{"id":19159,"date":"2018-05-04T09:54:14","date_gmt":"2018-05-04T08:54:14","guid":{"rendered":"http:\/\/vanel.org.uk\/va\/?p=19159"},"modified":"2018-05-04T09:54:14","modified_gmt":"2018-05-04T08:54:14","slug":"gdpr-is-almost-upon-us-are-you-nearly-ready","status":"publish","type":"post","link":"https:\/\/vanel.org.uk\/va\/2018\/05\/gdpr-is-almost-upon-us-are-you-nearly-ready\/","title":{"rendered":"GDPR is almost upon us. Are you nearly ready?"},"content":{"rendered":"

It\u2019s not long now until 25th May<\/span><\/strong> when the new GDPR<\/strong> regulations come into force, overtaking the long standing Data Protection regulations. We\u2019re still busy at VANEL trying to get everything ready, and this week I\u2019ve also been busy training member organisations on a practical approach to GDPR.<\/span><\/p>\n

I\u2019ve been asked to put on more GDPR Basic training sessions, so I\u2019ve scheduled another one on 12th June (from 2pm-4pm). It\u2019s a bit after the \u2018launch\u2019 date, but GDPR is ongoing, we\u2019ll be working on it for months probably to get it all right, so let me know if you\u2019d like a place on this session. More info about the session here<\/a>.<\/span><\/p>\n

Principles<\/span><\/strong><\/p>\n

The key thing about GDPR is that it\u2019s about principles not rules. There is no instruction for how exactly to comply. You need to understand the principles behind it and then work out how to apply them to your organisation and data processing situations. For example – data minimisation and the principle of only collecting personal data that you really can justify a need for. How you put that principle into practice is up to you.<\/span><\/p>\n

So the most important 4 principles I keep coming back to are the highest level ones. They are mentioned in this video here<\/a> which you really should be watching.<\/span><\/p>\n

Accountability<\/strong> – can you account for\/justify\/evidence everything you\u2019re doing around data?
\n<\/span>Transparency<\/strong> – from privacy policies, to data capture forms and more – how are you keeping people informed?
\n<\/span>Governance<\/strong> – getting all the process, procedures, paperwork, people and culture right?
\n<\/span>Security<\/strong> – how are you keeping it all secure?<\/span><\/p>\n

Most GDPR work you\u2019re going to be doing fits into these principles.<\/span><\/p>\n

Self-assessment tool<\/span><\/strong><\/p>\n

A useful new tool which you should really start using is the self-checking tool (here<\/a>). There\u2019s lots of questions to work through, but it will help you to understand which legal basis you should\/could be using for your data collection. You might need to actually work through it over and over again for each different type of data workflow. The help buttons are particularly useful for understanding context and what each question really means. I recommend it – go check it out<\/a>.<\/span><\/p>\n

Resources<\/span><\/strong><\/p>\n

There is a growing list of many useful resources out there, so I\u2019ve assembled links to some of the better ones on a page on our website. Our resource page is here<\/span><\/a>. Take some time to start looking through the resources.<\/span><\/p>\n

GDPR and Children<\/span><\/strong><\/p>\n

There\u2019s still a little bit of grey around the area of GDPR and children and we\u2019re lucky to have Sam Delaney from NCVO coming to speak on this very subject at our V:Expo event on 5th June at Grimsby Central Hall. If you work with younger people then this might be a useful talk to listen to – and of course there\u2019s more going on at the event itself too. All the info about V:Expo is here<\/span><\/a> including how to book.<\/span><\/p>\n

And finally<\/span><\/strong><\/p>\n

And finally, here\u2019s<\/span><\/a> a warning message about GDPR delivered to the sector at a conference last week – \u201cReboot your thinking around personal data ahead of the GDPR deadline\u201d. It\u2019s a reminder that if the way you are using data \u201cfeels uncomfortable\u201d then it\u2019s probably not GDPR compliant. Have a read<\/span><\/a>…<\/span><\/p>\n\n

\n <\/div>\n\n","protected":false},"excerpt":{"rendered":"

An update on GDPR related resources, an extra GDPR Basics training date (12th June) and a few more notes worth reading in this run up to 25th May<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"xn-wppe-expiration":[],"xn-wppe-expiration-action":[],"xn-wppe-expiration-prefix":[],"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[11],"tags":[522],"jetpack_featured_media_url":"","jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/p3cThd-4Z1","jetpack_sharing_enabled":true,"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/vanel.org.uk\/va\/wp-json\/wp\/v2\/posts\/19159"}],"collection":[{"href":"https:\/\/vanel.org.uk\/va\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vanel.org.uk\/va\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vanel.org.uk\/va\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vanel.org.uk\/va\/wp-json\/wp\/v2\/comments?post=19159"}],"version-history":[{"count":4,"href":"https:\/\/vanel.org.uk\/va\/wp-json\/wp\/v2\/posts\/19159\/revisions"}],"predecessor-version":[{"id":19164,"href":"https:\/\/vanel.org.uk\/va\/wp-json\/wp\/v2\/posts\/19159\/revisions\/19164"}],"wp:attachment":[{"href":"https:\/\/vanel.org.uk\/va\/wp-json\/wp\/v2\/media?parent=19159"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vanel.org.uk\/va\/wp-json\/wp\/v2\/categories?post=19159"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vanel.org.uk\/va\/wp-json\/wp\/v2\/tags?post=19159"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}