The General Data Protection Regulation comes into effect in May 2018. The Information Commissioners Office guidance states that 'many of the GDPR's main concepts and principles are much the same as those in the current Data Protection Act (DPA), so if you are complying properly with the current law then most of your approach will remain valid under GPDR and can be the starting point to build from.'
However, they highlight that many businesses will need to 'put new procedures in place to deal with the GDPR's new transparency and individuals' rights provisions' and the “GDPR places greater emphasis on the documentation that data controllers must keep to demonstrate their accountability.”
For some businesses the transition will be easy and for others difficult and expensive.
2020 Innovation have produced a training video which covers the main areas and ICO have a 12 step guide.
Our FREE monthly eNEWS email will keep you up to date with the latest news in accounting.