A whistle stop tour of GDPR Tutor Guide A whistle stop tour of GDPR Michelle Cliff SESSION 1

FACTS What is GDPR? It is an update of the Data Protection Act (1998) It reflects how personal data is held and used Any organisation is subject to the regulation (including community organisations and charities) The Regulations came into effect on 25th May 2018 www.supportstaffordshire.org.uk

Brief overview The General Data Protection Regulations gives individuals the right to know what information is held about them and provides a framework to ensure that personal information is handled properly. The regulations work in two ways: 1. Any organisation that processes personal information must comply with the following data protection principles: Use the data lawfully, fairly and transparently Use the data only for the purpose it is meant Only keep data that is relevant to the purpose it is required for Ensure data is accurate, updated and erased when requested Data should be stored safely and unidentifiable i.e. password protected. Not stored for longer periods than necessary Processed in a manner that ensures security of the data, including protection against accidental loss, unauthorised or unlawful processing etc www.supportstaffordshire.org.uk

Brief overview 2. The Regulations gives the following rights to individuals: The right to be informed The right of access The right to rectification The right to erasure The right to restrict processing The right to data portability The right to object Rights in relation to automated decision making and profiling www.supportstaffordshire.org.uk

How can you check that your organisation complies? Start with outlining what personal information your organisation holds, i.e. members, newsletter contacts, sponsors, beneficiaries, volunteers, etc. Refer to guidance available from the Information Commissioner’s Office (ICO) www.ico.org.uk Preparing for the General Data Protection Regulations (GDPR) 12 Steps to take now www.supportstaffordshire.org.uk

Possible next steps Discuss GDPR with your management committee Update your organisations Data Protection policy Train committee, staff and volunteers to understand your policy www.supportstaffordshire.org.uk