{"id":21617,"date":"2018-02-07T17:16:01","date_gmt":"2018-02-07T17:16:01","guid":{"rendered":"https:\/\/digileaders.com\/?p=21617"},"modified":"2019-01-17T09:43:10","modified_gmt":"2019-01-17T09:43:10","slug":"5-key-factors-becoming-gdpr-compliant","status":"publish","type":"post","link":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/","title":{"rendered":"5 key factors for becoming GDPR compliant"},"content":{"rendered":"

The General Data Protection Regulation (GPDR) is going to affect every organisation that obtains and stores personal data from 25 May 2018.\u00a0<\/span>Organisations, in both the public and private sectors, need to take action to meet the requirements of GDPR and avoid the sanctions and fines the Information Commissioner can impose if data is mishandled, incorrectly shared or lost.<\/span><\/p>\n

So, what should organisations be doing to comply with the new GDPR regulations? <\/span><\/p>\n

1. Data handling<\/b><\/span><\/h4>\n

Organisations must have full understanding of how their data is handled, who has access and how is it managed. In many cases, organizations will need to appoint or have someone fulfil the role of a Data Protection Officer (DPO) or Data Manager who is responsible for ensuring the right processes are in place and implemented. If you are a small enterprise, depending on your line of business and the type of data you handle, you may have the option of partnering with other small organisations to \u2018share\u2019 a DPO or Data Manager.<\/span><\/p>\n

2. Know your supply chain<\/b><\/span><\/h4>\n

All parts of the supply chain need to work together to achieve the same standards and ensure there is a combined and secure approach to handling the data they share. In the case of a breach, wherever it happens in your supply chain, the Information Commissioner will see you as jointly responsible and you will still be liable for a fine. It is therefore imperative you perform thorough due diligence on your current suppliers to ensure they are GDPR compliant, and any new suppliers you bring on before you share any form of customer or client personal data with them.\u00a0<\/span><\/p>\n

3. Understanding roles and responsibilities<\/b><\/span><\/h4>\n

Every employee with access to personal data needs to be aware of their roles and responsibilities in maintaining GDPR compliance. While you can\u2019t prevent every case of human error, your employees are less likely to make an error if there is a common understanding about best practice Furthermore, organisations should review their policies and processes and only provide access to those employees who really need it.\u00a0<\/span><\/p>\n

4. Provide the right cyber awareness learning\/training<\/b><\/span><\/h4>\n

At the heart of achieving GDPR compliance is providing all your staff with effective awareness training and the simple, practical guidance they need to understand their responsibilities and what the appropriate behaviours are. Training should be seen as enabling good behaviours rather than just a a tick-box exercise. It needs to encourage, engage and motivate through a range of activities including regular online eLearning and interactive events such as lunch and learns and gamification. <\/span><\/p>\n

Inspired training will help employees go beyond thinking just about meeting the basic compliance needs and equip them to make the right decisions, at the right time in the interests of cyber resilience. <\/span><\/p>\n

Should a breach occur, showing the Information Commissioner that you are regularly educating employees and they responded quickly in the right manner to rectify the issue could help minimise any resulting sanctions or fines.<\/span><\/p>\n

5. Cloud storage and security<\/b><\/span><\/h4>\n

The growth of cloud storage means fewer organisations now have in-premises storage. Using the cloud means thinking about the levels of security the cloud provider is using to protect your data. <\/span><\/p>\n

As with your supply chain, you need to undertake due diligence to understand whether your chosen cloud storage provider has the restricted access that will enable you to comply with GDPR. If the cloud provider\u2019s security protocols are breach-able, you would again share the liability and therefore also be open to sanction from the Information Commissioner. <\/span><\/p>\n

Despite the pressures of complying with GDPR, the regulation also presents tremendous business advantages. By establishing the right procedures, processes and training, your organization can build its reputation and trust with customers and demonstrate how seriously you take the management of data. <\/span><\/p>\n

Above all \u2013 for each and every organisation \u2013 ignoring GDPR is not an option, but instead it should be embraced for the opportunities it can bring.<\/span><\/p>\n

This content piece was a joint effort with\u00a0AXELOS, CyNation and UK Cloud.<\/em><\/p>\n

