What is GDPR?
GDPR stands for General Data Protection Regulation. It applies to all organisations across all sectors in the UK and Europe and sets out the way in which personal information can be processed. In summary personal data must be;

  • Processed lawfully and accurately
  • Processed only for specified and compatible purpose
  • Kept secure
  • Be relevant, not excessive
  • Not kept longer than is necessary
  • Processed in accordance with the rights of the individual whose personal information is being processed.

Why are these new set of rules happening? 
The GDPR seeks to protect the rights of individuals and give them more control over how organisations use and store their personal information. These new rules also allow individuals to request access to the information an organisation holds on them.

When are these new laws coming into effect?
These new laws will be coming into effect on May 25, 2018.

Will GFS be affected by it and,if so, is the organisation prepared?
Yes, GFS is taking GDPR very seriously. GFS processes personal information about staff volunteers, parents, donor, members, girls and young women. To do so it must have a legal reason for doing so and ensure individuals are informed about the collection and use of their personal information, who it is shared with and how long it will be kept. We have set up a working group, who have already conducted a full audit on how the organisation uses and stores information on volunteers, parents, staff, girls and young women.
We will be updating our policies and procedures, along with our contracts with external organisations.

What will I need to do?
The Data Protection Policy, Subject Access Request and Breach Procedures will be available on the volunteer portal, outlining the changes GFS is making when it comes to the usage and storage of an individual’s information. Everyone in the organisation,including volunteers, will be expected to adopt the changes the organisation is making.

If you administer personal information you will be required to complete an audit of what personal information you hold, where it is held and who has access to it. Support to complete a personal information audit will be available from your regional development co-ordinator. On top of this, information including access to online training will be rolled out over the coming months.