The General Data Protection Regulation (GDPR), which comes in to force on 25th May will condense the Data Protection Principles into six areas, which are referred to as the Privacy Principles. They are:
These privacy principles are supported by a further principle – accountability.
This means that your setting must not only do the right thing with data but must also show that all the correct measures are in place to demonstrate how compliance is achieved.
There is also an expectation that staff will be trained on data protection. Documentation on policies, procedures and training is going to be a key part of any effective compliance programme.
Click here for more information.