So, your compliance officer has had data protection compliance
as one of his objectives since the year dot. He's bound to be
all over GDPR. You definitely have it covered, right?
Wrong.
With the impending introduction of GDPR, data protection
compliance can no longer be the responsibility of just one person
in your organisation, or a matter of marginal concern. Everyone in
the business needs to understand GDPR, what it is and the
importance of putting data privacy at the heart of your policies,
processes and practices.
This means that:
- the directors, or others responsible
for the management of your business, need to have GDPR firmly on
their agenda. The widely-publicised penalties for breach of the
GDPR and the equivalent legislation being introduced in other
non-EU countries (including the Channel Islands) are designed to
make data protection an issue for those at the highest level of the
organisation
