Businesses ‘Still Not Ready’ For GDPR
The introduction of the General Data Protection Regulation (GDPR) on 25 May has seen businesses of all sizes having to take stock of their data collection and protection practices, not to mention decide how best to deal with any historical data they store.
For months consumers have been receiving GDPR opt-in emails, with businesses doing their best to convince people to continue to hear from them. But with all the focus on the digital side of the regulation, have businesses forgotten about the physical data they hold as well?
Research conducted by office product firm Fellowes revealed that six in ten UK office workers have not yet received training on how to deal with the new GDPR regulations.
The survey also looked at how data is potentially at risk, with physical documents and accidentally seeing sensitive information on colleagues’ screens among the issues that need to be tackled.
According to the research, 44 per cent of respondents admitted that they threw sensitive documents straight in the bin instead of shredding them, while 37 per cent said that they’d seen private emails or documents on someone else’s screen while they were in the office.
A qualified GDPR practitioner for the office product sector Sammy Bartley said that businesses need to make sure they get on top of the changes introduced by GDPR and that they don’t neglect physical data storage and disposal.
“The new regulations mean you need an effective, documented and auditable process in place for the destruction of confidential information, including the secure shredding of obsolete sensitive paperwork,” he stated.
Fellowes has put together advice for businesses on how to make sure their company is GDPR compliant. When it comes to physical documents, it’s essential to ensure that any that are no longer needed are shredded and destroyed properly.
If you do need to keep personal information on paper though, you should ensure that it can be easily located if necessary. It should also be kept in a locked cabinet, and access to this should be restricted within your organisation.
You can get assistance with confidential shredding in London if you don’t have the resources to do this yourself, or if you have a large volume of data on paper than needs to be securely disposed of.