06 February 2018

ICAS: How to prepare for GDPR

With just under three months remaining until the General Data Protection Regulations (GDPR) come into effect in the UK on 25 May 2018, David Menzies CA, Director of Practice, ICAS, looks at how firms can be preparing for GDPR and how ICAS will provide support in this area.

By now, all practitioners have hopefully at least heard the phrase GDPR and appreciate that despite only being four letters there is a huge significance to them.

GDPR is the shorthand reference to EU Regulation 2016/679 which must be brought into effect by EU Member States by 25 May 2018.

This is being done in the UK through a new Data Protection Act 2017 which is currently making its way through Westminster as the Data Protection Bill. The Data Protection Act 1998 will in due course be repealed.

Preparation for GDPR will fall broadly into four areas:

1. Systems and data

2. Education and Training

3. Compliance

4. Security

Support from ICAS

There is already a wealth of information available about GDPR and how it will affect firms, but what specifically is ICAS doing to support firms in this important area?

Over recent months ICAS has been publishing various general awareness articles.

ICAS, however, recognises that practices will require more detailed direction and support in certain areas.

ICAS has therefore commissioned work to undertake several GDPR information audits on practices of varying sizes.

From this ICAS will prepare and make available templates and example documents tailored to typical practices comprising various service lines and practice structures.

ICAS expects to be able to provide this around mid-February allowing practices time to use the resources to be applied to their own circumstances.

Full article

© ICAS