GDPR (General Data Protection Regulation) is the new legal framework in the EU that replaces the current EU Data Protection Directive. It came into force on 24th May 2016, and takes effect on 28th May 2018 (regardless of Brexit negotiations), meaning that organisations need to be preparing for compliance now.

The GDPR applies to anyone who is collecting, storing and processing the personal data of EU residents i.e. data controllers and data processors, who will be required to demonstrate that they process personal data in compliance with the GDPR. 

The BHBIA is providing a series of resources to help members prepare - so far there are four ready reference guides in the series and more will be added over the coming months.

The latest guide: 'Data Protection Officer' explains how to determine whether you need a Data Protection Officer and if so how to appoint one.

The GDPR is going to make a difference to how all those involved in market research and data analytics handle personal data.  With its introduction only one year away, now is the time for action!

See details of the series of GDPR Guides

Date for your diary:

The BHBIA Ethics & Compliance Committee will be running a half-day update meeting on the morning of 7th September 2017, with the theme:

"Building the GDPR into every stage of your project - Privacy by Design and Default"

If you can't make the meeting, please look out for the slides, which will be made available to all full BHBIA members in the 'past events' section of the website after the event.