 <\/p>\n

\"More<\/a><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

The General Data Protection Regulation (GPDR) is going to affect every organisation that obtains and stores personal data from 25 May 2018.\u00a0Organisations, in both the public and private sectors, need to take action to meet the requirements of GDPR and avoid the sanctions and fines […]<\/p>\n","protected":false},"author":11,"featured_media":21618,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"class_list":["post-21617","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","topic-cyber-security"],"acf":[],"yoast_head":"\n5 key factors for becoming GDPR compliant | Digital Leaders<\/title>\n<meta name=\"description\" content=\"GDPR is going to affect every organisation that obtains and stores personal data from 25 May 2018.\u00a0Organisations, in both the public and private sectors, need to take action to meet the requirements and avoid the sanctions\/fines the Information Commissioner can impose if data is mishandled, incorrectly shared or lost.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"5 key factors for becoming GDPR compliant | Digital Leaders\" \/>\n<meta property=\"og:description\" content=\"GDPR is going to affect every organisation that obtains and stores personal data from 25 May 2018.\u00a0Organisations, in both the public and private sectors, need to take action to meet the requirements and avoid the sanctions\/fines the Information Commissioner can impose if data is mishandled, incorrectly shared or lost.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/\" \/>\n<meta property=\"og:site_name\" content=\"Digital Leaders\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/digitalleadersprogramme\" \/>\n<meta property=\"article:published_time\" content=\"2018-02-07T17:16:01+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-01-17T09:43:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/02\/LDSCconf-0273-1-e1518023585408.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"5469\" \/>\n\t<meta property=\"og:image:height\" content=\"2665\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"helena.larsen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DigiLeaders\" \/>\n<meta name=\"twitter:site\" content=\"@DigiLeaders\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"helena.larsen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/\"},\"author\":{\"name\":\"helena.larsen\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e\"},\"headline\":\"5 key factors for becoming GDPR compliant\",\"datePublished\":\"2018-02-07T17:16:01+00:00\",\"dateModified\":\"2019-01-17T09:43:10+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/\"},\"wordCount\":667,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/digileaders.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/02\/LDSCconf-0273-1-e1518023585408.jpg\",\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/\",\"url\":\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/\",\"name\":\"5 key factors for becoming GDPR compliant | Digital Leaders\",\"isPartOf\":{\"@id\":\"https:\/\/digileaders.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/02\/LDSCconf-0273-1-e1518023585408.jpg\",\"datePublished\":\"2018-02-07T17:16:01+00:00\",\"dateModified\":\"2019-01-17T09:43:10+00:00\",\"description\":\"GDPR is going to affect every organisation that obtains and stores personal data from 25 May 2018.\u00a0Organisations, in both the public and private sectors, need to take action to meet the requirements and avoid the sanctions\/fines the Information Commissioner can impose if data is mishandled, incorrectly shared or lost.\",\"breadcrumb\":{\"@id\":\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#primaryimage\",\"url\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/02\/LDSCconf-0273-1-e1518023585408.jpg\",\"contentUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/02\/LDSCconf-0273-1-e1518023585408.jpg\",\"width\":5469,\"height\":2665,\"caption\":\"Nick Wilding, GDPR Author\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/digileaders.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"5 key factors for becoming GDPR compliant\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/digileaders.com\/#website\",\"url\":\"https:\/\/digileaders.com\/\",\"name\":\"Digital Leaders\",\"description\":\"We Lead Transformation\",\"publisher\":{\"@id\":\"https:\/\/digileaders.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/digileaders.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/digileaders.com\/#organization\",\"name\":\"Digital Leaders\",\"url\":\"https:\/\/digileaders.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg\",\"contentUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg\",\"width\":3000,\"height\":2992,\"caption\":\"Digital Leaders\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/digitalleadersprogramme\",\"https:\/\/x.com\/DigiLeaders\",\"https:\/\/www.linkedin.com\/groups\/6527637\/\",\"https:\/\/www.youtube.com\/channel\/UCK1pUziPGg9J8R1S0FhBgiQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e\",\"name\":\"helena.larsen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g\",\"caption\":\"helena.larsen\"},\"sameAs\":[\"louise.stokes@digileaders.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"5 key factors for becoming GDPR compliant | Digital Leaders","description":"GDPR is going to affect every organisation that obtains and stores personal data from 25 May 2018.