In today's episode, Patrick Massa from WH Partners answers
some of the most frequently asked questions about the General Data
Protection Regulation (GDPR).
As a start-up business, should I be GDPR compliant?
Any start-up business processing personal data throughout the
course of its activities, be it personal data of its customers,
employees or any other third parties, is legally bound by the
provisions of the GDPR.
As a data controller, your business shoulders the highest level
of compliance responsibility under the GDPR and should therefore be
compliant with all data protection principles as well as other
requirements. In doing so, and in order to demonstrate GDPR
compliance, a data controller should have in place a set of data
protection policies and procedures, which comprehensively set out
the company's internal data privacy management. Amongst others,
these should include a customer privacy notice, a data subject
rights policy and a data retention