Again, GDPR!

[houman1979]

Hi,

I know everyone talks about this GDPR.

Anyone knows a good and qualified data practitioner to help a sole trader to prepare for this? As said, I am a small business and cannot afford high fees of the big companies offering such service.

A link to free or cheap model documents are also so helpful.

Thanks

 

[antropy]

I wrote an article about it here:
https://www.antropy.co.uk/blog/gdpr-tl-dr-too-long-didnt-read/

My advice: as "a small business" that "cannot afford high fees" don't spend too much time or energy on GDPR.

 

[houman1979]

Thank you. I would love to not spend any time or money on GDPR! But do we have another option?

 

[antropy]

Thank you. I would love to not spend any time or money on GDPR! But do we have another option?

Yes:

1. Do a quick bit of Googling and reading.
2. Implement the bare minimum.
3. Get on with running your business.

 

[houman1979]

Thanks
1. I did the first and it was terrifying!! There are plenty of articles about the fines and the fact that GDPR is not for just big businesses.
2-It is what I am looking for
3-Done!

Honestly, I myself think that many SMEs do not even know what is GDPR or even ICO! I do not know how GDPR is going to be enforced? Are they going to fine millions of small businesses around the EU?

 

[antropy]

1. I did the first and it was terrifying!! There are plenty of articles about the fines and the fact that GDPR is not for just big businesses.

Because everyone wants to sell you something. The amount of spam email I get about GDPR is ridiculous and ironic.

2-It is what I am looking for

Hint: it's probably not much and involves tightening security which isn't a bad thing.

3-Done!

Excellent!

Honestly, I myself think that many SMEs do not even know what is GDPR or even ICO! I do not know how GDPR is going to be enforced? Are they going to fine millions of small businesses around the EU?

No, they're not at all. It's aimed at big business mostly. And they wouldn't fine you without giving you a warning. There's no need to panic.

I was getting spammed by JD Sports recently and tried to unsubscribe several times with no effect on the daily deluge. So I thought I'd test out what happens to these offenders. After several emails to the ICO, an officer did get back to me and said that I'd need proof I'd unsubscribed and then if JD Sports continued to spam me after 30 days, they would contact them. Unfortunately the spam stopped because I was hoping to see what they would actually do.

However the point of this story is, you can see JD Sports are blatantly spamming with no concern for GDPR and they're not going to get in to trouble any time soon. And even if they did, all they'd have to do is stop.

You can have a watch of the video on another of my articles here which shows the soft approach the ICO take:
"It's difficult to imagine a situation where we would issue a monetary penalty."
https://www.antropy.co.uk/blog/eu-cookie-law/

 

[houman1979]

thanks. it was very helpful

 

[antropy]

thanks. it was very helpful

Glad to hear

 

[houman1979]

Just a new question: as part of my job I need to fill the forms including questions related to my client's criminal convictions and offences. It seems that obtaining criminal data from the clients is very restricted. Any idea that what would be a legal basis to obtain the criminal data?

 

[antropy]

I need to fill the forms including questions related to my client's criminal convictions and offences.

Wow good luck handling that request sensitively

 

[houman1979]

Honestly, it is very annoying. Even the regulator body does not help! So what to do? I cannot ask clients that I am not going to fill your forms as it needs criminal data? Even ICO says they are updating that section!

 

[antropy]

I'm sorry I can't be more helpful but all I can say is that this is just another thing that shows what a load of nonsense it all is.

 

[houman1979]

It seems that in the new DPA which will take effect this year, Consent could be used as a legal basis for processing of the criminal data.

https://ico.org.uk/media/for-organi...-introduction-to-the-data-protection-bill.pdf

Page 22

 

[sjbeale]

Have you sorted this now? I undertake GDPR audits then provide a report on what you need to improve on/implement. Let me know if I can help.

 

[antropy]

@sjbeale - we're getting asked a lot for help with GDPR but we don't want to get involved, we're developers not legal bods, would you like to email us and we can refer you: [email protected]