by Bryan Beesley, Senior Manager and Head of Data Privacy, KPMG LLC
The 25th May 2018 saw the instruction of the revised General Data Privacy Regulation, more commonly known to us all as GDPR but, 500 days later, where are we now and how has it impacted the way we approach business here on the Isle of Man?
There was a huge surge of policy writing, training and changes the closer we got to the 25th May 2018. Some firms completely destroyed substantial contact databases which had been built up over many years, whilst other firms did the bare minimum to scrape through what they perceived to be the requirement of the new legislation.
It seems fair to say that the majority of firms now are continuing life as was, albeit having made some slight communication changes, and it is worrying that GDPR is seemingly viewed as a one-off event rather than an ongoing requirement. How confident would you feel if the Information Commissioner turned up at your door and asked to do a spot inspection (something that is starting to occur more frequently now)?
Over the past 500 days, our data privacy team have been working with a number of firms on their GDPR policies and therefore wanted to pick out some key situations we have seen that should be regularly considered to keep yourself compliant:
Segregation of work areas from client areas
When I visit clients it often amazes me, how much client data, or access to client data, is available with minimal effort. If somebody can gain access to a client area without any form of security then you could be in breach of GDPR. Having basic identity and access controls might not be enough. There are many firms who implement a proxy-pass system but then ignore that there is a lift or uncontrolled access straight into client areas, and more fundamentally the common activity of tailgating.
Update your data flow / data mapping to meet updated regulations
Have there been other applicable regulatory changes and amendments since GDPR came into effect? If so every firm should have amended data flows and data mapping as a minimum - this is in addition to the annual data policy reviews which everybody should undertake as part of its review.
Multi-jurisdictional policies
The island, by its very nature, has a plethora of firms who have offices in multiple jurisdictions. It is therefore imperative that firms have multi-jurisdictional policies in place rather than just set policies for each jurisdiction. For example, data records in the Isle of Man are legally required to be held for 7 years whereas in other jurisdictions outside of the EU, whilst still compliant with GDPR, may legally require documents to be held for 9 years resulting in additional wording in contracts and policies.
The boardroom
Is privacy (and cyber risk) a regular item on your board agenda? My experience is that it is an afterthought or only added when there has been a problem. It needs to be a regular item and discussed, documented and actioned monthly. The time you have to bring it onto the agenda, due to an issue, clearly shows that it is too late.
The above are just five key areas we see but there are many more, common themes such as the way technology is being used outside of the workplace (i.e. use of VPNs), external email checkers (so that there is a check in place before an email is sent externally), policies that must be in place if you have CCTV, Data Protection Officer requirements and how they interact with the Board and wider business, and so on.
GDPR isn’t going away and there has definitely been a “grace period” over these past 500 days. If there is one thing for certain it’s that there is no excuse for firms not to be compliant over the next 500 days.
