GDPR: Insights for small and medium organisations

-



The General Data Protection Regulation (GDPR) is one of the most complex and urgent issues that every organisation faces today it not just apply to large companies but also small and medium-sized enterprises (SMEs). It was created to bring data protection legislation in line with the modern-day usage of personal data on the internet.

 

According to Techtarget (2018), the collection of any data from citizens in the European Union (EU) needs to comply with strict rules protecting customer data. In other words, GDPR is all about protecting the personal of EU citizens and ensuring that their information is securely protected across Europe, regardless of the data processing takes place in the EU or outside. (Super Office, 2021 )

 

To comprehend where companies' responsibility for complying with GDPR standards begins and ends, it is necessary to understand the concepts of Data Controllers and Data Processors. Data Controllers are the companies that have the responsibility for the leads generated directly by it. In other words, they are the ones who control and promote the strategies for obtaining new contacts. Data processors, on the other hand, are like software that processes private data, must adopt technical and organizational measures so that the processing of information is done safely, respecting the privacy of the data holders. (Data Protection Commission, 2019)

 

To gain a better understanding of the obligations that small and medium business should know to comply with GDPR the Data Protection Commission (2019) says, that the GDPR principles is concerned with the following topics: 

 

  • Lawfulness, fairness and transparency: the three regulations preserve transparency according to the use of data to provide clear information about the purpose of processing data.

 

  • Purpose limitation: the collection of personal data must have specific, explicit and legitimate purposes.

 

  • Data minimisation: the collection of personal data should be limited only to what is necessary for what it is intended to be used for.

 

  • Accuracy: accurate data and only used when necessary.

 

  • Storage limitation: the format of personal data should allow identification of only what is necessary to be used.

 

  • Integrity and confidentiality (security): the processing of personal data must guarantee their security.

 

  • Accountability: the person responsible for using the data must strictly comply with the principles.

 

Companies that fail to comply with the GDPR provisions can face substantial fines. Mild violation of the rules can only result in notifications, however, large infractions can result in penalties of up to € 20 million or 4% of annual worldwide global annual revenue whichever is greater. (GDPR.EU, no date)

 

To conclude, GDPR aims to protect consumers' data privacy rights, leading organisations to higher standards of transparency, security and accountability when it comes to collecting and storing data. From a business perspective, GDPR can be seen as an opportunity to better serve its consumers, putting more creative and thoughtful marketing tactics into practice. Starting a transparent marketing strategy that adds value to consumer journeys will ultimately earn consumer confidence and generate more success for any business.

 

Author: Natassya Coelho

 

#gdrp #dataprotection #gdprrules #gdprcompliance #datacontroller

 

 

References 

 

Data Protection Commission.2019. Legal basis for processing personal data [ONLINE] Available at: https://www.dataprotection.ie/sites/default/files/uploads/2019-12/Guidance%20on%20Legal%20Bases_Dec19_1.pdf [Accessed 02 March 2021].

 

GDPR.EU. 2021. Everything you need to know about GDPR compliance [ONLINE] Available at:  https://gdpr.eu/compliance/ [Accessed 02 March 2021].

 

Super Office. 2021. What is GDPR and how does it impact your business [ONLINE] Available at:  https://www.superoffice.com/blog/gdpr/  [Accessed 02 March 2021]

TechTarget. 2018. GDPR backup and data protection: Five steps to implement now. [ONLINE] Available at: https://searchdatabackup.techtarget.com/tip/GDPR-backup-and-data-protection-Five-steps-to-implement-now[Accessed 24 February 2021]

Comments

  1. James White8 March 2021 at 09:02

    Thanks for your post Natassya. It was really informative and explained the complicated topic of GDPR very well. The legal ramifications for non-compliance with GDPR legislation need to be taken seriously by business using online platforms. Given the fact that GDPR compliance benefits the customer and protects them it is also an essential tool for business’ CRM strategy. With regards to SME’s, while they aren’t collecting as much data as large companies, they still need to adhere to the seven principles you outlined above to both comply with GDPR and create a safe and trustworthy environment for their customers. This should create a good relationship between the two parties. Thanks again and looking forward to you next post.

