Vearacity Info Parks is a resource for organisations and individuals researching the General Data Protection Regulation. Here you’ll find a library of straightforward and up-to-date information to help organisations achieve GDPR compliance.
GDPR REPRESENTATIVE SERVICES FOR SECTORS
Regardless of the sector in which you are in, compliance with the GDPR is a necessity for all organisations. However, each sector has particular market considerations and specific industry compliance requirements, with varying appetites towards risk. As established GDPR representatives, we are subject matter experts and provide you with access to an experienced team of data professionals. Whether your organisation operates in healthcare, tech, retail, eCommerce, finance, insurance, education, or not-for-profit, our broadly experienced team can cater to your organisation’s unique commitments and requirements.
Medical and Healthcare.
Software and Technology
Retail and eCommerce
Finance and Insurance
Education, Schools and Colleges
Charities and Not-for-profit
GDPR REQUIREMENTS APPLY TO MOST KINDS OF PERSONAL DATA.
GDPR requirements govern almost every data point an organisation collects across every conceivable online platform, especially if it's used to uniquely identify a person. It also includes data routinely requested by websites, like IP addresses, email addresses, and physical device information. Types of personal data protected under GDPR include:
- Basic identity information
- Web data (like location, IP address, cookie data, and RFID tags)
- Health and genetic data
- Biometric data
- Racial or ethnic data
- Political opinions
- Sexual orientation
- Any information that relates to an identified or identifiable living individual
As you can imagine, "basic identity information" is a broad category. It includes user-generated data, like social media posts, personal images uploaded to websites, medical records, and other uniquely personal information commonly transmitted online. Yes, that means organisations must protect your tweets and Facebook statuses.
GENERAL DATA PROTECTION REGULATION (GDPR)
Compliance with the General Data Protection Regulation (GDPR) is not just a matter of ticking a few boxes; the regulation demands that organisations be able to demonstrate compliance with the data protection principles. Check out our more services on information and cyber security.
This involves taking a risk-based approach to data protection, ensuring appropriate policies, procedures, and solutions are in place to deal with the transparency, accountability, and individuals’ rights provisions, as well as building a workplace culture of data privacy and security.
With the appropriate compliance framework in place, organisations will not only be able to avoid significant fines and reputational damage but will also be able to show customers that you are trustworthy and responsible and derive added value from the data you hold.
The organisations could be fined up to 4% of global turnover or €20 million if they do not comply with GDPR regulations. Check out our more services on information and cyber security.
The GIS Consulting Team has a comprehensive framework, solutions, and extensive experience to help organisations build a plan and implement the processes, controls, and right solutions to demonstrate and manage ongoing Genera Data Protection Regulation (GDPR) compliance.
GDPR COMPLIANCE CHECKLIST
Awareness and CommunicationEnsure your employees understand GDPR and communicate with the service and staff about why you are collecting the data. | Analysis of Personal DataAnalyse a list of all sensitive data you store and process. |
Review ProceduresHave a suitable privacy policy in place and review it regularly. | Access RightsList what access rights should be granted and how changes should be handled. |
Customer ConsentEnsure your customers consent to you processing their data. | Data BreachesImplement a procedure for handling data breaches. |
Impact assessmentsCarry out a data protection impact assessment. | Data Protection Officers (DPO's)Determine whether you need a Data Protection Officer (DPO). |