Is Your Business GDPR Compliant?

Data protection in the UK and across the EU is set to change on Friday 25 May 2018 when the General Data Protection Regulation (GDPR) will come into effect, superseding the current Data Protection Act 1998. Companies that want to stay ahead in today’s culture of enhanced privacy see the GDPR as an evolution in marketing, not a revolution.

This is a valuable mind set but one that’s difficult to find if you are a company that is used to mass marketing to a database of past customers whose marketing preferences haven’t been analysed. We can help you to find that mind set and turn your compliance with the GDPR into a positive marketing step.

Our travel specific GDPR advice and support covers:-

• Information audits to map data flows and use;
• Documentation and checklists to set you in the right direction;
• Analysis of the legal basis for processing data – including looking at previous consents, legitimate business interests and contractual necessity;
• Data sharing – analysis of consents, necessity, reasons for sharing and retention periods;
• Identification and management of security risks and procedures to mitigate them;
• Data minimisation, pseudonymisation and transparency measures;
• Information Security Policies;
• Legitimate interests for postal and email marketing and the ICO’s three part test;
• Review and amendment of consents process
• Drafting of privacy policies;
• Consumers’ rights of access and erasure;
• Data processing contracts and clauses.