GDPR came into force today, replacing the Data Protection Directive 95/46/EC, with businesses required to show how they comply with the principles, for example, documenting the decisions taken about a processing activity. 

Matt Brown, partner and head of commercial in Liverpool at Brabners, said it was fair to say that most businesses were at least on their way to GDPR compliance. 

“The volume of requests for advice we’ve received, and the similar inundation we hear about from other law firms, certainly suggests so. 

“But while it’s clearly on the agenda for many, at this stage this is all.”

Matt said the Information Commissioner’s Office (ICO) had been at pains to acknowledge that it was unrealistic to expect everyone to be 100% GDPR compliant on day one, but instead wanted to see that businesses had taken the right steps forward.

“If you’re a business that hasn’t started to prepare, or is significantly behind, for GDPR, then the key is not to panic. 

“It’s too late to. 

“Start the process of identifying what data you hold, how it is used and whether you have a legal right to process it now. 

“That way, if the ICO comes knocking, you will be able to demonstrate you are attempting to get your ducks in a row.”