Sep 29, 2023
Sep 27, 2023
Sep 14, 2023
Jul 27, 2023
Jul 25, 2023
Jul 24, 2023
Jul 20, 2023
Jul 19, 2023
Jul 18, 2023
Jul 17, 2023
Jul 13, 2023
Jul 4, 2023
Jul 3, 2023
Jul 3, 2023
Jun 30, 2023
Jun 12, 2023
May 24, 2023
May 4, 2023
May 4, 2023
May 4, 2023
May 3, 2023
Apr 19, 2023
Apr 18, 2023
Mar 21, 2023
Mar 17, 2023
Mar 8, 2023
Feb 28, 2023
Feb 14, 2023
Feb 7, 2023
Feb 2, 2023
Jan 24, 2023
Jan 23, 2023
Jan 18, 2023
Jan 13, 2023
Jan 6, 2023
Jan 6, 2023
Jan 4, 2023
Jan 3, 2023
Jan 3, 2023
Dec 22, 2022
Dec 14, 2022
Dec 12, 2022
Dec 7, 2022
Nov 28, 2022
Nov 22, 2022
Nov 22, 2022
Nov 21, 2022
Nov 14, 2022
Nov 8, 2022
Oct 26, 2022
Oct 21, 2022
Oct 17, 2022
Sep 27, 2022
Sep 27, 2022
Sep 22, 2022
Aug 12, 2022
Jul 27, 2022
Jul 21, 2022
Jul 20, 2022
Jul 7, 2022
Jun 30, 2022
Jun 30, 2022
Jun 29, 2022
Jun 28, 2022
Jun 15, 2022
May 19, 2022
May 18, 2022
May 17, 2022
May 13, 2022
May 9, 2022
Apr 28, 2022
Apr 8, 2022
Apr 4, 2022
Mar 28, 2022
Mar 16, 2022
Mar 7, 2022
Mar 1, 2022
Feb 7, 2022
Feb 1, 2022
Jan 21, 2022
Dec 21, 2021
Dec 6, 2021
Nov 9, 2021
Oct 25, 2021
Oct 12, 2021
Oct 12, 2021
Oct 4, 2021
Oct 4, 2021
Oct 4, 2021
Oct 4, 2021
Oct 4, 2021
Aug 31, 2021
Aug 31, 2021
Aug 31, 2021
Aug 10, 2021
Aug 10, 2021
Jul 26, 2021
Jul 15, 2021
Jun 29, 2021
Jun 9, 2021
Jun 2, 2021
Jun 2, 2021
Jun 2, 2021
Jun 2, 2021
Jun 2, 2021
Jun 2, 2021
May 13, 2021
May 13, 2021
May 7, 2021
May 4, 2021
Apr 27, 2021
Apr 27, 2021
Apr 27, 2021
Apr 27, 2021
Apr 22, 2021
Apr 20, 2021
Apr 20, 2021
Apr 1, 2021
Mar 31, 2021
Mar 30, 2021
Mar 29, 2021
Mar 26, 2021
Mar 25, 2021
Mar 10, 2021
Feb 23, 2021
Feb 17, 2021
Feb 12, 2021
Feb 2, 2021
Feb 2, 2021
Feb 2, 2021
Feb 2, 2021
Feb 2, 2021
Feb 2, 2021
Jan 19, 2021
Jan 15, 2021
Jan 15, 2021
Jan 15, 2021
Jan 11, 2021
Dec 23, 2020
Dec 3, 2020
Dec 1, 2020
Dec 1, 2020
Nov 30, 2020
Nov 17, 2020
Nov 5, 2020
Nov 2, 2020
Oct 22, 2020
Oct 22, 2020
Oct 20, 2020
Oct 13, 2020
Oct 7, 2020
Oct 1, 2020
Oct 1, 2020
Sep 30, 2020
Sep 29, 2020
Sep 29, 2020
Sep 29, 2020
Sep 24, 2020
Sep 23, 2020
Sep 23, 2020
Sep 21, 2020
Sep 16, 2020
Sep 16, 2020
Sep 14, 2020
Sep 7, 2020
Aug 24, 2020
Aug 24, 2020
Aug 13, 2020
Aug 13, 2020
Aug 13, 2020
Aug 5, 2020
Aug 4, 2020
Jul 30, 2020
Jul 30, 2020
Jul 30, 2020
Jul 29, 2020
Jul 28, 2020
Jul 27, 2020
Jul 27, 2020
Jul 27, 2020
Jul 24, 2020
Jul 24, 2020
Jul 13, 2020
Jul 13, 2020
Jul 7, 2020
Jun 30, 2020
Jun 29, 2020
Jun 29, 2020
Jun 29, 2020
