Just over a week ago we crossed into the final half-year before GDPR implementation day, 25 May 2018. At Practical Law, we’re continuing to update existing resources and publish new ones to support in-house teams grappling with the GDPR compliance challenge. In recent weeks, with support from our contributors, we have published a number of resources intended to help with those efforts:
- Practice note, UK in-house counsel briefing: GDPR provides an overview of seven of the key risk areas within the GDPR that in-house counsel need to focus on when supporting their organisation with its GDPR compliance programme and practical tips to help them ensure that support is effective.
- Terms of reference for GDPR working group, contributed by Monika Sobiecki and Claire Williams of Mills & Reeve, provides a policy to guide a GDPR compliance team tasked with assessing and improving internal governance, policies and procedures in readiness for GDPR.
- Practice note, Data protection officers under the GDPR, contributed by Aaron Simpson and James Henderson of Hunton & Williams, provides guidance on the designation and role of the data protection officer (DPO). The accompanying resource, Do we need a data protection officer?: flowchart, is designed to assist with making the decision on whether your organisation needs a DPO.
- Checklist, GDPR compliance for the HR team, contributed by Olivia Sinfield of Osborne Clarke, provides a high level summary of key steps that the HR team need to have in mind as they prepare for GDPR.
In addition, those concerned with the impact of the GDPR on relationships with third party processors can join a live webinar being hosted by Thomson Reuters on 13 December: GDPR: Legal’s Role in Addressing Third-Party Processor Risks.
We are continuing to work on updating existing content and creating new resources. You can keep track of the pipeline by taking a look at Practical Law Data Protection’s provisional publishing schedule.