GDPR - One year on

Monday 01 July 2019

Even small business owners, who may think the data protection law does not apply to them, need to ensure they are compliant with all of the regulations.

GDPR regulations came into force just over a year ago, in May 2018, and in the first two months of this year alone there were 45 reported breaches locally.

"In a jurisdiction with a major financial services sector, small business owners may think that the new data protection law does not apply to them," said Martin Jones (pictured), a Partner at local law firm Ferbrache & Farrell.

"That sort of view may, though, be entirely wrong and could lead them to come unwittingly into the sights of the Data Protection Authority.

"The law applies to any organisation where the personal data being processed is that of a Bailiwick resident and it is processed in the context of offering goods or services to the resident.

"Although ensuring compliance with the law may seem daunting, even for a small organisation, complying with the new law will mean a significant shift in the way we all think about and handle personal data. That shift will doubtless present both challenges and opportunities but, in short, embracing data protection as a fundamental part of an organisation’s culture is bound, in the long run, to pay dividends.

"At Ferbrache & Farrell we can help any business on its journey to becoming compliant with the law by advising on the legal issues that it may need to address, and by reviewing existing contracts, policies and procedures and drafting any other related documents that may be required."

Ferbrache & Farrell has created a guide for local businesses so that they can check they are being compliant, which can be found on the firm’s website.