Who is responsible for GDPR compliance training in your organisation?
There’s no time for your colleagues to pass the buck or bury their heads in the sand. The GDPR comes into force on 25th May 2018 and applies to nearly every area of every organisation. It’s not just an IT issue: the GDPR impacts HR, legal, marketing, procurement, training and security.
It’s therefore key that your Board or management team takes ownership of GDPR compliance and considers all these areas of the business. GDPR is everyone’s business.
Your HR team is responsible for making sure that employees are aware of their responsibilities in managing data as an asset. HR needs to include this information in their employment contract, starter information and induction program.
They may need to ask new joiners for consent for DBS checks and DVLA checks. Similarly, HR may need authorization to process data for payroll, in which case HR needs to make it clear that personal data will not be misused.
It’s therefore key that your Board or management team takes ownership of GDPR compliance and considers all these areas of the business. GDPR is everyone’s business.
Your HR team is responsible for making sure that employees are aware of their responsibilities in managing data as an asset. HR needs to include this information in their employment contract, starter information and induction program.
They may need to ask new joiners for consent for DBS checks and DVLA checks. Similarly, HR may need authorization to process data for payroll, in which case HR needs to make it clear that personal data will not be misused.
Comments
Post a Comment