Data Protection

The vast majority of businesses process information about individuals at some time or another. Businesses may store this information in a variety of ways – computer, audio and video files, in addition to the more traditional printed information.

The General Data Protection Regulation 2016 (GDPR) and the Data Protection Act 2018 (DPA) are broad in scope and can be difficult to apply in practice. Geldards’ large, multi-disciplinary team advise clients on a variety of issues relating to personal data in different legal contexts.

We frequently advise clients on drafting privacy notices which not only comply with the requirements of the GDPR but are practical and easy to understand. We also advise on how to deal with and respond to requests for erasure or access to personal data and how to identify processor arrangements and ensure such arrangements are GDPR compliant. With the new mandatory requirement to report certain data breaches we are also experienced in advising clients on whether data breaches reach the reporting threshold and assist with reporting breaches to the ICO.