1. A whistle stop tour of GDPR
Tutor Guide
A whistle stop tour of GDPR
Michelle Cliff
SESSION 1

2. FACTS What is GDPR? It is an update of the Data Protection Act (1998)
It reflects how personal data is held and used
Any organisation is subject to the regulation (including community organisations and charities)
The Regulations came into effect on 25th May 2018

3. Brief overview
The General Data Protection Regulations gives individuals the right to know what information is held about them and provides a framework to ensure that personal information is handled properly.
The regulations work in two ways:
1. Any organisation that processes personal information must comply with the following data protection principles:
Use the data lawfully, fairly and transparently
Use the data only for the purpose it is meant
Only keep data that is relevant to the purpose it is required for
Ensure data is accurate, updated and erased when requested
Data should be stored safely and unidentifiable i.e. password protected. Not stored for longer periods than necessary
Processed in a manner that ensures security of the data, including protection against accidental loss, unauthorised or unlawful processing etc

4. Brief overview
2. The Regulations gives the following rights to individuals:
The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and profiling

5. How can you check that your organisation complies?
Start with outlining what personal information your organisation holds, i.e. members, newsletter contacts, sponsors, beneficiaries, volunteers, etc.
Refer to guidance available from the Information Commissioner’s Office (ICO)
Preparing for the General Data Protection Regulations (GDPR) 12 Steps to take now

6. Possible next steps Discuss GDPR with your management committee
Update your organisations Data Protection policy
Train committee, staff and volunteers to understand your policy