Skip to main content

Cookies

We use cookies to help provide a better website experience for you, as well as to understand how people use our website and to provide relevant advertising.

By clicking "I agree", you'll be letting us use cookies to improve your website experience. To find out more or to change your cookie preferences, click "Manage Cookies".

We value your privacy

Like many other websites, our website uses cookies. Cookies are small files placed on your computer when you visit our site. They serve a number of purposes, including ensuring that certain parts of the website work properly, allowing us to understand which areas of our website are the most popular and allowing us to provide more relevant advertising messages. They don't allow us to identify you specifically and no personal data is gathered about you.

If you'd prefer that cookies weren't placed on your computer when you visit our site, you can use the controls below to allow or disallow different types of cookie. Some cookies are essential for the website to work, so they can't be disallowed.

  • These cookies give us anonymised information on how people use our website. We use these cookies to help us tailor our site to meet the needs of our visitors, for example by making sure our most popular pages are easy to find.

  • These cookies serve a number of purposes, such as allowing you to share our content with your friends and social networks. We also use these cookies to provide targeted advertising, so you may see relevant adverts based on the pages you look at on our website.

  • About
  • News & Insights
  • Careers
  • COVID-19
  • Brexit
0370 1500 100
Irwin Mitchell Logo
  • Personal
    • Personal
    • Personal Home
    • Personal Injury Claims
      • Personal Injury Claims
      • Personal Injury Claims Home
      • Abuse & Criminal Injury Claims
      • Accidents In Public Places Claims
      • Accident At Work Claims
      • Air, Rail & Sea Related Claims
      • Asbestos & Mesothelioma Claims
      • Changing Solicitors During a Personal Injury Claim
      • Group Claims
      • Holiday Accidents & Illness Claims
      • Illness Compensation Claims
      • Industrial Disease Claims
      • Injury Types
      • Military Injury Compensation Claims
      • No Win No Fee Personal Injury Claims
      • Personal Injury Claims In Scotland
      • Personal Injury Information
      • How To Claim Compensation For Personal Injury
      • Product Liability Claims
      • Rehabilitation & Medical Care
      • Road Traffic Accident Claims
      • Serious Injury Claims
      • Support Services
    • Medical Negligence Claims
      • Medical Negligence Claims
      • Medical Negligence Claims Home
      • Cancer Misdiagnosis Claims
      • Birth Injury Claims
      • Cauda Equina Syndrome Claims
      • Cosmetic Surgery Claims
      • Cerebral Palsy Claims
      • Defective Medical Device Claims
      • Dental Negligence Claims
      • Diabetes Claims
      • Fatal Medical Negligence Claims & Inquests
      • GP Negligence Claims
      • Hospital Negligence Claims
      • What Is Medical Negligence?
      • Meningitis Misdiagnosis Claims
      • Failure To Prevent Suicide Claims
      • Misdiagnosis Claims
      • No Win No Fee Medical Negligence Claims
      • Ophthalmic Negligence Claims
      • Pregnancy & Gynaecology Injury Claims
      • Sepsis Negligence Claims
      • Shrewsbury & Telford Hospital NHS Trust Maternity Care Claims
      • Stroke Misdiagnosis Claims
      • Surgery Compensation Claims
    • Family Law
      • Family Law
      • Family Law Home
      • Divorce Solicitors
      • Prenuptial & Postnuptial Agreement Solicitors
      • Child Abduction Solicitors
      • Civil Partnership Dissolution Solicitors
      • Unmarried Couples' Rights
      • Divorce Financial Settlement Solicitors
      • Child Arrangement Orders
      • Out Of Court Divorce Solicitors
      • Separation Agreement Solicitors
      • Adoption & Surrogacy Solicitors
      • Domestic Violence Solicitors
    • Wills, Trusts & Estates
      • Wills, Trusts & Estates
      • Wills, Trusts & Estates Home
      • Estate Planning Solicitors
      • Powers Of Attorney
      • Trusts
      • Will Writing Services
      • Will Disputes & Contentious Probate
    • Conveyancing & Property Solicitors
