{"id":23041,"date":"2018-05-23T16:20:56","date_gmt":"2018-05-23T15:20:56","guid":{"rendered":"https:\/\/digileaders.com\/?p=23041"},"modified":"2019-01-17T09:43:09","modified_gmt":"2019-01-17T09:43:09","slug":"we-all-data-subjects-what-expect-under-gdpr","status":"publish","type":"post","link":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/","title":{"rendered":"We\u2019re all data subjects \u2013 so what can we expect under GDPR?"},"content":{"rendered":"<p class=\"p1\"><span class=\"s1\">The requirements for businesses under GDPR have been set out for two years. So why the last-minute panic? In this comment piece, Ci\u2019s Director of Policy and Advocacy, Maeve Walsh, looks at the preparations that businesses should by now have completed to comply with GDPR and the incentives for getting it right \u2013 for all of us. <\/span><\/p>\n<p class=\"p1\"><span class=\"s1\">The introduction of the EU General Data Protection Regulation (GDPR) in a few days\u2019 time is a once-in-a-generation update to the existing and somewhat dated data protection framework dating from 1998. Twenty years on, much of our business, financial and social interactions traverse the internet, and as a result our valuable personal data is now being processed by, and shared with, more organisations than we are probably aware of.<\/span><\/p>\n<p class=\"p1\"><span class=\"s1\">GDPR is a complex framework of requirements. But, having been available two years ahead of its introduction, many businesses are only now coming to terms with the changes that they will need to make. What\u2019s taken them so long? At its heart is the principle of \u201cdata privacy by design and default\u201d, which requires that considerations for the safe and secure processing of personal data are understood before those activities can take place. It introduces a greater set of rights for data subjects, allowing each citizen more visibility and control over why, how and where their personal data is processed. With potential fines as high as \u00a317m\/\u20ac20m if companies don\u2019t comply or there is a breach, there is a huge incentive to take GDPR seriously.<\/span><\/p>\n<p class=\"p1\"><span class=\"s1\">Let\u2019s take a look at one specific sector. Over the last 20 years, online retail has boomed, whether for the weekly grocery shop or for a new car. Supply businesses are now regularly processing the personal data of millions of customers as a matter of routine. That personal data is probably being processed by many different parts of their business:<span class=\"Apple-converted-space\">\u00a0 <\/span>the back-office IT function, the staff who prepare and dispatch the order, those who take payment information, delivery staff and, in some situations, returns handling teams. It\u2019s essential that data processing activities are properly mapped out and adjusted to ensure \u201cdata minimisation\u201d \u2013 but do all staff need to see every component of the customer\u2019s transaction data? How can this be reduced to lower the risks to that personal data? Is automated processing of personal data any more secure than manual intervention by staff?<\/span><\/p>\n<p class=\"p1\"><span class=\"s1\">Under GDPR, customers will rightly expect to have a clear and unambiguous understanding of why they are submitting their personal data, who will have access to it (both people and IT systems), and how it will be kept securely. This requires a review of Privacy Notices, and the clauses within the standard terms and conditions that communicate information about the need to process personal data. GDPR specifies six possible reasons why personal data may need to be processed, and at least one of these needs to be valid for the processing to be lawful. In our earlier example, the supply of goods or services to a customer is likely to be based upon \u201ca contract with the data subject\u201d (where the data-processing activities have been detailed in the contract), or alternatively \u201cthe explicit consent of the data subject\u201d (where their approval for the processing of their personal data for specific purposes has been obtained). <\/span><\/p>\n<p class=\"p1\"><span class=\"s1\">For other data-processing activities, such as direct marketing to an existing customer base, the basis of \u201clegitimate interests of the business\u201d will probably be most appropriate, but care needs to be exercised to ensure that the interests of the business do not exceed the rights of the data subjects. Continuing the retail theme, with a growing number of businesses providing customer loyalty schemes, and the consequential gathering of larger volumes of personal data on customers\u2019 behaviour, there is a clear need to understand:<\/span><\/p>\n<ol class=\"ol1\">\n<li class=\"li1\"><span class=\"s1\">Whether customers understand how their personal data will be used within such schemes, for example to understand their retail habits, interests or to provide guidance on financial services that may be of interest to them<\/span><\/li>\n<li class=\"li1\"><span class=\"s1\">How to deliver customers\u2019 rights, if they request that they do not want to receive direct marketing communications, or if they object to any automated decision-making or data-profiling activities that are being undertaken<\/span><\/li>\n<li class=\"li1\"><span class=\"s1\">How any third parties engaged to deliver \u201cbig data\u201d analysis services are selected, and that they can also safeguard the personal data that is to be shared with them<\/span><\/li>\n<li class=\"li1\"><span class=\"s1\">How the details of any selected third parties are shared with customers (e.g. within Privacy Notices), which should outline the data processing activities that they will be undertaken, the locations (countries) of that data processing and which data protection framework applies.