GDPR General Data Protection Regulations Members briefing 9 May - - PowerPoint PPT Presentation

GDPR

General Data Protection Regulations

Members’ briefing 9 May 2019

Comparison

DPA 1998

• Fines up to £500K
• SARs £10
• SARs 40 days
• Data breaches reported

without delay

• Privacy Impact Assessments

best Practice GDPR

• Fines up to €20M
• SARS Free
• SARs up to a month
• Data breaches mandatory if

high risk within 72 hours

• Data Protection Impact

Assessments mandatory

• Data Protection Officer

Will GDPR affect you?

• Do you use your personal email account for

Council business?

• Do you for example use your personal email

account to print documents?

• If the answer to either of the above is YES

GDPR could affect you.

What do you need to do?

• Do not use your personal email account for

Council Business because you open it up to potential scrutiny for the purposes of SARs

• If you have to; delete all Council documents as

soon as they are printed /received.

What do you need to do?

• If you suspect a data breach - regardless of

how it occurred please tell me asap

• I only have 72 hours to report it

Any Questions

?