Businesses’ responsibility in handling of data is set to swell with the introduction of the General Data Protection Regulation (GDPR). This is expected to come into force in May 2018.
The new Regulations will not only heighten a business’s accountability for their own practices; it will create a new responsibility for the handling of data by those which it shares information with in the absence of proper contractual provisions.
Guidance from the Information Commissioners Office (ICO) is currently building, with the publication of ’12 Steps to take now’; this is a booklet detailing the essential steps which is available on their website.
The booklet states that the most important starting point is to ensure compliance with the current framework. If you do so, you will be in the best position to work towards compliance by 2018.
With regards to data sharing compliance, the best starting point is the ICO’s Data Sharing Code of Practice (the Code).
Familiarizing yourself with the Code will enable you to start to understand your obligations and restraints with regard to sharing data within the course of your business. The guidance also provides a checklist which will assist you in the process of deciding whether or not to share data with a third party.
Please contact us for further assistance in any aspect of your data protection matters.