:

1) Do a GDPR audit of your business to understand where you stand at present. There are plenty of free and paid for seminars on the topic and sites to do your research. Understand where you as an organisation hold and how you process data, from sales people's laptops to HR paper files on employees, Supplier contacts and addresses to your CRM system. https://ico.org.uk/ 

2) From the compliance results, action the parts of your business that are not compliant. Or at the very least, put in suitable measures to ensure your business starts a process of compliance.

3) To answer to the ICO, create processes to ensure continual compliance (and have your team adhere to those processes).

4) Form a team of Data Champions - can be by business area or department. To not only inform and train your people in becoming GDPR compliant but to view contact data in a different light, placing value on your CRM - the lifeblood and heart of the business.

Note: Depending on what sector you are operating in and how you use data, there may be additional steps that you have to take.