      • Conveyancing & Property Solicitors
      • Conveyancing & Property Solicitors Home
      • Conveyancing Fees Calculator
      • Buying A Property
      • Selling A Property
      • Remortgage
      • Transfer Of Equity
      • Buy To Let
      • Absentee Landlord & Freeholder Tracing Service
      • Conveyancing & Property In Scotland
      • Freehold Purchase (Leasehold Enfranchisement) Solicitors
      • Lease Extension Solicitors
      • Conveyancing Guide
    • Tax
      • Tax
      • Tax Home
      • Business Tax
      • Inheritance Tax
      • International Tax
      • Professional Negligence
      • HMRC Tax Investigations
      • Tax Disputes & Litigation
      • Tax Residence
      • Tax Returns & Compliance
      • Wealth Structuring
    • Probate
      • Probate
      • Probate Home
      • International Probate
      • Probate Sale Conveyancing
      • What Is Probate & How Does It Work?
    • Will, Trust & Estate Disputes
      • Will, Trust & Estate Disputes
      • Will, Trust & Estate Disputes Home
      • Trust Disputes
      • Inheritance Act Claims
      • Contesting A Will
      • Contentious Probate
      • Pre-Death Agreements
      • Professional Negligence
      • Challenging A Lifetime Gift
      • Financial Abuse
      • Statutory Will Disputes
      • Defending A Contested Will
    • Employment Law Solicitors
      • Employment Law Solicitors
      • Employment Law Solicitors Home
      • Employment Contract Solicitors
      • Employment Disputes
      • Dismissal & Redundancy Solicitors
      • Employment Discrimination Solicitors
      • Harassment & Bullying At Work Solicitors
      • Parental & Family Friendly Employment Rights
      • Professional Discipline Solicitors
      • Recruitment & Promotion
      • Senior Executives & Professionals
      • Settlement Agreements
      • Whistleblowing Solicitors
    • Elderly Legal Services
    • Protecting Your Rights
      • Protecting Your Rights
      • Protecting Your Rights Home
      • Actions Against The Police
      • Environmental & Planning Law
      • Data Protection Breach Claims
      • Education Law
      • Healthcare & Social Services
      • Human Rights
      • Judicial Review
      • Mental Capacity
      • Motoring Offences Legal Advice
      • Professional Regulation & Discipline
      • Dispute Resolution
      • Legal Aid
    • Immigration Solicitors
      • Immigration Solicitors
      • Immigration Solicitors Home
      • British Citizenship & Naturalisation Solicitors
      • EU & EEA Immigration Solicitors
      • Indefinite Leave To Remain Solicitors
      • Spouse Visa Solicitors
      • Innovator Visa
      • Tier 1 Entrepreneur Visa
      • Permanent Residence Solicitors
      • Tier 1 Investor Visa
      • Business Immigration Solicitors
      • Our Prices - Immigration
    • Crime & Investigations
      • Crime & Investigations
      • Crime & Investigations Home
      • Crime
      • Fraud & Financial Crime
      • Motoring Offences Legal Advice
      • Regulatory Investigations & Enforcement
    • Insolvency
      • Insolvency
      • Insolvency Home
      • Business Restructuring & Insolvency
      • Debt Consultancy
      • Insolvency Disputes & Litigation
    • Court Of Protection
      • Court Of Protection
      • Court Of Protection Home
      • Court Of Protection Deputyship
      • Healthcare and Social Services
      • Frequently Asked Questions
      • Personal Injury Trusts
      • Powers Of Attorney
      • Powers Of Attorney Disputes
      • Statutory Wills And Trusts
  • Wealth Management
    • Wealth Management
    • Wealth Management Home
    • Asset Management For Personal Injury
    • Charity & Philanthropy
    • Estate Planning
    • Financial Planning
    • Intergenerational Wealth Management
    • Investment Management
    • Retirement Financial Planning
    • Succession Planning
    • Tax Planning
  • Business
    • Business
    • Business Home
    • Sectors
      • Sectors
      • Sectors Home
      • Consumer & Retail
      • Education
      • Financial & Professional Services
      • Manufacturing
      • Media & Entertainment
      • Real Estate
      • Sport
      • Technology & Communications
    • Banking & Finance
      • Banking & Finance
      • Banking & Finance Home
      • Corporate Banking
      • Funds
