1. GDPR: getting your firm ready
Karen Round, Senior Policy Officer,
Policy & Engagement (Private & Third Sector)

6. Data protection reform
Data Protection Bill
Law Enforcement Directive
GDPR

7. Breach Reporting Notify ICO: Notify data subject:
Not later than 72 hours
Where likely to result in a risk to rights and freedoms of individuals
Notify data subject:
Without undue delay
Where likely to result in a high risk to rights and freedoms of individuals

8. Transparency & accountability
Enhanced fair processing information
Records of processing activities
DPOs
DPIAs
Data protection by design and default

9. ! Administrative fines Two categories:
2% global annual turnover or 10m Euros
4% global annual turnover or 20m Euros

10. ….evolution not
revolution…

14. Compliance

15. Subscribe to our e-newsletter at www.ico.org.uk
Keep in touch
Subscribe to our e-newsletter at
or find us on…
/iconews
@iconews