Jun 25, 2020
Jun 22, 2020
Jun 3, 2020
May 28, 2020
May 28, 2020
May 28, 2020
May 18, 2020
May 18, 2020
May 1, 2020
May 1, 2020
May 1, 2020
May 1, 2020
May 1, 2020
May 1, 2020
May 1, 2020
May 1, 2020
May 1, 2020
May 1, 2020
Apr 17, 2020
Mar 17, 2020
Mar 16, 2020
Mar 13, 2020
Mar 11, 2020
Feb 28, 2020
Feb 28, 2020
Feb 28, 2020
Feb 20, 2020
Feb 20, 2020
Jan 27, 2020
Jan 24, 2020
Jan 24, 2020
Jan 23, 2020
Dec 18, 2019
Dec 17, 2019
Dec 16, 2019
Dec 16, 2019
Dec 16, 2019
Dec 16, 2019
Dec 16, 2019
Dec 16, 2019
Dec 16, 2019
Dec 16, 2019
Dec 16, 2019
Nov 25, 2019
Nov 25, 2019
Nov 25, 2019
Nov 25, 2019
Nov 22, 2019
Nov 14, 2019
Nov 14, 2019
Nov 13, 2019
Nov 13, 2019
Nov 12, 2019
Nov 12, 2019
Nov 12, 2019
Nov 6, 2019
Oct 21, 2019
Oct 21, 2019
Oct 17, 2019
Oct 15, 2019
Oct 15, 2019
Oct 15, 2019
Oct 4, 2019
Oct 4, 2019
Sep 27, 2019
Sep 27, 2019
Sep 27, 2019
Sep 27, 2019
Sep 25, 2019
Sep 19, 2019
Sep 18, 2019
Sep 10, 2019
Aug 30, 2019
Aug 30, 2019
Aug 30, 2019
Aug 29, 2019
Aug 29, 2019
Aug 29, 2019
Aug 29, 2019
Aug 29, 2019
Aug 29, 2019
Aug 29, 2019
Aug 29, 2019
Aug 15, 2019
Aug 2, 2019
Aug 2, 2019
Aug 1, 2019
Jul 31, 2019
Jul 31, 2019
Jul 31, 2019
Jul 31, 2019
Jul 31, 2019
Jul 31, 2019
Jul 31, 2019
Jul 31, 2019
Jul 31, 2019
Jul 31, 2019
Jul 31, 2019
Jul 31, 2019
Jul 31, 2019
Jul 31, 2019
Jul 31, 2019
Jul 12, 2019
Jun 28, 2019
Jun 28, 2019
Jun 27, 2019
Jun 27, 2019
Jun 27, 2019
Jun 27, 2019
Jun 27, 2019
Jun 27, 2019
Jun 27, 2019
Jun 27, 2019
Jun 27, 2019
Jun 27, 2019
Jun 19, 2019
May 31, 2019
May 31, 2019
May 30, 2019
May 30, 2019
May 30, 2019
May 30, 2019
May 30, 2019
May 30, 2019
May 30, 2019
May 30, 2019
May 30, 2019
May 30, 2019
May 30, 2019
May 23, 2019
May 7, 2019
May 1, 2019
May 1, 2019
May 1, 2019
May 1, 2019
May 1, 2019
May 1, 2019
May 1, 2019
May 1, 2019
May 1, 2019
May 1, 2019
May 1, 2019
Mar 29, 2019
Mar 29, 2019
Mar 29, 2019
Mar 29, 2019
Mar 29, 2019
Mar 29, 2019
Mar 20, 2019
Mar 20, 2019
Mar 20, 2019
Mar 20, 2019
Mar 14, 2019
Mar 6, 2019
Feb 25, 2019
Feb 25, 2019
Feb 19, 2019
Feb 19, 2019
Feb 19, 2019
Feb 19, 2019
Feb 15, 2019
Feb 4, 2019
Feb 1, 2019
Feb 1, 2019
Feb 1, 2019
Feb 1, 2019
Jan 24, 2019
Jan 17, 2019
Jan 14, 2019
Jan 11, 2019
Jan 10, 2019
Jan 7, 2019
Dec 17, 2018
Nov 8, 2018
Nov 1, 2018
Oct 30, 2018
Oct 29, 2018
Oct 19, 2018
Oct 19, 2018
Oct 19, 2018
Oct 19, 2018
Oct 19, 2018
Oct 19, 2018
Oct 19, 2018
Oct 19, 2018
Oct 19, 2018
Oct 19, 2018