      • Leveraged & Acquisition Finance
      • Real Estate Finance
      • Receivables Finance & Asset Based Lending
    • Business Crime
      • Business Crime
      • Business Crime Home
      • Anti-Bribery & Corruption
      • Insider Trading & Market Abuse
      • Corporate Internal Investigations
    • Business Immigration
      • Business Immigration
      • Business Immigration Home
      • Business Visitor Visa
      • Innovator Visa
      • Prevention Of Illegal Working
      • Sole Representative Of An Overseas Business
      • Tier 1 Entrepreneur Visa
      • Tier 1 Investor Visa
      • Tier 2 & 5 Sponsor Licence
      • Tier 2 Visa
      • Tier 4 Sponsor Licence
    • Commercial
      • Commercial
      • Commercial Home
      • Commercial Contracts
      • Charities
      • Competition Law
      • GDPR & Data Protection
      • Information Technology
      • Media & Entertainment
      • Sourcing
      • Licensing
    • Commercial Litigation & Dispute Resolution
      • Commercial Litigation & Dispute Resolution
      • Commercial Litigation & Dispute Resolution Home
      • Banking & Finance Litigation
      • Business Interruption Insurance Lawyers
      • Contract Disputes
      • Commercial Judicial Review
      • Defamation & Reputation Management
      • International & Cross-Border Disputes
      • Litigation Funding
      • Professional Negligence
    • Corporate
      • Corporate
      • Corporate Home
      • Corporate Advisory
      • Equity Capital Markets
      • Mergers & Acquisitions (M&A)
      • Private Equity
    • Costs Team
    • Employment Law
      • Employment Law
      • Employment Law Home
      • Business Immigration
      • Employment Contracts, Policies & Procedures
      • Disciplinary & Grievance
      • Employee & Industrial Relations
      • Employment Litigation & Dispute Resolution
      • Equality, Diversity & Discrimination
      • Flexible Working Arrangements
      • Health & Safety
      • HR Advice Service - IMhrplus
      • Managing Sickness Absence
      • Pensions
      • Recruitment
      • Restrictive Covenants
      • Restructuring & Redundancy
      • Self Employment, Contractors & Agency Workers
      • Employment Seminars, Training & Updates
      • Terminating Employment & Settlement Agreements
      • TUPE
    • In-House Counsel
    • Intellectual Property
      • Intellectual Property
      • Intellectual Property Home
      • Defamation & Reputation Management
      • Copyright Lawyers
      • Design Rights Lawyers
      • Image Rights Lawyers
      • Patent Lawyers
      • Trade Mark Lawyers
      • Trade Secrets Lawyers
    • Legal Helpline
    • Pensions
      • Pensions
      • Pensions Home
      • Employment
      • Managing Death Benefit Trusts
    • Regulatory & Compliance
      • Regulatory & Compliance
      • Regulatory & Compliance Home
      • Road Transport & Operator Compliance
      • GDPR & Data Protection
      • Environment & Safety Regulatory Compliance
      • Financial Services Regulation
    • Real Estate
      • Real Estate
      • Real Estate Home
      • Corporate Occupiers
      • Real Estate Development and Regeneration
      • Construction & Engineering
      • Real Estate Finance
      • Real Estate Investment
      • Real Estate Tax
      • Residential Development
      • Retirement Living & Care
      • Strategic Land
      • Structured Real Estate
      • Planning & Infrastructure
      • Property Litigation & Real Estate Disputes
    • Restructuring & Insolvency
      • Restructuring & Insolvency
      • Restructuring & Insolvency Home
      • Corporate Insolvency
      • Partnership Insolvency
      • Directors' Duties
      • Phoenix Companies
      • Restructuring
    • Tax
      • Tax
      • Tax Home
      • Corporate Tax
      • Real Estate Tax
      • Tax Investigations
  • People
    • People
    • People Home
    • Search By Name
    • Search By Location
    • Search By Expertise
    • Business Management
  • Offices
    • Offices
    • Offices Home
    • Birmingham
    • Bristol
    • Cambridge
    • Chichester
    • Gatwick
    • Glasgow
    • Leeds
    • London
    • Manchester
    • Middlesbrough
    • Newbury
    • Newcastle
    • Reading
    • Sheffield
    • Southampton
  • Contact
  • About
  • News & Insights
  • Careers
  • COVID-19
  • Brexit
Irwin Mitchell Logo