\u00a0Organisations, in both the public and private sectors, need to take action to meet the requirements and avoid the sanctions\/fines the Information Commissioner can impose if data is mishandled, incorrectly shared or lost.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/","og_locale":"en_GB","og_type":"article","og_title":"5 key factors for becoming GDPR compliant | Digital Leaders","og_description":"GDPR is going to affect every organisation that obtains and stores personal data from 25 May 2018.\u00a0Organisations, in both the public and private sectors, need to take action to meet the requirements and avoid the sanctions\/fines the Information Commissioner can impose if data is mishandled, incorrectly shared or lost.","og_url":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/","og_site_name":"Digital Leaders","article_publisher":"https:\/\/www.facebook.com\/digitalleadersprogramme","article_published_time":"2018-02-07T17:16:01+00:00","article_modified_time":"2019-01-17T09:43:10+00:00","og_image":[{"width":5469,"height":2665,"url":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/02\/LDSCconf-0273-1-e1518023585408.jpg","type":"image\/jpeg"}],"author":"helena.larsen","twitter_card":"summary_large_image","twitter_creator":"@DigiLeaders","twitter_site":"@DigiLeaders","twitter_misc":{"Written by":"helena.larsen","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#article","isPartOf":{"@id":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/"},"author":{"name":"helena.larsen","@id":"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e"},"headline":"5 key factors for becoming GDPR compliant","datePublished":"2018-02-07T17:16:01+00:00","dateModified":"2019-01-17T09:43:10+00:00","mainEntityOfPage":{"@id":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/"},"wordCount":667,"commentCount":0,"publisher":{"@id":"https:\/\/digileaders.com\/#organization"},"image":{"@id":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#primaryimage"},"thumbnailUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/02\/LDSCconf-0273-1-e1518023585408.jpg","inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/","url":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/","name":"5 key factors for becoming GDPR compliant | Digital Leaders","isPartOf":{"@id":"https:\/\/digileaders.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#primaryimage"},"image":{"@id":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#primaryimage"},"thumbnailUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/02\/LDSCconf-0273-1-e1518023585408.jpg","datePublished":"2018-02-07T17:16:01+00:00","dateModified":"2019-01-17T09:43:10+00:00","description":"GDPR is going to affect every organisation that obtains and stores personal data from 25 May 2018.\u00a0Organisations, in both the public and private sectors, need to take action to meet the requirements and avoid the sanctions\/fines the Information Commissioner can impose if data is mishandled, incorrectly shared or lost.","breadcrumb":{"@id":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#primaryimage","url":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/02\/LDSCconf-0273-1-e1518023585408.jpg","contentUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/02\/LDSCconf-0273-1-e1518023585408.jpg","width":5469,"height":2665,"caption":"Nick Wilding, GDPR Author"},{"@type":"BreadcrumbList","@id":"https:\/\/digileaders.com\/5-key-factors-becoming-gdpr-compliant\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/digileaders.com\/"},{"@type":"ListItem","position":2,"name":"5 key factors for becoming GDPR compliant"}]},{"@type":"WebSite","@id":"https:\/\/digileaders.com\/#website","url":"https:\/\/digileaders.com\/","name":"Digital Leaders","description":"We Lead Transformation","publisher":{"@id":"https:\/\/digileaders.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/digileaders.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/digileaders.com\/#organization","name":"Digital Leaders","url":"https:\/\/digileaders.com\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/#\/schema\/logo\/image\/","url":"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg","contentUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg","width":3000,"height":2992,"caption":"Digital Leaders"},"image":{"@id":"https:\/\/digileaders.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/digitalleadersprogramme","https:\/\/x.com\/DigiLeaders","https:\/\/www.linkedin.com\/groups\/6527637\/","https:\/\/www.youtube.com\/channel\/UCK1pUziPGg9J8R1S0FhBgiQ"]},{"@type":"Person","@id":"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e","name":"helena.larsen","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g","caption":"helena.larsen"},"sameAs":["louise.stokes@digileaders.com"]}]}},"_links":{"self":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts\/21617","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/comments?post=21617"}],"version-history":[{"count":0,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts\/21617\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/media\/21618"}],"wp:attachment":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/media?parent=21617"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}