What is GDPR?
The General Data Protection Regulation (GDPR) comes into force on 25th May 2018. This regulation will replace the EU Data Protection Directive. This means that from May 2018 it will be directly applicable to any business or organisation that deals directly with an EU citizen or business.
What are the requirements?
The GDPR aims to make it simpler for people to control how companies use their personal details.
Strict rules mean companies will not be allowed to collect and use personal data without the person’s consent.
What constitutes personal data?
The GDPR applies to ‘personal data’, meaning any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. This definition provides for a wide range of personal identifiers to constitute personal data, including name, identification number, location data or online identifier, reflecting changes in technology and the way organisations collect information about people.
Examples: name, email address and phone number, and also internet browsing habits collected by website cookies etc.
Will GDPR still apply after Brexit?
The government says the same rules will continue to apply after the UK formally leaves the EU.