{"id":11017,"date":"2018-04-05T14:45:00","date_gmt":"2018-04-05T14:45:00","guid":{"rendered":"http:\/\/www.webhosting.uk.com\/blog\/?p=11017"},"modified":"2025-10-24T12:07:55","modified_gmt":"2025-10-24T12:07:55","slug":"15-essential-facts-about-general-data-protection-regulation-gdpr","status":"publish","type":"post","link":"https:\/\/www.webhosting.uk.com\/blog\/15-essential-facts-about-general-data-protection-regulation-gdpr\/","title":{"rendered":"15 Essential Facts about General Data Protection Regulation (GDPR)"},"content":{"rendered":"\r\n

The 25th May will see the coming into force of the General Data Protection Regulation (GDPR). Its aim is to make data protection more robust and to give individuals greater control over their privacy. The regulation applies to all data held about EU citizens and will, therefore, affect every organisation that collects it. To give you an overview of the scope of the regulation, here are fifteen essential facts you need to know about GDPR.<\/p>\r\n\r\n\r\n\r\n

Privacy rights<\/strong><\/h2>\r\n\r\n\r\n\r\n

Following its implementation, every citizen in the EU will have the following privacy rights:<\/p>\r\n\r\n\r\n\r\n

    \r\n
  1. The right to access their data
    <\/strong>From 25th<\/sup> May, any EU citizen has the right to be given access to any personal data an organisation holds about them – and be informed about how it is processed and used. Organisations will have to provide these details on request.<\/li>\r\n
  2. Data correction rights
    <\/strong>The new regulation stipulates that any personal information an organisation holds must be accurate. Where errors occur, individuals can demand that corrections are made.<\/li>\r\n
  3. The right to be forgotten
    <\/strong>GDPR also provides the right to be forgotten. Therefore, if an individual requests it, an organisation must stop processing and delete all the data it has concerning that person.<\/li>\r\n
  4. Data portability rights
    <\/strong>Individuals can also request that personal data you hold about them is transferred to other organisations. This includes purchase histories, employment records, call logs, gas and electric consumption records, no-claims bonuses, etc.<\/li>\r\n
  5. Data breach notification rights
    <\/strong>Under GDPR, delaying the notification of a data breach is forbidden. There is now a legal obligation to inform customers and regulatory bodies within 72 hours of the breach taking place.
    Areas of data protection
    GDPR puts in place the following protections:<\/li>\r\n
  6. Protecting data that identifies individuals
    <\/strong>GDPR applies to any information which can be used to identify an individual. Besides obvious data, like names and addresses, this includes things like passport numbers, car registration numbers and even CCTV recordings.<\/li>\r\n
  7. Protecting demographic data
    <\/strong>Data regarding an individual\u2019s race, age, gender, disability, ethnicity and sexual orientation is also protected under the new regulation.<\/li>\r\n
  8. Web data protection
    <\/strong>Under GDPR, web data, including IP addresses, location data, email addresses, browsing histories and cookie data are all regarded as personal data which needs to be secure from loss, hacking or theft.<\/li>\r\n
  9. Political views
    <\/strong>While the \u2018Vote for\u2019 poster in the front window might be a dead giveaway, this doesn\u2019t mean that data held about a person\u2019s political views is not private. It is. If you store information about party memberships, political opinions, previous voting habits or any similar information, it must be securely protected.<\/li>\r\n
  10. Biometric, genetic and health data
    <\/strong>The potential theft and sale of biometric, genetic and health data can have huge consequences. For this reason, all these forms of data come under the auspices of GDPR.
    Requirements on organisations
    GDPR places the following requirements on organisations:<\/li>\r\n
  11. Data protection by design
    <\/strong>One requirement of GDPR is that organisations must implement data protection measures by design. The term \u2018by design\u2019 requires data security to be in place from the beginning to end of the data lifecycle – from collection to deletion.
    As part of this, organisations need to carry out a \u2018data protection impact assessment\u2019 to identify risks and outline ways to address them.<\/li>\r\n
  12. The Data Protection Officer
    <\/strong>Another requirement of GDPR is that organisations which process or store sensitive data or significant amounts of personal data must establish a Data Protection Officer (DPO) role. This also applies to any organisation that regularly monitors data subjects. The DPO has overall responsibility and is ultimately accountable for data protection, privacy and GDPR compliance.<\/li>\r\n
  13. Protection beyond the EU
    <\/strong>GDPR\u2019s jurisdiction is not limited to within the geographical borders of the EU; instead, it extends to organisations outside of the EU that process EU citizens\u2019 personal data. Whilst this may seem impossible to fully enforce, it means non-European companies that wish to trade in the EU will have to follow the same rules as EU organisations.
    Other key points<\/li>\r\n
  14. Post-Brexit GDPR
    <\/strong>The UK government is fully supportive of GDPR and is committed to making sure that the rights and responsibilities it gives continue after Brexit. Indeed, if we are to continue to trade with the EU, any UK organisations that keep data from EU citizens would still need to comply.<\/li>\r\n
  15. Hefty fines for non-compliance
    <\/strong>The one thing that has made GDPR hit the headlines is the eye-watering size of the fines for non-compliance. The maximum fine is \u20ac20 million or 4% of an organisation\u2019s annual global turnover, whichever is higher. This level of fine can be handed out for not adhering to core principles of data processing, for infringement of personal rights, or for passing personal data to third parties that do not adequately protect data \u2013 in other words, to organisations that are not GDPR compliant.<\/li>\r\n<\/ol>\r\n\r\n\r\n\r\n

    How Webhosting UK looks after your data<\/strong><\/h2>\r\n\r\n\r\n\r\n

    WHUK began preparations for GDPR in 2015 and has everything in place to protect the data we hold about our customers and to help them protect the data they hold on others.

    Our security measures include:<\/strong><\/p>\r\n\r\n\r\n\r\n\r\n\r\n