GDPR and Free Information

Most of us tend to hang on to things because they ‘may come in useful’, but there’s a very strong argument for not applying that practice to personal data.

As a primary consideration, it already places your organisation in breach of data protection legislation.  As a financial incentive (should you need one) under GDPR you’ll no longer be able to charge that £10 administration fee when someone submits a request for you to provide them with the personal data you hold about them.

That’s right; GDPR will mean that organisations have to provide personal data to the data subject without levying a charge unless the request is “manifestly unfounded or excessive” (such as repeated requests).  With such requests for information release increasing as we all become more concerned about our privacy and what other people know about us (particularly those who are chased by claims handling companies following traffic accidents), an organised campaign of requests from individuals with an axe to grind could cost a large company a lot of money in terms of lost production.

The almost palpable rise of the online society’s moral outrage at perceived wrongdoing, coupled with the relentless onslaught of fake news, could cause chaos for compliant companies who retain only legitimate data.  Any organisation which stores obsolete data without a valid business cause could be building up a scale of problem that’s entirely avoidable.

Information requests could become a simple but effective method for people to vent by hitting back at an organisation they decide has done something wrong, without any need for proof or to resort to litigation.  All that’s needed is a protest group on Facebook to set the wheels in motion.

Now is a good time to examine what records you retain and whether there’s a valid reason for doing so.  Even if you find that the retention complies with the law you may want to lighten your data load to reduce your exposure.

It’s time to call 01244 300413 or email [email protected] to chat about how GDPR is going to affect your business.