Planning for GDPR compliance
At the time of writing, it's just over one year to go until
the GDPR (General Data Protection Regulation) comes fully into
force across the EU. By May 2018, we are also to have new data
protection legislation in place in the Isle of Man that is –
if not identical – in all essentials equivalent to the GDPR.
These changes will affect any Isle of Man organisation that handles
personal information about individuals, regardless of size.
All indications are that compliance with the new legislation
will be expected from day one. For those organisations that are
compliant with the current Data Protection Act, GDPR compliance
should not be overly burdensome. However, our experience indicates
that many local organisations are far from compliant with parts of
the existing legislation, meaning that they have a lot to do to
close the gap between the current state and where they need to be
by May next year.