What changes will take place under the GDPR from an employer’s perspective? What all do they need to apply in their business to properly comply with the GDPR?
The introduction of the new legislation threatens businesses with unprecedented penalties if they fail to comply with the regulation. Small and medium sized businesses have less financial resources at their disposal. Lack of resources could limit the implementation of the GDPR. However, companies must take into account the high fines for non-compliance with the GDPR, which can reach up to 20 million euros or 4% of annual turnover.
What changes are in store for businesses?
There are many changes ahead for businesses, including adjusting internal processes for dealing with the personal data of employees, clients and job applicants. GDPR brings with it a considerable administrative burden. There will be a need to analyse the current state of the business. In terms of security requirements, businesses are also facing technical changes involving the appointment of a data protection officer.
Analysis
Use a business analytics analysis to find out what data you are currently working with and who has access to it. The accesses analyzed are not only internal employees, but also external collaborators and suppliers.
Technical measures
Under GDPR, you must ensure maximum security for processed and stored data, eliminating and preventing the risk of data loss and misuse. The implementation of technical measures will lead to the security of the personal data stored.
Data Protection Officer DPO
Selected entities (see article on DPOs) will need to appoint a Data Protection Officer (DPO). It is the DPO who will be responsible for the day-to-day monitoring of data handling.
There are significant demands on entities and it is high time to start implementing the GDPR. One of the main pillars for the implementation of the regulation is to find out where data is collected and for what purpose it will be used.
We’ve provided a clear infographic to help you navigate the preparation and implementation points for successful GDPR compliance.
If you are interested in details, don’t understand something or need any other information, please contact us. We will be happy to advise and address your needs and questions individually.