<\/span><\/li>\n<\/ol>\n<p class=\"p1\"><span class=\"s1\">Almost every business employs people. A further consideration for businesses under GDPR is to be able to demonstrate that the processing of their employees\u2019 personal data can be securely managed too, whether for payroll and benefits administration, performance management, training, etc; or for the \u201clegitimate interests\u201d of the business (e.g. time keeping, productivity etc). These requirements can (and should, by now) be clearly defined and communicated within an updated employment contract.<\/span><\/p>\n<p class=\"p1\"><span class=\"s1\">Finally, let\u2019s not overlook the financial penalties for non-compliance or personal data breaches. The latter requires that businesses\u2019 personal data processing systems and activities (both manual and IT-based) can identify when something has gone wrong. Education and awareness programmes are needed to communicate the importance of identifying and reporting errors promptly. And, of course, financial penalties may not just be limited to statutory fines but can potentially arise from any civil claims which may be brought by an affected data subject.<\/span><\/p>\n<p class=\"p1\"><span class=\"s1\">So, it\u2019s an understatement to say that GDPR is requiring significant focus and effort from all businesses. But it is entirely appropriate for the level of personal data processing in today\u2019s world. Each one of us is a data subject, and we should all have a reasonable expectation that our personal data is being kept securely, processed only for purposes we understand, and promptly deleted when no longer needed.<\/span><\/p>\n<p class=\"p1\"><span class=\"s1\">That\u2019s not too much to ask, is it?<\/span><\/p>\n<hr \/>\n<p>This article originally appeared on the\u00a0<a href=\"http:\/\/www.connectedobservatory.net\/\" target=\"_blank\" rel=\"noopener\" data-saferedirecturl=\"https:\/\/www.google.com\/url?q=http:\/\/www.connectedobservatory.net\/&amp;source=gmail&amp;ust=1527177027932000&amp;usg=AFQjCNFNnqqL7gRH_NJhJXDAjzEidNnM3A\">Observatory for a Connected Society<\/a>, powered by Corsham Institute and RAND Europe.<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"http:\/\/digileaders.com\/ideas\/\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-22749\" src=\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/05\/Button-colour-green-2.png\" alt=\"More Thought Leadership\" width=\"356\" height=\"74\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The requirements for businesses under GDPR have been set out for two years. So why the last-minute panic? In this comment piece, Ci\u2019s Director of Policy and Advocacy, Maeve Walsh, looks at the preparations that businesses should by now have completed to comply with GDPR [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":23044,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"class_list":["post-23041","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","region-south-west","topic-cyber-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>We\u2019re all data subjects \u2013 so what can we expect under GDPR? | Digital Leaders<\/title>\n<meta name=\"description\" content=\"At the heart of GDPR is \u201cdata privacy by design and default\u201d, which requires that the safe\/secure processing of personal data is understood before activities take place. It introduces more rights for data subjects, allowing citizens more visibility and control over the why, how and where of their personal data.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"We\u2019re all data subjects \u2013 so what can we expect under GDPR?\" \/>\n<meta property=\"og:description\" content=\"The requirements for businesses under GDPR have been set out for two years. So why the last-minute panic? In this comment piece, Ci\u2019s Director of Policy and Advocacy, Maeve Walsh, looks at the preparations that businesses should by now have completed to comply with GDPR and the incentives for getting it right \u2013 for all of us.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/\" \/>\n<meta property=\"og:site_name\" content=\"Digital Leaders\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/digitalleadersprogramme\" \/>\n<meta property=\"article:published_time\" content=\"2018-05-23T15:20:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-01-17T09:43:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/05\/people-3368243_1920-e1527089006142.