As you will no doubt be aware, 25th May 2018 saw the commencement of new legislative changes regarding Data Protection in the UK (and across the European Union) – enshrined in the UK’s ‘Data Protection Act 2018‘ and the EU’s ‘General Data Protection Regulation‘ (GDPR).
So, what does that mean in practice? Well, post 25th May 2018, you can be sure that the sun will still rise/set and the world will continue to turn…but in terms of what SCVO does with any personal data that it holds, let me set out the following:
Why we collect personal data
Using personal data allows us to provide relevant and timely information about the work we do and to give the best possible experience of our services.
How we collect personal data
This is achieved in a number of ways – for example, when sharing information via booking on a training event or meeting, accessing our services or submitting an application for SCVO membership. We treat ALL such data in a responsible and trustworthy manner (in accordance with the DPA and GDPR regulatory principles) and take appropriate steps to keep it secure.
When we’ll share your data
There may be some occasions when we share data with third parties in order to provide a better service – for example, when working with funders or partners. Generally, such data will be on an anonymised basis, but where it needs to identify an individual or individuals, this will be clearly stated in the associated data capture Privacy Notice.
How long do we keep information?
SCVO keeps personal data for as long as it is needed for the purpose for which it was originally gathered. We will also ensure that such information remains up-to-date and relevant (where appropriate) and the time periods for retention are set out in the relevant Privacy Notices.
Know your rights
The new legislation enhances the rights of data subjects in respect of their personal data – including the right of ‘access’ (to their own data), the right to ‘rectification’ and the right to ‘object’.
With all that in mind, you’ll be pleased to know that there’s nothing you need to do right now – we’re simply letting you know of our response to the legislative changes. However, if you’d like to find out more about how we process data or how a data subject’s rights can be exercised, for example, please contact us at firstname.lastname@example.org or call 0121 525 1127 and speak with a member of the SCVO Team.
Friday 25th May 2018 is not simply the ‘end point’ as far as legislative data protection compliance is concerned, but rather the start of a journey towards ‘data protection by design’ – making data protection awareness, understanding and compliance an integral part of everything we do.