© Copyright Acquisition International 2025 - All Rights Reserved.

Article Image - GDPR: What you need to know
Posted 28th March 2018

GDPR: What you need to know

From 25 May 2018 the Data Protection Act 1998 (DPA) will be replaced by The General Data Protection Regulation (GDPR), and it will bring important changes to the ways data is stored and processed by businesses.

Mouse Scroll AnimationScroll to keep reading

Let us help promote your business to a wider following.

GDPR: What you need to know
Image

GDPR: What you need to know

From 25 May 2018 the Data Protection Act 1998 (DPA) will be replaced by The General Data Protection Regulation (GDPR), and it will bring important changes to the ways data is stored and processed by businesses. The introduction of GDPR is designed to set clear rules for businesses to follow when collecting and storing personal data, it also allows everyone to understand their rights in relation to the information held about them. The new regulation was created as a reaction to increased internet usage and sales of personal information, allowing consumers more power over their personal data.

The new law will bring data protection in the UK in line with the rest of the EU and nothing (not even Brexit) will stop it – So it is best to start preparing now! Your business must have strong policies in place to avoid scrutiny and potential fines. This article will highlight some of the key elements of the GDPR, and the best practice for companies.

What is meant by ‘Data’?

Data can be anything that can relate back to a single person, this includes name, address, fingerprints, DNA, recorded calls and date of birth. The laws relating to data protection have become much more stringent, and under the GDPR, all of this information will be covered and protected by the new regulation.

What are the new GDPR principles?

In essence the basic framework of the GDPR is very similar to that of the DPA, and the level of compliance correlates with the amount and type of data collected by your company. Meaning the more data collected and processed by your company – the more compliant you must be to the GDPR.

However, no matter the size of your company, you must still afford privacy protection, notification and consent and protect all information stored with a secure storage method. Due to the focus GDPR puts on protecting an individual’s rights about their data companies must be able to fully justify the legality of why they are collecting and storing the data.

Individuals now have complete control over their data

The GDPR regulations will allow individuals to have complete control over the data that is stored about them and companies must be able to, upon request, identify, retrieve and provide any data they have. It is worth noting that should anyone request data stored about them to be removed, the company has the responsibility to make this happen with immediate effect. Therefore, all businesses must implement an efficient process of doing so on demand, it is best to discuss the feasibility of any policy of implementing this with IT and call recording providers to ensure any claims can be fulfilled.

How can I ensure I am recording calls legally?

To ensure that any phone call that is being recorded is done so legally, you must comply to the following conditions:

1.       Receive consent from the individual(s) in the phone call to record.

2.       Justify the necessity of the recording, i.e. to fulfil a contract, or for legal requirements.

3.       It is necessary to protect the interests of one or more participants.

4.       The recording is in the public interest, or necessary for the exercise the official authority.

5.       It is in the interest of the recorder, only overridden if they conflict with the interest of the participant of the call.

Should call recording be used to monitor customer service, the first condition must be followed to ensure compliance. However, this reason can be outweighed by the fifth policy, as it could be argued that quality assurance of staff is les important than the interest of privacy.

Under the DPA, when a recording takes place the individual must be informed of the purpose and how the information will be processed. If the participant continued the call consent was assumed, and this was acceptable and common practice. But, how does this change under the new regulation? The GDPR implements tighter regulations, meaning implied/assumed consent is no longer enough. There must be express consent given, either by recording verbal consent or having AI terminate the call if consent is not given.

Compliance

Under the ‘Principle of Accountability,’ all businesses should be able to actively display their compliance to the new rules and regulations. It is stressed by the GDPR that data protection systems must be implemented with immediate effect. Merely creating an extensive policy is not enough – you must be able to effectively display your staff and provider’s ability to fulfil the obligations. Having a realistic policy is the best policy as it will be easier to demonstrate should you need to prove fulfilment.

These are the steps you must complete to ensure any policy is effectively and efficiently implemented:

·         Drafting policies and protocols

·         Training staff to the new provisions and practices

·         Careful implementation and management to ensure full compliance

Penalties

The new policies bring new punishments for lack of compliance. Under the DPA, organisations could be fined up to £500,000 should they deviate from the rules. Under the regulations of the GDPR fines can range from 2-4% of global turnover, depending on the severity of the case. These new fines are designed to deter non compliance and have a huge impact on those who do not follow the rules – So it is important to act now!

