GENERAL DATA PROTECTION REGULATIONS (GDPR) COMPLIANCE
With the new General Data Protection Regulations (GDPR) coming into force on the 25thMay 2018, we have been reviewing our policies and processes to ensure that Nuvision Energy (Wales) will be GDPR Compliant by that time.
What is GDPR?
The General Data Protection Regulation (GDPR) is the new European Commission regulation which sets guidelines for processing personal data within the European Union and addresses the export of personal data outside the EU. In the UK, GDPR will replace the Data Protection Act 1998. One of the key changes with the new regulations will be the implementation of large fines for organisations that breach data protection.
Why become GDPR compliant?
Nuvision Energy (Wales) holds a limited amount of personal data for which we are responsible for determining the purposes and means by which that data is processed. We are also occasionally required to process data as instructed by our Clients. For this reason, the new GDPR regulations impacts on us as both controllers and processors of information, and this brings certain responsibilities to us under the new GDPR regulations.
The Journey towards compliance
As an organisation that processes personal data from time to time, Nuvision Energy (Wales) is registered with the Information Commissioner’s Office (ICO). As stated on their web site, the ICO is the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals. The ICO’s web site can be found through this link: https://ico.org.uk/
As a registered member, Nuvision Energy (Wales) has been following the ICO’s data protection self-assessment toolkit in order to check our compliance. This toolkit enables us to assess our compliance with data protection law and helps us find out what we need to do to make sure we are keeping personal data secure.
The toolkit provides checklists for; Controllers, Processors, Information security, direct marketing, records management, data sharing and subject access and CCTV. By following the steps laid out on the ICO’s web site, Nuvision Energy (Wales) has found a clear and efficient way to achieve GDPR compliance by the 25thMay 2018.