GDPR will come into effect from 25th May 2018.
Under the Legislation, Local Authorities are classified as a ‘Data Controller’ and Victoria Forms are classified as a ‘Data Processor’.
Article 4 defines data controllers and data processors as follows:
(7) ‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
(8) ‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
Under the Legislation, Data Processors will have some additional responsibilities. To prepare for this, Victoria Forms are making some updates to our system, and we are also contacting our Local Authority customers to provide some additional advice around data retention and form changes.
To request a copy of the Victoria Forms GDPR Bulletin, please contact lynsey.atkin@victoriaforms.co.uk
Further Resources & Useful Guidance:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr
https://ico.org.uk/media/for-organisations/documents/1624219/preparing-for-the-gdpr-12-steps.pdf