This book presents a step-by-step guide on how to build an effective GDPR compliance programme for your business and covers the crucial elements that businesses need to address. With particular focus on startups and scaleups, experienced data protection lawyer, Ben Martin, walks the reader through the various data protection requirements that early-stage businesses need to consider, and explains how these will develop through their growth phase.
Utilising real-life scenarios and worked examples to navigate the complex legal landscape of GDPR compliance, this handy and practical guide sets out key concepts relating to data protection and draws on a number of expert industry and legal perspectives. Martin adeptly engages with the day-to-day practicalities of implementing a business-centric data protection compliance programme and highlights how good data protection can be used by businesses to gain a competitive advantage.
Key Features:
- Real-life examples
- Business-focused
- An experience-based approach
- Accessible for the non-specialist
- Insight from industry and legal experts
- Clear summaries and To-do lists in each chapter
An indispensable resource for startups or scaleups in the UK or elsewhere, this book is for entrepreneurs, business owners, compliance officers and in-house counsel looking to better understand GDPR requirements and how those interact with business needs.
Contents: Foreword I by Adam Mitton Foreword II by Ingrid Ųdegaard 1
GDPR for startups and scaleups: an introduction SETTING THE SCENE AND KEY
CONCEPTS 2 Setting the scene and key concepts BEFORE YOU START YOUR DATA
PROTECTION PROGRAMME 3 Before you start your data protection programme
PHASE 1: FOUNDATIONS OF YOUR DATA PROTECTION PROGRAMME 4 Data protection
user experience (UX) 5 Data maps and records of processing activity 6
Administrative matters 7 Respecting peoples rights 8 Marketing PHASE 2:
DEVELOPING YOUR DATA PROTECTION PROGRAMME 9 International transfers of
personal data 10 Data incidents and breaches 11 Accountability, assessments
and record keeping 12 Cookies, pixels and tracking technologies 13 Contract
negotiations 14 Online advertising ADDITIONAL MATTERS TO CONSIDER AND FINAL
THOUGHTS 15 Additional matters to consider 16 Final thoughts Index
Ben Martin, Director of Privacy, Bristol, UK