Businesses urged to rethink data processes – are you ready?
A fifth of people plan to use their rights under the incoming General Data Protection Regulation (GDPR) to ask their employer or ex-employers to delete their information, research has revealed. This follows recent publicity regarding the way businesses and in particular social media sites use personal data.
The poll of 2,000 consumers found around 20% of employees intend to use the new laws to access the data their employer holds on them.
The GDPR, which is due to come into force in May 2018, will enhance data protection laws and create a range of new responsibilities for those who hold personal data. Penalties for breaches could be up to 4% of organisations’ annual turnover or £20m, whichever is greater.
However it is expected that at least half of companies will not be fully compliant with the regulations by the end of 2018. Employers should not retain personal data of ex-employees beyond defined retention periods – this is not new. What is new, however, is the potential impact on organisations for not complying, as well as the need to proactively demonstrate compliance. The 45 to 54-year-old age group is most likely to make a request.