What is GDPR?
As a reminder the General Data Protection Regulation (GDPR) is a significant piece of legislation that harmonises and strengthens the data protection rights of individuals within the European Union (EU). GDPR came into effect in May 2018.
What does this mean?
From an Organisational point of view this means we need to be fully aware of what data we are processing, i.e. collecting, storing, sharing etc, we need to ensure we only collect, store and share personal data that we need and have good reason to do so. We can no longer collect personal data ‘just in case’.
How does this affect your day-to-day?
The most common data breaches are sending emails with personal data to the wrong person.
· When sending an email make sure you are copying the correct people.
· Be extra vigilant when your communication contains personal data, triple check the recipients.
· If you incorrectly send an email containing personal data, ask the recipient(s) to delete the email and then report to the DPO (dataprotection@scouts.ie).
· Ask yourself can I minimise the data I am sharing – does every data point need to be included?
· If sending an email to a large number of recipients or using personal email addresses use the BCC function – Blind Carbon Copy – this means no one else can see the email addresses of other recipients.
Do not use messaging apps i.e. WhatsApp to send reports, documents etc – send via email instead!
Who to contact?
If you have identified a data breach or are unsure if something is a data breach please do not hesitate to contact the DPO via email dataprotection@scouts.ie.