Else Solicitors Else Solicitors
Menu Close

Your Straightforward Guide to the GDPR

Is your business ready for the new GDPR?

The General Data Protection Regulation becomes law in May 2018.  This law impacts every business and organisation that holds personal data on their customers, i.e. most businesses.

Let me ask you- are you, your senior management team and IT staff aware that:

  • The GDPR comes into force in May 2018 and how it is different from the current Data Protection laws?
  • Complying with the GDPR requires a review of your existing data protection policies and procedures as well as the introduction of new measures?
  • Failure to comply with this new law can result in your company being fined up to €20 million?

If not, then you are far from alone.  Few companies are prepared for the introduction of this new regulation.  As this is an EU regulation, things have been muddied by the Brexit vote which has delayed many UK companies in implementing the needed measures.

However:

  • The GDPR will come into force before we leave the EU;
  • The Government has underlined the fact that the UK must be seen as a data protection compliant country post-Brexit;
  • The GDPR will impact non-EU businesses as it covers the processing of personal data of EU citizens wherever in the world this occurs.

It is important that companies which hold or use the personal data of European citizens take immediate action.  This includes:

  • Reviewing your client facing documentation
  • Re-writing your terms and conditions
  • Creating separate legal documents on the capture, use and termination of personal data.

The GDPR is considered to be the most heavily negotiated piece of European legislation that has ever come into effect.  This view is supported by the length and complexity of the documentation.

Else Solicitors can help you understand how the regulation applies to your company and how you can achieve compliance.  We invite you to contact Adam Gilbert, Head of Corporate and Commercial on 01283 526229 or at adam.gilbert@elselaw.co.uk for more information. 

Most data breaches are caused by employees, so a complete compliance solution requires staff training.  We have teamed up with i-Secured who will ensure that data protection is embedded into the DNA of your business so that you are fully protected.

This brief article covers:

  • Key Takeaway Points
  • What is the GDPR?
  • What Does the GDPR cover?
  • How Does the GDPR Impact My Business and What Steps Should I Take?
  • Why Else?

Reading time: 4 minutes

Key Takeaway Points
  1. The GDPR replaces the Data Protection Directive on 25th May 2018. This impacts all organisations that hold or process the personal data of EU citizens.  Each business will be impacted differently and needs to take numerous steps now to ensure compliance is achieved within the required time-frame.
  2. The GDPR demands a high level of consent for marketing activity. Businesses must be able to provide proof that consent has been given by the individual to hold and process their data for each particular purpose.  This includes reviewing the personal data they currently hold and where it came from.
  3. The GDPR requires certain companies to appoint a data protection officer who has expert knowledge of data protection. This usually applies where you are processing sensitive data or large amounts of personal data.
  4. The National Data Protection Agency (NDPA) has the power to audit companies and apply fines for failure to comply with the GDPR. Any data breaches must be reported to the NDPA within 72 hours.
  5. The GDPR is a complex regulation that requires legal support including reviewing existing customer contracts and producing new terms and conditions which adhere to the GDPR. Employee training is highly recommended as most data breaches are caused by employees making a mistake.
What is the GDPR?

The General Data Protection Regulation (GDPR), was published in the Official Journal of the European Union on 4 May 2016. It will replace the Data Protection Directive with effect from 25 May 2018, so businesses only have a year within which to achieve compliance.

The GDPR will affect all businesses that hold or process the personal data of EU citizens.  It is expected that this regulation will affect every business with a few rare exceptions where a company does not hold personal data.

Each business will be impacted differently.  They must understand how the regulation applies to their business and take the needed actions.  However, businesses that handle a significant amount of personal data will be the most affected.

A key element of the GDPR is not only increased compliance requirements, but heavy financial penalties for non-conformity.  Fines can be up to €20 million or 4% of annual worldwide turnover for groups of companies, whichever is the greater.

What Does the GDPR cover?

The key features of the GDPR are:

  1. Consent

Businesses in the UK have, to date, been able to rely on implied consent. Under the GDPR, they must be able to demonstrate that an individual gave their explicit consent to processing their data.

Consent must be given by a clear affirmative action whether this is through a written, electronic or oral statement. Businesses will bear the burden of proof that consent was validly obtained.

Companies must:

  • Audit and document the personal data they currently hold, recording where it came from and who they shared it with (if you were given consent)
  • Review customer contracts to ensure compliance
  • Review the legal basis for the various types of processing that they carry out and document this.

Individuals have the right to withdraw their consent to holding and processing their data for marketing purposes and this must be respected.

