The Good, The Bad and the…GDPR?

Understanding GDPR Compliance

Unless you’re as much of a tech geek as us here at SpotlerCRM you’d normally be forgiven for not following up with the latest updates on data security regulations. However, with the European Union’s (EU) new General Data Protection Regulation (GDPR) deadline fast approaching you no longer have any excuse, especially if you are a business owner. GDPR compliance, which comes into effect on the 25th May 2018, will be mandatory for all businesses keeping data on EU nationals, no matter the size of your business or where you are based.

What’s good about GDPR?

The EU wants to take a much stronger stance on data protection and preventing breaches of personal data on its citizens. The EU is also proposing a “right to be forgotten” clause which means that EU citizens would be able to request search sites to stop listing links to sites or images that might be embarrassing or damaging to their reputation, A clause that any of us that have had a bit too much tequila in the past can probably stand behind!

Why is GDPR Important?

Cybercrime is on the rise and hackers are constantly looking to get a hold of our private data. I think we all remember the ransomware attack a few months back affecting the NHS. As internet consumers, we all need to be clued up on the risk of giving out personal data online and GDPR compliance gives us the power to dictate what data we are allowing to be shared.

It will no longer be in the hands of the international corporations as to what happens to our personal information. Companies will have to ensure they have explicit consent on the data they are storing about customers, and they will need to make customers aware of any contact data that’s been leaked.

However, there is a general lack of knowledge in the public domain on how data security works or even why it’s important to keep up with those computer updates. As a people, we need to become more informed about data security and what happens with the information we share online.

Is GDPR Bad for Small Business?

We might all be able to agree on the benefits of GDPR for individuals. But for most small business owners GDPR compliance seems to come only with a lot of extra work, confusion and the risk of going bankrupt if something goes wrong.

Small businesses are considered more vulnerable targets when it comes to cyber-attacks. In many instances, small business owners don’t even realise what data they are holding on their customers and they might not even discover that there has been a breach of customer data until a later date. Under GDPR, companies are obligated to report a breach to the regulator body within 72 hours unless exceptional circumstances apply.

This is a very short time limit and for many small business owners the only way to be able to comply, should a data breach occur, will be to start preparing for it in advance. Identify what data you hold and how it’s being stored. Practising for a possible data breach is another way to make sure you are identifying weak spots in your organisational structure and allows you to prepare for the worst.

Making sure that you are keeping your customers’ data safe is good business practice in terms of customer retention, as more and more consumers become aware of just how important data protection is.

Additionally, many large organisations might start considering small business a weak link in their distribution channels unless they can prove that they are able to keep up and comply fully with GDPR. If not, you might find the larger organisation will no longer look to retain smaller businesses as partners but will bring those abilities in house instead.

How to Become GDPR Compliant

For a small business, it can be hard to know where to start, and while it can be useful to get a third-party consultant in, it’s important to make sure they are qualified for the job. But one of the main things that might get overlooked when considering GDPR compliance is to ensure that everyone within your businesses is aware of what it is and has a basic understanding of how it works.

A challenge for many businesses will be to identify all the areas where customer data is being held. Making sure your team is aware of data protection laws will help them identify situations where they might be handling customer data and will make sure it’s handled correctly.

What’s Brexit Got To Do With It?

It’s also important to remember that GDPR applies to everyone who holds the data of EU citizens. So, even if having left the EU, if you are holding data and doing business with other EU members you will need to be GDPR compliant. It’s also important to remember that GDPR is an aim to “catch up” with current technology to protect citizens from having their data leaked or misused. It’s likely the UK would adopt similar rules to GDPR, even post-Brexit.

Having seen the new proposal from the Digital Minister, Matt Hancock, this seems a likely scenario. As the world becomes increasingly digital it makes sense for governments to start imposing stricter rules with the aim of keeping their citizens safe from cybercrime and data leaks.

SpotlerCRM and GDPR

As a cloud CRM vendor, SpotlerCRM understands the importance of keeping customer data safe. We are fully committed to being GDPR compliant by the time the new regulations are implemented on the 25th May 2018. You will find a section on our data protection policy here.

Read More About GDPR

We have written a series of blogs to help you understand GDPR and what you need to do to be compliant:

GDPR Compliance for SpotlerCRM explains our CRM compliance
GDPR – Preparing for Change summaries the regulation and what you need to do to be compliant
GDPR Marketing Compliance Launch unveiling the first phase our our GDPR compliance features