The General Data Protection Regulation (GDPR) sets a new standard in data security, this legal requirement applies to all businesses regardless of size and came into force in May 2018.
The level of fines has been discussed widely in the media, however, the reality is that only negligent businesses are likely to be fined.
The key message is not to panic, the ICO (Information Commissioners Office) simply wants all organisations to take this seriously by identifying their risks and getting them under control; you simply need to demonstrate that you are taking a proactive approach and making tangible progress.
Evolve North interpret the legislation to ensure organisations can meet the legal requirements of the GDPR in a timely and efficient manner. We have worked with many organisations in both the public and private sector, ranging from SMEs to multinationals, delivering gap analysis and remediation services covering both technical solutions and information governance.
Our approach has been to assist clients by delivering gap analysis exercises to establish the key remediation tasks that are needed to achieve GDPR compliance. We have developed a gap analysis and remediation approach specifically for small to medium enterprises that ensures GDPR does not become onerous for the business and allows you to demonstrate to the ICO that you are taking this new set of regulations seriously.
Evolve North have been working with the GDPR for two years and we have developed and refined our approach to GDPR to ensure that you as a client can become compliant with the GDPR, but more importantly that you can demonstrate to the ICO that you are taking this new set of regulations seriously.
If you need a cost-effective solution for GDPR please contact us.