GDPR ‘not just an IT Issue’ warn lawyers

Lawyers are warning businesses not to fall into the trap of assuming strict new data protection rules are just a matter for IT departments.

The introduction of the General Data Protection Regulation (GDPR) in May means that all organisations which hold personal data must ensure they comply with new rules or risk heavy fines.

Gilson Gray is warning business owners not believe the common misconception that GDPR relates only to data held in electronic format.

Derek Hamill, head of corporate law at Gilson Gray, said: “The perception is that it’s a computer problem but it’s about the person in front the screen.

“GDPR can impact upon the everyday worker’s life. If you use an address or contact detail without permission, you – or your employer - could be in breach of the regulations. Everyone needs to be conscious about this.

“It’s an evolution similar to the one we’ve seen with password protection. Previously, people were much more blasé about sharing passwords but now they’re very protective of it. It’s the same now with personal details.”

GDPR is designed to give consumers greater control over information held about them and affords them the power to know what data companies have, who has been passed it and for what purpose the information is used.

Breaches can lead to a maximum fine of €20 million or four per cent of global turnover.

It is feared GDPR could also lead to huge number of individuals making claims for compensation for breach of privacy.

Mr Hamill continued: “GDPR applies to all personal data, regardless of its form. It relates to every instance where personal data may be collected, processed or stored by a business.

“GDPR is like a car. You learn to drive and follow the rules but if you go too fast and crash, it’s your fault, not the car maker’s.

“The IT people can only help so much. They give you the brakes and the steering wheel, but you have to use them. It’s a cultural change from one behaviour, where we openly share details, to another where we’re much more cautious.”