Prepare for GDPR.

The General Data Protection Regulation (GDPR) is new legislation designed to give greater data protection and rights to individuals from 25 May 2018. Last March we shared an overview, and in September we shared some FAQs.

It’s time to start thinking about the personal data you hold in your role, such as contact details, medical information or any individual’s personal data. Take some time to think about where and how you store this data, how you use the data, and how you delete the data.

From January onwards, we’ll be sharing checklists, guidance, toolkits and sample privacy notices. In May, we’ll be updating the data protection rules in POR. If you’re a member of a local Executive Committee, then as a trustee you have a shared responsibility with your other trustees to act upon GDPR. You can find ICO guidance here in the meantime.