VIRTUOSO IT LIMITED

ABOUT VIRTUOSO IT LIMITED

When? The GDPR comes into effect on 25th May 2018, and even though the UK is leaving the EU, the GDPR will take effect before the two-year timeframe of Article 50 meaning businesses will still need to conform to new regulations in the meantime. CTO of Virtuoso, Greg McCallum says, It's essential that your IT systems meet the technical requirements of GDPR before the regulation comes into effect.

Proper data governance is only possible with a well-designed, well-managed infrastructure platform that is both agile and stable. We can help you bridge that gap, saving time and money, to ensure your company can become compliant as soon as possible.

The GDPR aims to tackle the privacy challenges in the new digital economy by improving the levels of trust amongst its data holders and givers. Also by making the data protection law identical across the single market, the EU aims to give businesses an easier, clearer legal environment in which to operate.

Data controllers must allow for individuals to access their personal data and comply within one month of the request. It is up to the controller to ensure that people can securely review the information a controller holds about them and the processors and controllers must be able to clearly explain how and why their data is stored and processed. People will now also have the right to request their data is deleted if it is no longer necessary, this is now known as the right to be forgotten. This will affect the controllers whose responsibility it will be to inform other organisations to delete any links to copies of the data in question. If a person wants their data to be moved elsewhere the controller must conform to this request within one month. It is each companies responsibility to inform their data protection authority of any data breach that might cause a risk to peoples rights and freedoms within 3 days of the company being aware of the breach. Harsh penalties will be in place for those who fail do comply within the deadline. Data protection authorities can issue penalties of up to €20 million or 4% of your global annual turnover (whichever is greatest) for any company or organisation who fails to comply with the new regulations set out in the GDPR.