  1. Technical and Organisational Implementation

The GDPR will require businesses to implement technical and organisational measures to ensure that the requirements of the GDPR are met such as:

  • Putting the appropriate policies and processes in place;
  • Ensuring your IT security is fit for purpose;
  • Having robust disaster recovery plans and procedures- these must include knowing where your data is and who has access to it;
  • Conduct data protection impact assessments where appropriate;
  • Develop and implement a data breach response plan including complying with the data breach reporting obligations in the GDPR.
  1. Inspections

The National Data Protection Agency (NDPA) will have power to carry out audits, require information to be provided and obtain access to your premises.  The NDPA will have the power to apply financial penalties for non-compliance on a two-tier basis:

  1. Fines of up to €10 million for violations relating to internal record keeping, data security, data breach notification or the lack of data protection officers.
  2. Fines of up to €20 million for violations relating to breaches relating to the data protection principles, conditions for consent, data subject’s rights or international data transfers.

Other important changes include:

  • Expanded territorial scope- Non-EU data controllers and data processors will be subject to the GDPR if they offer goods or services to data subjects in the EU or monitor data subjects’ behaviour.
  • Record requirements- businesses are required to maintain detailed documentation recording their processing activities. These obligations do not apply to organisations employing less than 250 people unless the processing is likely to result in high risk to the rights and freedoms of individuals, the processing is not occasional or the processing includes sensitive personal data.
  • Know how you are compliant with the regulation- you must understand the GDPR and the measures that you have taken to conform with it.
  • Changes in pseudonymisation regulations- this refers to changes in the regulations covering the processing of personal data in such a way that it can no longer be attributed to a specific individual, without additional information.
  • Strict data breach notification rules- the GDPR requires you to notify, the NDPA within 72 hours of a data breach. If the breach is unlikely to result in high risk to the individuals, the GDPR requires businesses to inform data subjects “without undue delay”.
  • The right to erasure– Individuals will have the right to request that you delete personal data about them in certain circumstances.
  • Individual access requests– If an individual requests information about the data held on them, then an organisation must reply within one month from the date of receipt of the request and provide more information than is required under the Data Protection Directive.
How Does the GDPR Impact My Business and What Steps Should I Take?

The GDPR is a complex piece of EU Regulation.  It impacts every business in a different way.  It requires:

  • The production of compliant legal documentation
  • Changes in policies and procedures
  • Maintenance of records including those giving consent and those describing processing activities
  • Employee training- this is not a prescribed part of compliance but it is highly recommended as most data breaches are caused by employees taking the wrong action.

Else Solicitors and i-Secured can help you to achieve full compliance with the GDPR.

Why Else?

Else is a modern, dynamic and forward thinking firm of solicitors who have the expertise you expect from a large, traditional law firm.

You will discover that we are different to other legal firms.  We will help you achieve compliance and then look at other ways that we can add value to your company.  This could include introducing you to new customers or suppliers in our extensive network or offering you some new insight into your market or your business.

Else Solicitors has an enviable reputation for always going the extra mile and offering a personal, jargon free service.  Your business is not only in trusted legal hands but will also benefit from our extensive business knowledge, experience and contacts.

If you are concerned about GDPR compliance, then we urge you to contact Adam Gilbert, Head of Corporate and Commercial on 01283 526229 or at adam.gilbert@elselaw.co.uk at your earliest convenience. 

Experience the Else difference today!

“It gives me great pleasure in sending you this email.

In 2013 I had my first experience of ELSE solicitors was when I was having awful issues with my own solicitor regarding my fathers estate.

My first meeting was with Peter Fox `{`Else Solicitors merged with PG Fox & Co in 2009, Peter Fox was in business for over 40 years`}`, who was very understanding and helpful which at the time I wasn’t used to this from a solicitor. Due to Peter dealing with commercial property I was passed to the Wills and Probate team.

I was introduced to Kathryn who specialises in Wills and Probate. I will always remember on one of my visits to ELSE the frustration and anger came out of me as to how my previous solicitor treated me, Kathryn didn’t say anything until I had said my piece. Once I had calmed down Kathryn then calmly said to me, “I know you feel very bitter inside but let me try and put back the trust so you will have confidence in solicitors again”, from that day onward Kathryn has managed to do that for me.

Just recently I have amended my Will and was advised by Kathryn to have a POA in place which I have now done.

Throughout all my meetings with Kathryn I have found the following:

• Professional exceptional high standards with a very caring touch.
• Makes legal matters simple to understand.
• Wastes no time in responding to my emails.
• Takes time in understanding my issues and concerns.
• Has outstanding people skills.
• Goes the extra mile so I had peace of mind, especially when sorting out my Will.
• Has that natural ability to make people feel at ease when under pressure.