Call us on

0370 1500 100 Or request a call back
  • Home
  • News & Insights
  • Newsletters
  • The Big Data Race Has Begun

The Big Data Race Has Begun

GDPR Race

We may be leaving the EU, but radical reform of data protection is still coming down the track from Europe.

It’s the GDPR or General Data Protection Regulation and it will arrive a year from now on 25 May 2018. That may sound a long way off, but its wide ranging effects mean the clock is ticking for businesses to ensure they are compliant.

The GDPR will apply to all businesses that process personal data - information about identifiable individuals - and that will affect more businesses than one might think. It is not just about consumer protection, it will apply to the use of personal data in the HR and IT fields as well as in a business context, such as dealing with any suppliers or customers who are sole traders or partnerships.

There is a stick and carrot in relation to GDPR compliance. There are some hefty fines for non-compliance of up to €20 million or 4% of annual worldwide turnover, whichever is greater. But there are also some positives. You can use your compliance to build trust and confidence with your customers and clients. In addition, if you get the right permissions you can take advantage of the Big Data revolution.

Some of the key changes to be introduced:

  • Data breaches which impact upon privacy must be notified within 72 hours to the regulator and to those affected. Breaches can range from a customer database being hacked to putting a letter in the wrong envelope.
  • Consents to data use must be explicit, freely given and up to date. Each purpose needs a separate consent and individuals must be given simple ways to withdraw their consent at any time. The ICO will take a hard line with consent. In its current form the ICO’s draft guidance requires you to name every third party the data is to be shared with. This is a key area for businesses to look at.
  • An individual must understand how their data is used. The information must be easy to understand, accessible, and tailored for its audience. This is a key provision of the GDPR and means your privacy policies and notices should be reviewed.
  • More rights for individuals to access their data, beyond the present procedure. No fee and a quicker response time for subject access requests. Also the right to data portability, where individuals can request their data in a user-friendly format.
  • A new ‘right to be forgotten’. You could be required to erase an individual’s information from your systems. This however has certain limitations and businesses need to respond appropriately to requests they may receive.
  • Tighter contracts with businesses who process data on your behalf.

Every business collects and uses data in different ways so one size won’t fit all in compliance. But virtually all businesses need to move quickly to be prepared for May 2018.

Here are some questions to ask:

  • What personal data do you have and are there any rogue (and non-compliant) databases in the business?
  • How do you collect personal data, what are individuals told about how it will be used, and is it sufficiently transparent? This will involve a review of privacy policies and fair processing notices.
  • What is the legal basis of using the personal data? Can the business bring its use into one of the lawful purposes laid down by the GDPR?
  • Where any data is processed on the basis of consent, will the consents comply with the GDPR and the new (currently in draft) guidance issued by the ICO? This will make consent tough to obtain, particularly where data is to be shared. This is a key area for businesses to look at.

Some further action points:

  • Retention policies need to be reviewed and updated. The retention periods for data need to be looked at, as does how often consents are refreshed.
  • Businesses should review how personal data is kept, whether this is by paper or electronic files, and how secure these systems are.
  • Data breach policies, and procedures for how a breach would be detected and dealt with, are needed.
  • Processes need to be put in place to deal with the enhanced rights individuals will have to request their data, or for it to be erased.
  • Contracts relating to data processing need to be reviewed, including contracts with cloud providers, mailing houses, and analytics businesses.

Businesses will be in a far better position if they have proactively tried to comply with the GDPR, rather than bury their heads in the sand.

Joanne Bone, Partner

Published: 11 May 2017


A moment of clarity

May 2017

  • Exclusive Insights Into Negotiation Strategies Within Politics
  • Politics in Practice - How To Implement And Regulate New Strategies To Stay Ahead Of Change (pdf)
  • Plan Today, Prepare For Tomorrow
  • The Family Bank Needs Asset Protection
  • HMRC Could Pay You To Give To Charity
  • The Big Data Race Has Begun

For general enquiries

0370 1500 100

Or we can call you back at a time of your choice

Phone lines are open 24/7, 365 days a year

Contact us today

For a free initial consultation

Freephone

0370 1500 100

Prefer not to call?

Use our form

This data will only be used by Irwin Mitchell for processing your query and for no other purpose.

Joanne Bone Partner Meet the team

About Irwin Mitchell

Founded in Sheffield in 1912, Irwin Mitchell has always been a bit different. Our advisers really get to know the people and business that we help.

It's what we call 'expert hand, human touch'.

We have offices around the UK so wherever you are, our experts can help.

Contact Us

Give us a ring to speak to a member of our team in the strictest confidence. Or you can fill out our contact form and we'll ring you back.

0370 1500 100

Our phone lines are open 24/7, 365 days a year

Get a call back

Fill in your details below and we'll be in touch as soon as possible

This data will only be used by Irwin Mitchell for processing your query and for no other purpose.

  • Contact
  • 0370 1500 100
  • Contact Irwin Mitchell
  • Social Media
  • Twitter
  • Facebook
  • YouTube
  • LinkedIn
  • Instagram
  • About Irwin Mitchell
  • About Us
  • Social Responsibility
  • Careers
  • Business Management
  • SRA Regulated
  • Terms & Conditions
  • Accessibility
  • Privacy & Security
  • Hoaxes
  • Modern Slavery Act Statement
  • Manage Cookie Settings

© 2021  Irwin Mitchell LLP

Irwin Mitchell LLP is authorised & regulated by the Solicitors Regulation Authority. Our Regulatory Information

Request A Callback

Enter you details below and we'll call you back, at a time of your choice

Preferred date*
Today
Tomorrow

This data will only be used by Irwin Mitchell for processing your query and for no other purpose.