As a business owner, you are likely aware of the importance of compliance with the General Data Protection Regulation (UK GDPR). The constant barrage of media articles about the ability of the Information Commissioner’s Office (ICO) to fine businesses in England up to \u00a317.5m can be concerning for business owners. The GDPR is so lengthy and complex it can be hard to figure out the best steps to take and in which order to take them. This article will explore four valuable ways a lawyer can help your organisation comply with the GDPR.<\/p>\n\n\n\n
The GDPR is a set of data protection rules which apply to businesses in England. Most rules relate to protecting individuals\u2019 personal data to protect them from harmful actions. Compliance with the GDPR<\/a> is crucial, as any data security breach can prompt an ICO investigation.<\/p>\n\n\n\n The ICO is an independent body set up by the Government, which aims to carry out two main tasks.\u00a0 Its first aim is to help educate organisations in England about data protection law requirements. Businesses can refer to the ICO\u2019s written guidance on its website<\/a>. Its second task is to fine organisations which fail to comply with the GDPR<\/a>. Many businesses fear a potential ICO fine due to their power to provide a financial penalty of up to \u00a317.5m.\u00a0<\/p>\n\n\n\n Subject access requests are also known as SARs or data subject access requests. A SAR is a request by an individual for all (or some) information held about them by your business.<\/p>\n\n\n\n Most SARs come from customers or employees. Upon receiving a SAR your organisation should respond as soon as possible. This is because the GDPR allows organisations one month to provide all relevant documentation to the individual.<\/p>\n\n\n\n However, there are certain exemptions and limitations on the documentation your business will have to disclose. This is where a lawyer can assist. For example, a lawyer can help advise your organisation as to which documents you can redact. Redaction is a process of striking out specific parts of a document in bold black marker so the recipient cannot read them. This usually happens when the document contains confidential or personal information relating to someone other than the individual.<\/p>\n\n\n\n Similarly, a lawyer can advise which letters, emails and notes come under \u2018legal advice privilege\u2019. This enables organisations to avoid disclosure of materials containing legal advice between your business and its lawyers. Furthermore, your lawyer can advise whether you may refuse to act on the SAR due to a limited exemption. For example, if the request is manifestly excessive or too similar to other recent SAR requests.<\/p>\n\n\n\n These exemptions depend on the specific circumstances at that time, so many business owners appreciate having a lawyer to advise on these GDPR requirements.<\/p>\n\n\n\n\n\n Continue reading this article below the form\n <\/i>\n<\/a>\n1. Handling Subject Access Requests Appropriately<\/h2>\n\n\n\n