On 25th May 2018, the General Data Protection Regulation (GDPR) came into force across Europe. The law aims to give citizens more control over their data and to create consistency of data protection rules to apply across the Continent. The GDPR enhances the rights of data subjects in respect of using personal data for business purposes; most rights are modifications of existing legislation while others are new editions with implications for business practices. Please see below for information on the changes to existing laws and personal data protection.

 

• Right to be Informed: Enhances the right of the data subject to be informed about how their data is being used in a clear, concise and easily accessible way. This right relates to Privacy Notices and statements on usage of personal data for specified purposes.
• Right of access: This has not changed substantially from current legislation, but requests must be satisfied within 30 days and can be made free of charge.
• Right to rectification: Individuals can request that data they know to be incomplete or inaccurate be rectified within 30 days; this right also extends to records held by third parties or partners. This right places the responsibility on organisations to know where personal data is held and a means of rectification at short notice. Once the rectification is complete, the individual has the right to see proof of the updated records.
• Right to erasure: This right is sometimes referred to as the 'right to be forgotten', data subjects have a right to have personal data erased and to prevent processing in specific circumstances;

1. Where data is no longer necessary for the original purpose of collection.
2. When consent is withdrawn.
3. When an individual objects and no legitimate interest for processing is present.
4. Data is processed unlawfully.
5. In connection with a legal obligation.

There are extra requirements when the request for erasure relates to children’s personal data, reflecting the GDPR emphasis on the enhanced protection of such information, especially in online environments.

• Right to restrict processing: This right enables data subjects to object to parts of processing activity whilst not affecting a whole service or product.
• Right to data portability: The right applies mostly to service providers; it can be exercised by data subjects who wish to transfer their personal data between service providers. The right places obligations on companies to package contact data, service history and financial details into a common format in order to provide uninterrupted services.

Our agency will work in accordance and comply with the GDPR as well as other international and domestic data protection regulations. We ask for your consent to use the data you have provided here for our marketing and research purposes.