![Page 2: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/2.jpg)
Welcome
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
MarkGraceyFounder,FlavourfyDigitalConsultancy&DigitalComplianceHub
![Page 3: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/3.jpg)
What’sGDPR?
? !DoIneedtoworryaboutit?
"WhatdoIdoto
comply?
GDPRCompliance
![Page 4: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/4.jpg)
About data protection
![Page 5: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/5.jpg)
Key Data Protection Definitions
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
PersonalData
Processing
DataSubject
DataController
DataProcessor
![Page 6: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/6.jpg)
The Principles of Data Protection
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Lawful,fair&transparent Specificpurpose Relevant
Accurate Retention Security
Individuals'rights
Internationaltransfer
![Page 7: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/7.jpg)
Lawfulness of processing
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
DataSubjecthasgivenconsent
Requiredforperformanceofacontract
Legalobligation
ToprotectinterestsoftheDataSubject
Inthepublicinterest
LegitimateinterestsoftheDataController
![Page 8: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/8.jpg)
General Data Protection Regulation
![Page 9: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/9.jpg)
GDPR: What’s changing?
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
GDPRMay2018
Scope
Accountability
Children
Consent
Rights Processors
By Design
DPOs
Breaches
Fines
![Page 10: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/10.jpg)
What’s changing?
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Scope
AppliesacrossthewholeoftheEU
Affectsanynon-EUbusinessofferinggoods
andservicestoEUcitizens
Onlineidentifiersincludedindefinitionofpersonal
data
![Page 11: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/11.jpg)
What’s changing?
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Accountability
Demonstrationofcompliance
Recordprocessingactivities
![Page 12: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/12.jpg)
What’s changing?
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Children &OnlineServices
Childfriendlingmessaging
Guardianconsent
Ageverification
![Page 13: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/13.jpg)
What’s changing?
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Consent
Clearmessaging
Positiveopt-in
Recordingconsent
Consentwithoutdetriment
Withdrawingconsent
![Page 14: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/14.jpg)
What’s changing?
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Rights
Righttobeinformed
Subjectaccessrequests:nofee,lesstime
Therighttoerasure
Therighttodataportability
![Page 15: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/15.jpg)
What’s changing?
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Processors
Controller– Processorrelationship
Contractualterms
Processorresponsibilities
![Page 16: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/16.jpg)
What’s changing?
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
By Design
ByDesign&Default
DPIA
![Page 17: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/17.jpg)
What’s changing?
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
DPOs
Specificperson
responsibleforcompliance
![Page 18: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/18.jpg)
What’s changing?
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Breaches
Breachnotificationtoregulatorybody
Breachnotificationtodatasubjects
![Page 19: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/19.jpg)
What’s changing?
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Fines
Upto4%ofglobal
turnoveror€20m
![Page 20: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/20.jpg)
GDPR challenge: Marketing
![Page 21: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/21.jpg)
GDPR challenge: Marketing
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Consentfornewdata
ThirdPartyData
LegacyData
OngoingManagement
![Page 22: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/22.jpg)
GDPR challenge: Marketing
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Consentfornewdata
Auditexistingdatacapture
Adjustdatacapture&privacynoticestobeGDPRcompliant
Recordyourapproachand
findings
![Page 23: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/23.jpg)
GDPR challenge: Marketing
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
ThirdPartyData
Carryoutduediligenceon
providerandsource
Appropriateconsentandproof?
Recordyourapproachand
findings
![Page 24: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/24.jpg)
GDPR challenge: Marketing
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
LegacyData
DoesyourdatameetthenewGDPRconsent
rules?
Canyoulawfullyre-
verifyconsent?
Anopportunitytorefreshyour
data?
Recordyourapproachand
findings
![Page 25: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/25.jpg)
GDPR challenge: Marketing
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
OngoingManagement
Regulardataquality&consentrefresh
Makeiteasyforconsentwithdrawal
Actonwithdrawalofconsentimmediately
&remember
Documentyour
approach
MakesureyourteamaretrainedinthewaysoftheGDPR
![Page 26: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/26.jpg)
Marketing compliance in the UK
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
DataProtection• lawfulbasisforprocessing
PrivacyRules• marketingrules
MarketingCompliance
![Page 27: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/27.jpg)
GDPR, Privacy and marketing
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Marketingdata
"Cold"consumers
Customers
Soletraders
Individualsinbusiness
Genericbusinessdata
![Page 28: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/28.jpg)
GDPR challenge: Controller - Processor
![Page 29: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/29.jpg)
GDPR challenge: Controller – Processor relationship
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
DataController
DataProcessor
Whichareyou?
![Page 30: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/30.jpg)
GDPR challenge: Controller – Processor relationship
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Data
Controller
UseonlyprocessorsthatareGDPRcompliant
Carryoutduediligenceonthirdpartyprocessors
Putinplacecontractualrequirements
![Page 31: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/31.jpg)
GDPR challenge: Controller – Processor relationship
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Data
Processor
Expectduediligencefromclients
Expectstrictercontractualterms
Newresponsibilities
![Page 32: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/32.jpg)
Being GDPR compliant
![Page 33: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/33.jpg)
Steps to compliance
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Appointsomeonetotakeresponsibilityandactasasinglepointofcontact
Audityourdata,systemsandpolicies
Documentyourapproachtodataprotection&putpoliciesinplace
Provideinternaldocumentationandguidance
Trainyourstaff
Maintainyourcompliance&keepuptodate
![Page 34: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/34.jpg)
Preparing your business for the GDPR
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Prepare
• KnowtheGDPR
• Getseniorbuy-in
• Setupaworkinggroup
Audit
• Data• Systems• Policies
Analyse
• Thestateofyourdata
• Policyupdates
• Systemchanges
Deliver
• Actionplan• Employeetraining
Manage
• Ongoingcompliance
• Keepuptodate
![Page 35: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/35.jpg)
Managing Compliance
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
Security
Training
Policies
Review
UserRights
EffectivelymanagingyourGDPRcompliancewillnotonlyprotectyourbusinessbutwillinstilltrustandconfidenceinyourcustomersandfuturecustomers
![Page 36: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/36.jpg)
But… what else?
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
ePrivacyRegulations
DataProtection
Bill
ICOGuidanceGDPR2018&
BeyondA29WPGuidance
EnforcementBrexit
![Page 37: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/37.jpg)
Digital Compliance Hub – Managing your compliance
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
DataProtection
&GDPR
$Privacy&Marketing
%Web,Data&CyberSecurity
Info,guidance,toolkits,advice,support&training
https://digitalcompliancehub.co.uk
![Page 38: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/38.jpg)
Flavourfy Digital Consultancy
https://flavourfydigital.co.uk - https://digitalcompliancehub.co.uk
&Compliance
Audits
'Management
(Consultancy&
Advice
)Training
DigitalComplianceHub
[email protected]://flavourfydigital.co.uk
![Page 39: Mark Gracey mark@flavourfy.co of processing - Data Subject has given consent Required for performance of a contract Legal obligation To protect interests of …](https://reader031.vdocuments.site/reader031/viewer/2022030604/5ad3313e7f8b9a72118e0db4/html5/thumbnails/39.jpg)
?MarkGracey
https://flavourfydigital.co.ukhttps://digitalcompliancehub.co.uk
Question Mark