General Data Protection Regulation (2018)
UK Data Privacy/Data Protection Law will change significantly on 25th May 2018.
The General Data Protection Regulation (or GDPR for short) is a positive step towards individuals having more control over how their data is used and how they are contacted.
Individuals have the right under the GDPR:
- To be informed
- To access their personal data
- To rectification where that data is inaccurate or out-of-date
- To erasure in some cases
- To restrict processing
- To data portability
- To object
- To ask for automated decision-making and profiling to be reviewed by a person
As we work principally in the legal sector, and are Law Society Approved LEXCEL consultants, confidentiality is already part of the fabric and culture of our company to keep your information private and secure.
The new law states that we are allowed to use personal information only if we have a proper and lawful reason to do so. This includes sharing it with others outside the company e.g. an auditor of a relevant Quality Standard, the Law Society and Associate Consultants, Tutors and Administrators.
The GDPR says we must have one or more of these reasons:
- Contract: the processing is necessary for a contract we have with an individual, or because they have asked us to take specific steps before entering into a contract e.g. an individual being booked on to a PSC course or CPD/CPC training course
- Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
- Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
- Consent: the individual has given clear consent for us to process their personal data for a specific purpose.
A legitimate interest is when we have a business or commercial reason to use your information.
Links to other Websites and Services
Further information on the way we may use your personal data
and which of the bases we rely on can be found in our: