You're at: Services --> Technology --> GDPR Compliance


What is GDPR?


The General Data Protection Regulation (GDPR) is a new European Union Regulation that will come into full force on May 25th 2018 and will replace the Data Protection Directive (DPD) and The UK Data Protection Act 1998. The GDPR involves the protection of personal data and the rights of individuals. Its aim is to ease the flow of personal data across the 28 EU member states.

Why is GDPR a good thing? It will encourage Automotive companies to adopt an Inbound approach to marketing and sales. The Inbound approach is based on understanding how your Ideal customers buy then 'attracting' them to your website by providing educational, thought leader, and helpful content.

There are a few things you should be thinking about as you get ready for GDPR:

  1. Do you need to update your privacy policy, or change the disclosures you make to your customers?
  2. If you’re passing data with any third parties, do you need to make sure they comply with GDPR?
  3. Do you need to appoint a Data Protection Officer?
  4. Do you need to start conducting documented Data Protection Impact Assessments?
  5. Do you need consent from your customers to process data, and do you need to change how you obtain consent to comply with GDPR’s higher consent requirements?
  6. Will you be able to comply with the rights provided to your customers and users in GDPR, including the rights to access, correct, erase, and export their data?

 

It's also worth considering the systems you have that store data; CRM, Google Contacts, Outlook, MailChimp, accounts package etc.

GDPR will be different for every Automotive business so the first step is for you to contact us for a quick call so we can learn more about your business so we can make the best recommendation.

This is not a definitive list or legal information. It's just a simple summary that we find to be helpful. Our GDPR partner is the company that can give full legal advice and compliance and the best place to start is with a short consultation.


[video] Learn How Automotive Companies Can Survive the Future

Headline reasons to change

  1. Fine of up to 4% of annual revenue or €20m
  2. Fine of up to 2% of annual revenue for not having records in order
  3. Can be fined for not having sufficient consent
  4. Can be fined for violating core Privacy by Design concepts (only store what is needed)
  5. Can be fined for not notifying the local authority (ICO in UK) or a breach
  6. Consent can be: contract, legal obligation, vital interests, public task, legitimate interests, opt-in
  7. Individual must be clearly informed of type of consent being used on the first communication and given opportunity to request data, object, unsubscribe

 

This is not a definitive list or legal information. It's just a simple summary that we find to be helpful. Our GDPR partner is the company that can give full legal advice and compliance.

How to avoid this causing a reduction in sales

  1. Get GDPR compliant
  2. Move to an Inbound model that uses content on your website to 'attract' your Ideal customers by offering education content that gets them to 'opt-in' = 100% permission based - no more lists...

 

[video] Learn How Automotive Companies Can Survive the Future

GDPR Package for Micro businesses

Organisations with 1-5 employees:

  1. Pre-Qualification Questionnaire process
  2. 1 day on-site implementation
  3. Set up of all processes, procedures and policies
  4. Online cloud based centralised system
  5. Help desk support for on-going compliance, and continued updates on all GDPR regulations.

GDPR Package for Medio businesses

Organisations with 5 - 15 employees:

  1. Pre-Qualification Questionnaire process
  2. 2 days on-site implementation
  3. Set up of all processes, procedures and policies
  4. Online cloud based centralised system
  5. Help desk support for on-going compliance, and continued updates on all GDPR regulations!
Templates_and_Sequences

Once your policies are complete...

There will be manual work required. We confirm a cost for this work once policies are complete. An example of work at this stage:

Recording 'Lawful basis of processing' _
Adding notice to data capture forms _
Collect, track, and manage consent _
Process to opt-in and opt-out _
Synchronising unsubscribes _
Make it easy to perform deletions _
Process to respond to a data request _
Make it easy to update information _
Process to track and manage consent _
Complying with 'retention' policy _