© Copyright Acquisition International 2024 - All Rights Reserved.

Article Image - GDPR: What you need to know
Posted 28th March 2018

GDPR: What you need to know

From 25 May 2018 the Data Protection Act 1998 (DPA) will be replaced by The General Data Protection Regulation (GDPR), and it will bring important changes to the ways data is stored and processed by businesses.

Mouse Scroll AnimationScroll to keep reading

Let us help promote your business to a wider following.

GDPR: What you need to know

GDPR: What you need to know

From 25 May 2018 the Data Protection Act 1998 (DPA) will be replaced by The General Data Protection Regulation (GDPR), and it will bring important changes to the ways data is stored and processed by businesses. The introduction of GDPR is designed to set clear rules for businesses to follow when collecting and storing personal data, it also allows everyone to understand their rights in relation to the information held about them. The new regulation was created as a reaction to increased internet usage and sales of personal information, allowing consumers more power over their personal data.

The new law will bring data protection in the UK in line with the rest of the EU and nothing (not even Brexit) will stop it – So it is best to start preparing now! Your business must have strong policies in place to avoid scrutiny and potential fines. This article will highlight some of the key elements of the GDPR, and the best practice for companies.

What is meant by ‘Data’?

Data can be anything that can relate back to a single person, this includes name, address, fingerprints, DNA, recorded calls and date of birth. The laws relating to data protection have become much more stringent, and under the GDPR, all of this information will be covered and protected by the new regulation.

What are the new GDPR principles?

In essence the basic framework of the GDPR is very similar to that of the DPA, and the level of compliance correlates with the amount and type of data collected by your company. Meaning the more data collected and processed by your company – the more compliant you must be to the GDPR.

However, no matter the size of your company, you must still afford privacy protection, notification and consent and protect all information stored with a secure storage method. Due to the focus GDPR puts on protecting an individual’s rights about their data companies must be able to fully justify the legality of why they are collecting and storing the data.

Individuals now have complete control over their data

The GDPR regulations will allow individuals to have complete control over the data that is stored about them and companies must be able to, upon request, identify, retrieve and provide any data they have. It is worth noting that should anyone request data stored about them to be removed, the company has the responsibility to make this happen with immediate effect. Therefore, all businesses must implement an efficient process of doing so on demand, it is best to discuss the feasibility of any policy of implementing this with IT and call recording providers to ensure any claims can be fulfilled.

How can I ensure I am recording calls legally?

To ensure that any phone call that is being recorded is done so legally, you must comply to the following conditions:

1.       Receive consent from the individual(s) in the phone call to record.

2.       Justify the necessity of the recording, i.e. to fulfil a contract, or for legal requirements.

3.       It is necessary to protect the interests of one or more participants.

4.       The recording is in the public interest, or necessary for the exercise the official authority.

5.       It is in the interest of the recorder, only overridden if they conflict with the interest of the participant of the call.

Should call recording be used to monitor customer service, the first condition must be followed to ensure compliance. However, this reason can be outweighed by the fifth policy, as it could be argued that quality assurance of staff is les important than the interest of privacy.

Under the DPA, when a recording takes place the individual must be informed of the purpose and how the information will be processed. If the participant continued the call consent was assumed, and this was acceptable and common practice. But, how does this change under the new regulation? The GDPR implements tighter regulations, meaning implied/assumed consent is no longer enough. There must be express consent given, either by recording verbal consent or having AI terminate the call if consent is not given.


Under the ‘Principle of Accountability,’ all businesses should be able to actively display their compliance to the new rules and regulations. It is stressed by the GDPR that data protection systems must be implemented with immediate effect. Merely creating an extensive policy is not enough – you must be able to effectively display your staff and provider’s ability to fulfil the obligations. Having a realistic policy is the best policy as it will be easier to demonstrate should you need to prove fulfilment.