I have the greatest respect for Kathryn on how she goes about her work. If Kathryn ever did move on, I can categorially say that it would be a near impossible task to find a replacement of the same calibre as Kathryn.

I am someone who will criticise when something is not right but gives credit when a job has been done well. I can comment firsthand on the outstanding work Kathryn has done for me.”

Happy Wills & Probate Client

“From the initial consultation, through to selling my property, the Property team at Else Solicitors have been professional, proactive and most importantly have kept me updated at all times. Their attention to detail ensured that every aspect of the sale was meticulously handled, alleviating any concerns along the way. Else’s ability to explain complex legal concepts in a clear and concise manner was greatly appreciated and helped me feel confident in any decision making. I cannot thank the team enough for their hard work, professionalism, and dedication throughout this process. I would recommend Else Solicitors to anyone.”

Callum Campbell, MD Brilliant Hygiene Services Ltd

“Kathryn, it has been a pleasure working with you and we will certainly recommend you to friends and family. Many thanks for your wonderful support to myself, my husband and mother-in-law for all the work conducted on our LPA's for property and financial affairs and health and welfare.”

Happy Wills & Probate Client

“My husband and I engaged Else and Co. in the sale of our home after a couple of earlier and very positive experiences with the company. The sale process was non standard owing to the nature of the deal, the long history of the property and the requirements of the buyers. The team handled everything in a confident, capable, timely and transparent manner right through to a successful closure. We appreciate expertise when we see it, particularly when it is local. We wouldn’t hesitate to reach out to Else and Co. again.”

Chris & Alison Stephenson

“I was advised at a preliminary court hearing that I should engage with a solicitor for legal assistance on my court case. I researched Else solicitors and had an initial call to discuss my case, which I was impressed with. I engaged with their services and worked with Chris throughout the matter. He was impeccable with his communication and quick to respond. As a result of his hard word, Chris successfully resolved the matter through negotiation saving future legal fees and avoiding the need to attend the final court hearing. I would highly recommend Else’s services for future business legal requirements.”

Dispute Resolution Client

``I wish to express my sincere appreciation for the excellent service provided to me by Kathryn Caple and an Else Solicitors team. I could not have completed my father’s estate and his Will processing without their
kind help while I am leaving in USA.

Kathryn is one of the shining examples of professionalism, caring and knowledgeable person. She listened, advised and kept me informed throughout the process dealing with my father’s estate. I am very pleased with the quality, responsiveness and extensive legal expertise of Kathryn.

A massive thanks to Kathryn and Else Solicitors Team! I would highly recommend their service.

On my personal note, I really enjoyed working with Kathryn. I could not be more satisfied.”

Rakesh Mishra U.S.A.

``Thank you Kathryn for all that you have done to render an unpleasant process more palatable. I do appreciate the compassion you have shown throughout.”

Wills & Probate Client

``Thank you so much for all your help. You’ve really gone above and beyond and made this whole process much easier.”

Wills & Probate Client

``I would like to thank Kathryn for her support and guidance throughout this protracted procedure of settling the affairs of my relative. My family and I appreciated your endless patience”

Mr Terry Wills & Probate Client

``I used Else Solicitors recently to do my probate work, having had excellent service previously on some house sale matters. Kathryn Caple, their head of probate was exceptionally efficient and knowledgeable. I had total confidence in the expertise I was being provided and the work was completed in a very timely manner. Feedback was continuous and I was totally satisfied by the outcome``

Russell Jeans Probate Client

``We are very pleased with the service Else Solicitors provided for us. We had retentions that were overdue (circa £40K), the Main Contractor had missed the payment date on their Payment Certificate, when chased we were told that they couldn’t pay for another couple of months due to cashflow, we had been in similar situations before, having been given payment plans that weren’t met, and then companies go into liquidation.

I looked on the Internet and filled in Else Solicitors web enquiry form, A member of the team called me back and talked through the various options, which I took away to discuss internally with my business partner. We agreed the plan of action which Else's team executed swiftly and efficiently, dealing with all correspondence received from the Main Contractors Solicitors, our monies were received in our bank within 2 weeks.

