The General Data Protection Regulation (GDPR) very significantly increases the obligation and responsibilities for organisations and business in how we collect, use and protect personal data.
At the centre of this law is the requirement for organisations and business to be fully transparent about how they are using and safeguarding personal data and to be able to demonstrate accountability for their data processing activities.
Data protection rights apply whether the personal data is held in electronic format or in a manual paper form. Data Protection is all about the protection of personal data.