1. Identify the laws and guidelines that affect day-to-day use of IT.
Data Protection
Identify the laws and guidelines that affect day-to-day use of IT.

2. Personal Privacy Right to privacy is a fundamental human right
Development of databases has led to storage of much personal information without the knowledge or permission of the individual
It is often felt that even the use of names and addresses for mail shots is an invasion of privacy
The Data Protection Act of 1984 grew out of concern about personal privacy

3. Data Protection Principles
Personal data must be processed following these principles so that data are
processed fairly and lawfully
obtained for specified and lawful purposes
adequate, relevant and not excessive
accurate and, where necessary, kept up-to-date
not kept for longer than necessary
processed in accordance with the subject's rights
kept secure
not transferred abroad without adequate protection

4. GDPR and Social Media
Good news GDPR and social media data is covered by the terms & conditions & privacy notices of each of the social media platforms.
Be careful when it comes to social media and GDPR, if extracting personal data from the platform and storing it elsewhere within your business.
For example, it is only acceptable to take an address from social media, or use it in any marketing activity, if you can justify doing so via provided you comply with the data protection principles.
You can continue to message via the social media platform where you have made a connection (liked or followed), but you can’t move the communication to any other marketing channel unless you can satisfy those legal grounds and comply with the data protection principles.

5. Sending out Mail Shots to advertise your website
Internet providers do not like you to send out advertising mailshots, your account may be limited to only being able to send to a particular number of people at a time…. Result account can be closed.
If sending out to a GROUP of people NEVER put all the addresses into the CC in the website…. Use the BCC

6. Read More about Data Protection
The Information Commissioner's Office is the UK's independent authority set up to promote access to official information and to protect personal information