What should your lawyer do to help?

We believe that the best place to decide what improvements and changes need to be made you must have a full understanding of your business, its operations and what data you really need to be collecting. Any policy that is created should be bespoke on a client by client basis, decided by what can be realistically achieved by the company. Talking to your providers will also help you see whether you are compliant by the time GDPR comes into effect.

 

Karen Holden is Founder of A City Law Firm

Categories: Finance


You Might Also Like
Read Full PostRead - Eye Icon
How To Buy Small Businesses With Little-To-No Money Down In 2024
News
18/01/2024How To Buy Small Businesses With Little-To-No Money Down In 2024

Source: Unsplash In 2024, the allure of buying small businesses is heightened by a few more factors. First, the pandemic aftermath has led to numerous market gaps waiting to be filled – a prime opportunity for nimble small businesses. Also, the rise of d

Read Full PostRead - Eye Icon
Cryptocurrency Trends for 2022
Finance
19/01/2022Cryptocurrency Trends for 2022

While the crypto market has experienced an incredibly volatile year, it has also seen significant price hikes and sustained growth over the course of the previous 12 months.

Read Full PostRead - Eye Icon
Striving for Excellence in Banking
Finance
28/06/2017Striving for Excellence in Banking

Ben is a commercially astute banking executive with an outstanding PanAfrican track record of success in developing profitable business functions and turning around poorly performing ones. Following his success in the Manager of the Year – Kenya award, as pa

Read Full PostRead - Eye Icon
George Pelgrim on Sustained Business Growth in Sint Maarten
News
18/07/2024George Pelgrim on Sustained Business Growth in Sint Maarten

By George Pelgrim, Sint Maarten based entrepreneur and businessman Developing a Long-Term Vision for Business Growth In the dynamic economic landscape of Sint Maarten, the importance of developing a long-term vision for business growth cannot be overstated. Ge

Read Full PostRead - Eye Icon
Expert Advice When You Need It
Finance
06/06/2017Expert Advice When You Need It

Leading Advisors of the Year - Property Investment Advisor of the Year – UK award winner Intercorp Group is a privately owned high-level consulting firm, which provides tax, estate planning and fiduciary structure solutions to high-net-worth families. To cel

Read Full PostRead - Eye Icon
Can You Get a Loan in Bitcoin
Finance
17/11/2021Can You Get a Loan in Bitcoin

Can you get a loan in bitcoin? It seems like an interesting question, but it bears some interesting answers. If you are curious about this subject, please do read on. In this article, I am going to show you how you can get a loan in bitcoins. By the time you h

Read Full PostRead - Eye Icon
Home Away From Home
Innovation
02/03/2021Home Away From Home

Ghana is rapidly growing into a major country on the international stage. with the region's expansion unquestionable, the importance of its capital city continues to increase. Accra has much to commend it, including the delightful @Home Boutique Hostel & S

Read Full PostRead - Eye Icon
RPA in Insurance: Key Cases and Implementation Tips
Legal
09/02/2023RPA in Insurance: Key Cases and Implementation Tips

The insurance industry is entering yet another turbulent period after having recovered from the COVID-19 pandemic decline. The unstable macroeconomic and geopolitical landscape, rising inflation rates, currency fluctuations, and the threat of a global recessio

Read Full PostRead - Eye Icon
Crypto Payment Solutions Designed to Cash-In
Finance
13/02/2024Crypto Payment Solutions Designed to Cash-In

CoinsPaid proudly provides a crypto payment ecosystem suitable for use by both businesses and individuals, thanks to groundbreaking solutions that are tailored to a client’s every need.



Our Trusted Brands

Acquisition International is a flagship brand of AI Global Media. AI Global Media is a B2B enterprise and are committed to creating engaging content allowing businesses to market their services to a larger global audience. We have a number of unique brands, each of which serves a specific industry or region. Each brand covers the latest news in its sector and publishes a digital magazine and newsletter which is read by a global audience.

Arrow