A Guide to Understanding and Complying with GDPR Requirements
Data privacy compliance is an important consideration for any organization that handles or stores personal data — including data used for stakeholder engagement, management, and consultation.
Over the last few years, we’ve seen an increase in legislation on this issue, and organizations are increasingly being held accountable to ensuring they have robust systems and processes in place to protect people’s information.
In particular, if your stakeholder contacts or customers may include EU citizens, you’ll need to understand and follow the General Data Protection Regulations (GDPR) that were introduced in 2018. The consequences for non-compliance are significant, including fines reaching up to 20 million euros for severe violations.
We’ve put together this GDPR compliance eBook for a few reasons. Although we’re a few years down the track from GDPR, the legislation remains highly relevant today. At the same time, GDPR still confuses a lot of people and attracts misconceptions (such as not impacting organizations outside of the EU*). And last of all, we wanted to offer our take on GDPR compliance from a public consultation perspective.
* Even if you automatically collect a single, pseudonymized piece of data from a single person in the EU who visits your website, GDPR still applies. And even if your organization falls outside of this broad definition, it’s almost certain that similar legislation is in place within your region, or coming in the near future.