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1008\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"helena.larsen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"We\u2019re all data subjects \u2013 so what can we expect under GDPR?\" \/>\n<meta name=\"twitter:description\" content=\"The requirements for businesses under GDPR have been set out for two years. So why the last-minute panic? In this comment piece, Ci\u2019s Director of Policy and Advocacy, Maeve Walsh, looks at the preparations that businesses should by now have completed to comply with GDPR and the incentives for getting it right \u2013 for all of us.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/05\/people-3368243_1920-e1527089006142.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@DigiLeaders\" \/>\n<meta name=\"twitter:site\" content=\"@DigiLeaders\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"helena.larsen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/\"},\"author\":{\"name\":\"helena.larsen\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e\"},\"headline\":\"We\u2019re all data subjects \u2013 so what can we expect under GDPR?\",\"datePublished\":\"2018-05-23T15:20:56+00:00\",\"dateModified\":\"2019-01-17T09:43:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/\"},\"wordCount\":1040,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/digileaders.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/05\/people-3368243_1920-e1527089006142.jpg\",\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/\",\"url\":\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/\",\"name\":\"We\u2019re all data subjects \u2013 so what can we expect under GDPR? | Digital Leaders\",\"isPartOf\":{\"@id\":\"https:\/\/digileaders.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/05\/people-3368243_1920-e1527089006142.jpg\",\"datePublished\":\"2018-05-23T15:20:56+00:00\",\"dateModified\":\"2019-01-17T09:43:09+00:00\",\"description\":\"At the heart of GDPR is \u201cdata privacy by design and default\u201d, which requires that the safe\/secure processing of personal data is understood before activities take place. It introduces more rights for data subjects, allowing citizens more visibility and control over the why, how and where of their personal data.\",\"breadcrumb\":{\"@id\":\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#primaryimage\",\"url\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/05\/people-3368243_1920-e1527089006142.jpg\",\"contentUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/05\/people-3368243_1920-e1527089006142.jpg\",\"width\":1920,\"height\":1008,\"caption\":\"3 people at a train station on their phones\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/digileaders.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"We\u2019re all data subjects \u2013 so what can we expect under GDPR?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/digileaders.com\/#website\",\"url\":\"https:\/\/digileaders.com\/\",\"name\":\"Digital Leaders\",\"description\":\"We Lead Transformation\",\"publisher\":{\"@id\":\"https:\/\/digileaders.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/digileaders.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/digileaders.com\/#organization\",\"name\":\"Digital Leaders\",\"url\":\"https:\/\/digileaders.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg\",\"contentUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg\",\"width\":3000,\"height\":2992,\"caption\":\"Digital Leaders\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/digitalleadersprogramme\",\"https:\/\/x.com\/DigiLeaders\",\"https:\/\/www.linkedin.com\/groups\/6527637\/\",\"https:\/\/www.youtube.com\/channel\/UCK1pUziPGg9J8R1S0FhBgiQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e\",\"name\":\"helena.larsen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g\",\"caption\":\"helena.larsen\"},\"sameAs\":[\"louise.stokes@digileaders.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"We\u2019re all data subjects \u2013 so what can we expect under GDPR? | Digital Leaders","description":"At the heart of GDPR is \u201cdata privacy by design and default\u201d, which requires that the safe\/secure processing of personal data is understood before activities take place. It introduces more rights for data subjects, allowing citizens more visibility and control over the why, how and where of their personal data.