×

Veracity | GDPR compliance

Vearacity Info Parks is a resource for organisations and individuals researching the General Data Protection Regulation. Here you’ll find a library of straightforward and up-to-date information to help organisations achieve GDPR compliance.


GDPR REPRESENTATIVE SERVICES FOR SECTORS


Regardless of the sector in which you are in, compliance with the GDPR is a necessity for all organisations. However, each sector has particular market considerations and specific industry compliance requirements, with varying appetites towards risk. As established GDPR representatives, we are subject matter experts and provide you with access to an experienced team of data professionals. Whether your organisation operates in healthcare, tech, retail, eCommerce, finance, insurance, education, or not-for-profit, our broadly experienced team can cater to your organisation’s unique commitments and requirements.


Medical and Healthcare.
Software and Technology
Retail and eCommerce
Finance and Insurance
Education, Schools and Colleges 
Charities and Not-for-profit


GDPR REQUIREMENTS APPLY TO MOST KINDS OF PERSONAL DATA.


GDPR requirements govern almost every data point an organisation collects across every conceivable online platform, especially if it's used to uniquely identify a person. It also includes data routinely requested by websites, like IP addresses, email addresses, and physical device information. Types of personal data protected under GDPR include:

 

  • Basic identity information
  • Web data (like location, IP address, cookie data, and RFID tags)
  • Health and genetic data
  • Biometric data
  • Racial or ethnic data
  • Political opinions
  • Sexual orientation
  • Any information that relates to an identified or identifiable living individual

 

As you can imagine, "basic identity information" is a broad category. It includes user-generated data, like social media posts, personal images uploaded to websites, medical records, and other uniquely personal information commonly transmitted online. Yes, that means organisations must protect your tweets and Facebook statuses.


GENERAL DATA PROTECTION REGULATION (GDPR)


Compliance with the General Data Protection Regulation (GDPR) is not just a matter of ticking a few boxes; the regulation demands that organisations be able to demonstrate compliance with the data protection principles. Check out our more services on information and cyber security.

 

This involves taking a risk-based approach to data protection, ensuring appropriate policies, procedures, and solutions are in place to deal with the transparency, accountability, and individuals’ rights provisions, as well as building a workplace culture of data privacy and security.

 

With the appropriate compliance framework in place, organisations will not only be able to avoid significant fines and reputational damage but will also be able to show customers that you are trustworthy and responsible and derive added value from the data you hold.

 

The organisations could be fined up to 4% of global turnover or €20 million if they do not comply with GDPR regulations. Check out our more services on information and cyber security.

 

The GIS Consulting Team has a comprehensive framework, solutions, and extensive experience to help organisations build a plan and implement the processes, controls, and right solutions to demonstrate and manage ongoing Genera Data Protection Regulation (GDPR) compliance.


GDPR COMPLIANCE CHECKLIST



01

Awareness and Communication 

Ensure your employees understand GDPR and communicate with the service and staff about why you are collecting the data.

02

Analysis of Personal Data

Analyse a list of all sensitive data you store and process.

03

Review Procedures

Have a suitable privacy policy in place and review it regularly.

04

Access Rights 

List what access rights should be granted and how changes should be handled.

05

Customer Consent 

Ensure your customers consent to you processing their data.

06

Data Breaches

Implement a procedure for handling data breaches.

07

Impact assessments 

Carry out a data protection impact assessment.

08

Data Protection Officers (DPO's)

Determine whether you need a Data Protection Officer (DPO).


Have Query ?

×

Notice!!

The cyber security attack that started last Friday has dominated the headlines around the world. This reflects the power and reach of the latest mutation of malware spread around a connected world. Unfortunately, the recent ransomware outbreak may be the first of a new strain that we will see terrorising any computer connected to the internet.