Return to flip book view

Kristy Gouldsmith Data Protection, Privacy and Cybersecurty Partner

Lack of training for all employees Simple mistakes like sending an email to the wrong person, clicking on a phishing link or sharing a password all have the potential of allowing data to get into the wrong hands. Training staff regularly is the number one way to protect your business. Your internal team should be your first line of defence against any potential attack rather than a point of vulnerability. It's not surprising then that one of questions that the ICO ask when a breach is reported is whether the staff member was trained in data protection and when. I()

Not planning for subject access requests Many fail to plan for a subject access request because they assume they are never going to get one. This is simply not the case. -.

Not knowing who you share data with Do you know who you share staff or customer data with? Many organisations think they know but often don't realise that data-sharing includes your software providers, your email platform, your suppliers and consultants, such as accountants or outsourced HR. You are required by law to have data-sharing agreements with your processors and joint controllers (anyone you share data with). These legal contracts must comply with the UK GDPR and, among other things, must include your specific instructions for the processing of the data. Getting these data-sharing agreements is a relatively simple process: 1.I can help you to identify who you share data with;2.I can draft data sharing agreements for you; and3. You can rest assured that you are compliant with the law.It's another line of protection to keep your business safe.

Not understanding how long you can keep data UK     

No set levels of access Do you know who has access to the data your organisation?  IAvoiding these five mistakes will protect yourbusiness and reduce the risk of a data breach. How secure is your data?

IWe'll talk about your organisation and discuss your options in a way that makes sense to you. I'll work with you to develop an actionable plan that is tailored to your organisation. Be secure in the knowledge that you're doing the right things with your data. Kristy Gouldsmith Data Protection, Privacy and Cybersecurty PartnerGood data protection practices build trust with your customers and lead to more business for you. People buy from businesses that they trust. People also work for businesses that they trust. I'll you to sort your data protection so that you can keep the trust of your customers and staff, avoid the cost and time of dealing with data breaches and create good data protection practices to enhance their business. I take care of your data protection worries so that you can concentrate on your business.CONTACT ME TODAY FOR A FREE CONSULTATION ON HOW I CAN HELP YOU.