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/","og_locale":"en_GB","og_type":"article","og_title":"We\u2019re all data subjects \u2013 so what can we expect under GDPR?","og_description":"The requirements for businesses under GDPR have been set out for two years. So why the last-minute panic? In this comment piece, Ci\u2019s Director of Policy and Advocacy, Maeve Walsh, looks at the preparations that businesses should by now have completed to comply with GDPR and the incentives for getting it right \u2013 for all of us.","og_url":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/","og_site_name":"Digital Leaders","article_publisher":"https:\/\/www.facebook.com\/digitalleadersprogramme","article_published_time":"2018-05-23T15:20:56+00:00","article_modified_time":"2019-01-17T09:43:09+00:00","og_image":[{"width":1920,"height":1008,"url":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/05\/people-3368243_1920-e1527089006142.jpg","type":"image\/jpeg"}],"author":"helena.larsen","twitter_card":"summary_large_image","twitter_title":"We\u2019re all data subjects \u2013 so what can we expect under GDPR?","twitter_description":"The requirements for businesses under GDPR have been set out for two years. So why the last-minute panic? In this comment piece, Ci\u2019s Director of Policy and Advocacy, Maeve Walsh, looks at the preparations that businesses should by now have completed to comply with GDPR and the incentives for getting it right \u2013 for all of us.","twitter_image":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/05\/people-3368243_1920-e1527089006142.jpg","twitter_creator":"@DigiLeaders","twitter_site":"@DigiLeaders","twitter_misc":{"Written by":"helena.larsen","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#article","isPartOf":{"@id":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/"},"author":{"name":"helena.larsen","@id":"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e"},"headline":"We\u2019re all data subjects \u2013 so what can we expect under GDPR?","datePublished":"2018-05-23T15:20:56+00:00","dateModified":"2019-01-17T09:43:09+00:00","mainEntityOfPage":{"@id":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/"},"wordCount":1040,"commentCount":0,"publisher":{"@id":"https:\/\/digileaders.com\/#organization"},"image":{"@id":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#primaryimage"},"thumbnailUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/05\/people-3368243_1920-e1527089006142.jpg","inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/","url":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/","name":"We\u2019re all data subjects \u2013 so what can we expect under GDPR? | Digital Leaders","isPartOf":{"@id":"https:\/\/digileaders.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#primaryimage"},"image":{"@id":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#primaryimage"},"thumbnailUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/05\/people-3368243_1920-e1527089006142.jpg","datePublished":"2018-05-23T15:20:56+00:00","dateModified":"2019-01-17T09:43:09+00:00","description":"At the heart of GDPR is \u201cdata privacy by design and default\u201d, which requires that the safe\/secure processing of personal data is understood before activities take place. It introduces more rights for data subjects, allowing citizens more visibility and control over the why, how and where of their personal data.","breadcrumb":{"@id":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#primaryimage","url":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/05\/people-3368243_1920-e1527089006142.jpg","contentUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2018\/05\/people-3368243_1920-e1527089006142.jpg","width":1920,"height":1008,"caption":"3 people at a train station on their phones"},{"@type":"BreadcrumbList","@id":"https:\/\/digileaders.com\/we-all-data-subjects-what-expect-under-gdpr\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/digileaders.com\/"},{"@type":"ListItem","position":2,"name":"We\u2019re all data subjects \u2013 so what can we expect under GDPR?"}]},{"@type":"WebSite","@id":"https:\/\/digileaders.com\/#website","url":"https:\/\/digileaders.com\/","name":"Digital Leaders","description":"We Lead Transformation","publisher":{"@id":"https:\/\/digileaders.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/digileaders.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/digileaders.com\/#organization","name":"Digital Leaders","url":"https:\/\/digileaders.com\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/#\/schema\/logo\/image\/","url":"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg","contentUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg","width":3000,"height":2992,"caption":"Digital Leaders"},"image":{"@id":"https:\/\/digileaders.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/digitalleadersprogramme","https:\/\/x.com\/DigiLeaders","https:\/\/www.linkedin.com\/groups\/6527637\/","https:\/\/www.youtube.com\/channel\/UCK1pUziPGg9J8R1S0FhBgiQ"]},{"@type":"Person","@id":"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e","name":"helena.larsen","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g","caption":"helena.larsen"},"sameAs":["louise.stokes@digileaders.com"]}]}},"_links":{"self":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts\/23041","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/comments?post=23041"}],"version-history":[{"count":0,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts\/23041\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/media\/23044"}],"wp:attachment":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/media?parent=23041"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}