    James

    ReplyDelete
  2. Adryand Cesary10 March 2021 at 09:27

    👏👏👏👏

    ReplyDelete
  3. Sergio Augusto12 March 2021 at 02:16

    It just complements the post I read earlier from this same blog about cookies, by Udit. I believe it is so important for independent businesses to understand the importance of protecting the consumers data! Thankfully, there are these new rules, frameworks and checklists proposed by GDPR. There are loads of things to look after but I think ensuring compliance with data protection helps not only your consumers but the company too, right? It is so important to have an internal security, reducing the risk of digital threats that are arousing recently.

    Once we received the big digital push to small and medium businesses, due to the recent pandemic episodes, there are some requirements to step into the digital world. However, once we go through material like the ones we find in this blog, it is possible to understand some basics.

    ReplyDelete
  4. Udit Shokeen13 April 2021 at 15:34

    This comment has been removed by the author.

    ReplyDelete
  5. Udit Shokeen15 April 2021 at 14:29

    Such an insightful post Natassya, it’s good to hear laws that protect the user's data in today's age where every activity done by users can be tracked online. The post very well outlined the whole idea behind GDPR laws and what they mean for organisations. It’s essential for organizations to comply with GDPR rules to respect the privacy of their users and use data in an efficient manner. SMEs often struggle to recognize legal bases and, as a result, underestimate the value of understanding one when it comes to data processing. Both data-driven SMEs should spend time looking over the legal bases.

    ReplyDelete

Post a Comment

Popular posts from this blog

The importance of Knowledge Management and how data analysis informs marketing strategies

-
Knowledge management is crucial for companies to succeed. Knowing your business and your customer’s needs, wants and behaviours help businesses to inform their marketing strategies, increase their revenue and their market share. In the digital age, the majority of this knowledge comes in the form of data. However, data gathered by businesses is unrefined and difficult to read. A large company would have thousands of rows and columns of raw data on spreadsheets which would be extremely difficult to read and impossible to draw insights from. As Steve Denning stated “Nothing can be managed unless and until it is measured.   Because knowledge per se has no value in itself, it has to be measured in relation to the strategy it is intended to accomplish. ” (Denning, 2021) . This blog will outline the knowledge management and analytics processes which transform this raw data into actionable information. The two main analytic types that companies use to analyse their data are information ...
Read more

The Importance of Data Governance and how it can help small and medium businesses succeed.

-
As we know data is a valuable asset to businesses and needs to be governed and secured in an efficient manner while complying with regulations. Firstly, we must understand and define what data governance means. “ CIO.com  put forth an excellent definition earlier this year: “Data governance defines roles, responsibilities, and processes for ensuring accountability for and ownership of data assets across the enterprise.” (Iversen, 2021) . While the primary function of data governance is to comply with regulations and address security concerns, a company can use this to improve decision making and optimise their products and services. Data governance systems can be used to organise data for specific uses and target essential KPI’s if utilised correctly. This blog will outline the benefits of an effective data governance system and how it can help businesses be successful.   A strong data governance system can benefit a business in a number of different ways. Firstly, puttin...
Read more

Two ways that data analytics can satisfy customer needs

-
Image
Even before considering using the power of data analytics for small or medium companies, the main questions should be how those analytics are going to help businesses to know their consumers, and how it can be useful and consistent to leaders and managers to make an effective application of them. This is considered one of the main challenges to independent and established owners, the value challenge. The value challenge in data analytics is relatable to the extraction of insights from the data collection and how we can interpret them. (AWS, no date)  In this case, we have two main approaches to read, comprehend and take useful outcomes from it: Prescriptive and Predictive. Both are distinct by default and serve different purposes that can enhance knowledge management within small and medium businesses. Credit: Georgia de Lotz (Unsplash) Beforehand, it is important to highlight that there are some important aspects of how giving value and generating management knowledge, as it was d...
Read more