Can’t recommend Else enough!``

Construction Client Construction - Retention Monies

``I would never hesitate in using their services again and in recommending them to other professionals.``

Angelica Duncan Director - Chameleon School of Construction

``Else have a great ability to handle complicated cases in a pragmatic manner, focusing on the commercial and practical impact for the client.``

Liz Strama CEO - HR Protected

``Smith Cooper work with a handpicked selection of law firms across the UK where our accountancy matters require expert legal advice. We refer specific corporate, litigation and insolvency cases to Else Solicitors because of their technical experience, flexible and professional approach and their efficient way of working. We have established close working relationships with the team at Else over a number of years.``

Dean Nelson Partner - Business Recovery & Insolvency - Smith Cooper

``I appreciate the attention I received and your professional service and whilst I don’t wish for a similar situation I would have no hesitation in using your services again.``

Debt Recovery Client

``Thank you Else Solicitors and in particular Laura Charles for another successful outcome this week in the recovery of our bad debt. We don’t get them often but it’s a huge relief and comfort to know we have your friendly but extremely professional firm always there ready to help with very little notice. It’s an absolute pleasure working with you and here’s to many more successful years. Thank you!``

Debt Recovery Client

``A massive thank you to Laura and the rest of the team at Else solicitors.
We had some issues retrieving monies owed from a previous contractor for the past 2 years, and the team really did go above and beyond.
From our point of view, it was money very well spent as within 2 weeks full payment was made by the contractor who previously had a very stern view of not paying.
Laura and her team battled many emails with the contractors solicitors, all of which was included in the price.
A massive thank you once again! Would highly recommend!``

Debt Recovery Client

``I would like to extend my thanks to Chris and the team at Else Solicitors for their support and guidance over my recent purchase of Ethical Property Partners England and Wales.
Chris and his team,have been professional and supportive throughout and where needed have been prompt in their responses, often at late notice.
I was really pleased with their approach to helping myself and my Business Partner Paulene navigate the pages and pages of contracts and break them down into plain English where needed!
I'm looking forward to them being able to help with the next step of sorting our Shareholder agreements!``

Amanda Jarvis-Doyle Ethical Property Partners (Property Consultant)

``We provide international shipping services to customers and following the non-payment of an invoice, we instructed Else Solicitors to seek recovery of this.

Proceedings were issued and the case proceeded to a final hearing. We cannot thank the team enough for the work put into this case as the final judgment was in our favour and we recovered the debt in full, plus a portion of our legal costs.

The Team explained each step of the process to ensure our understanding of the case and provided updates at every opportunity. We were very pleased with the final result and the support received on the run up to the hearing.

We would not hesitate to use their services again.``

Ian Hardie Sales Director at Smart Directions Limited.

``Laura and the team have become an excellent asset to our finance department over the last year. They have helped us recover debts in full from 2 particularly difficult payers that we had no hope of recovering ourselves! They make the process simple and easy to follow, and always have a quick, helpful reply when we need something clarified. I would recommend Else Law to anyone who needs additional help with pursuing uncooperative customers because so far they have a 100% success rate with us!``

Debt Recovery Client

``A huge thank you to Laura and Elselaw for assisting in recovering monies owed on a 12-month-old invoice. Even though our business is based in Australia, we were impressed how quickly they assisted with our enquiry and put us at ease given the international element to the litigation.

We would highly recommend any business based outside of the UK, who has a troublesome UK client, to consider using Else Solicitors (Laura!) to resolve their issue quickly and efficiently.”

John Morgan, Director of Forensic Instinct

“The Else Debt Recovery team have done an excellent job in keeping us organised and on track over the past 18 months and the Commercial Dispute Resolution teams input has been a great help in recent months, dealing with the more problematic situations, including collection of the largest debt by speaking directly with the MD and owner of the debtor company, taking the heat out of that situation”

Debt Recovery Client

“We want to thank Kathryn and the team for their dedication and professionalism in dealing with our matter. We are all extremely grateful for your efforts”

Wills and Probate Client

``Forté Lubricants a division of Illinois Tool Works Ltd is a manufacturer and supplier of petrol and diesel-operated engine additives and has 40 years of experience helping and advising UK garages improve vehicle engine performance with our range of products.
Most of our debt recovery is done in house, however, we sometimes require Else to recover debts on outstanding invoices by one off buyers to the value of £500, resulting in Else recovering the money in full in less than 30 days.

Having a well-known reputable company in Else at the end of a phone is reassuring. We have found that since we have been using Else to recover debts, we have saved time, money and most importantly their expertise means that the debt is almost always recovered.

Else offer an outstanding service which we have used for over 5 years. We would thoroughly recommend their service without hesitation.``

Lisa Griffin Debt Recovery Client
Address

Else Solicitors LLP
First Avenue
Burton upon Trent
Staffordshire
DE14 2WE

View on Google Map

Contact

Tel: 01283 526200

Fax: 01283 510140

DX: 700334 BURTON ON TRENT 2

© 2024 Else Solicitors LLP | Made in Burton by Davies Scothorn

Share This

Copy Link to Clipboard

Copy