These are the steps you must complete to ensure any policy is effectively and efficiently implemented:

·         Drafting policies and protocols

·         Training staff to the new provisions and practices

·         Careful implementation and management to ensure full compliance


The new policies bring new punishments for lack of compliance. Under the DPA, organisations could be fined up to £500,000 should they deviate from the rules. Under the regulations of the GDPR fines can range from 2-4% of global turnover, depending on the severity of the case. These new fines are designed to deter non compliance and have a huge impact on those who do not follow the rules – So it is important to act now!

What should your lawyer do to help?

We believe that the best place to decide what improvements and changes need to be made you must have a full understanding of your business, its operations and what data you really need to be collecting. Any policy that is created should be bespoke on a client by client basis, decided by what can be realistically achieved by the company. Talking to your providers will also help you see whether you are compliant by the time GDPR comes into effect.


Karen Holden is Founder of A City Law Firm

Categories: Finance

You Might Also Like
Read Full PostRead - Eye Icon
COO of the Month: USA
29/06/2016COO of the Month: USA

Channel Products is a leading designer and manufacturer of ignition systems, safety controls, and complimentary products for manufacturers worldwide. The Company got its start in 1972 and is headquartered in Cleveland, OH, with sales and distribution offices i

Read Full PostRead - Eye Icon
Frost & Sullivan: The $700 Billion Connected Life Market that will Drive Change and Growth
26/03/2015Frost & Sullivan: The $700 Billion Connected Life Market that will Drive Change and Growth

The connected life market has been valued by Frost & Sullivan at over $700 billion by 2020, and the company have outlined this will have on business and our lives in general.

Read Full PostRead - Eye Icon
Tremendous Technological Triumph
29/04/2020Tremendous Technological Triumph

Technology is currently playing a major role in society, changing the way in which people live and work. It’s a time of immense choice, which can be overwhelming. Leading the way forward in making the complex simple is AdEPT, with a talented team guiding com

Read Full PostRead - Eye Icon
The Most Transparent Corporate Service Provider the UAE
08/06/2017The Most Transparent Corporate Service Provider the UAE

My Business Consulting DMCC is a leading corporate service provider in the United Arab Emirates. The company provide wide range of corporate services including, but not limited, to free zone and offshore company registration, bookkeeping and accounting solutio

Read Full PostRead - Eye Icon
How Fleet Insurance Can Enhance Risk Equations For SMEs?
15/06/2022How Fleet Insurance Can Enhance Risk Equations For SMEs?

Fleet insurance is insurance coverage for a business’s vehicles. Instead of getting insurance for individual cars, you can get collective insurance for the fleet. It will save you the hassle of monitoring each vehicle’s separate car insurance policy and re

Read Full PostRead - Eye Icon
7 Factors to Consider Before Launching a New Marketing Campaign
08/11/20217 Factors to Consider Before Launching a New Marketing Campaign

A marketing campaign is vital for any business to reach out to potential clients and gain leads. Creating one from scratch could be a daunting task. If it's your first attempt at creating a marketing campaign for your business, there are several considerations

Read Full PostRead - Eye Icon
Why Do Students Pay for Essays?
11/01/2023Why Do Students Pay for Essays?

In the Western educational system, including universities in the United States, essays are considered to be one of the most common types of written assignments. Such papers teach high school students to reason, draw conclusions, and make their points of view.

Read Full PostRead - Eye Icon
Committed to Care
23/07/2019Committed to Care

Templars Law is a full service law firm with extensive knowledge regarding how to handle the legal needs of clients in Nigeria’s peculiar business environment.

Read Full PostRead - Eye Icon
Leveraging AI for Fraud Detection and Risk Assessment in the FinTech
22/01/2024Leveraging AI for Fraud Detection and Risk Assessment in the FinTech

While ChatGPT become lazy recently, denying to perform basic tasks, and making excuses on why it shouldn’t do, what was required, it is still hard to deny that machine learning models can bring many advantages to any technological solution, and FinTech i

Our Trusted Brands

Acquisition International is a flagship brand of AI Global Media. AI Global Media is a B2B enterprise and are committed to creating engaging content allowing businesses to market their services to a larger global audience. We have 14 unique brands, each of which serves a specific industry or region. Each brand covers the latest news in its sector and publishes a digital magazine and newsletter which is read by a global audience.