General Data Protection Regulation (GDPR)
Post Brexit, the GDPR means both the UK GDPR and/or the EU GDPR (as applicable).
To ensure the laws overseeing data security and usage are fit for purpose, regulators have created rules to protect individuals’ data. This dedicated hub is to help you and your clients understand the impact.
We wish to continue to support you as you battle the minefield of regulatory change. Under GDPR, not only are you required to satisfy rights of your clients, you’ll also need to demonstrate to the ICO (or any other regulator where applicable) compliance and be more accountable for any breaches that may occur.
Terms of Business updated
The General Data Protection Regulation came into effect on 25 May 2018. Our Terms of Business have been updated to reflect this change.
New application forms
Available with new data privacy notices.
GDPR Checklist
Use our checklist to ensure your business is GDPR compliant.
GDPR Glossary
Do you know the difference between controllers and data processors? Do you know why a Data Protection Officer has a unique role within a firm?
Security and Data
Consider your data security
You’ll need to take a risk based approach when considering the appropriate level of security for the personal data you process, including its use, storage and transfer.
Prudential and data
How and why we use your client’s information (including any sensitive personal information), who we might share it with and their rights when it comes to personal information.
Reduce your risk of cybercrime
Basic human error may open the door to cybercrime, what simple mistakes could be avoided.
Data Policy and Notices
You’ll need to review your policy around managing customer’s personal data and communicate how you handle privacy information by way of a Notice. Find out what to include.
Frequently Asked Questions
What to do if you have a breach?
If a breach happens, what do you need to report?
What are your client’s rights?
Understanding the rights of data subjects is fundamental to GDPR compliance.
What legal grounds do you have?
What are the lawful reasons for holding personal data?
What have you got to lose?
GDPR gives the ICO and other regulators greater powers to take action quickly and forcefully on non-compliance. Depending on what’s gone wrong, you and your business could face a number of challenges.