General Data Protection Regulation

Data privacy laws have changed. In May 2018, a new EU data protection rule came into force in the UK to give citizens more control over their personal information. You have probably heard of it… GDPR.

What is GDPR?

GDPR stands for ‘General Data Protection Regulation’ and came into effect on 25th May 2018. Organisations simply have to have their data protection policies in place.

Why was there a new regulation?

In an increasingly growing digital economy, it is more important than ever to have clear laws with safeguards in place to protect personal data.


  • Increases privacy for individuals
  • Gives regulatory authorities greater powers to take action against business that breach the law

What about Brexit?

The government has confirmed that the UK’s decision to leave the EU will not affect GDPR. The legislation is also UK law under the new Data Protection Act 2018. Any business in the UK which handles data of EU citizens is also subject to GDPR.

Who does GDPR apply to?

Organisations that hold or use personal data are responsible for keeping it secure. The GDPR applies to both data ‘Controllers’ and ‘Processors’.

Will it replace the Data Protection Act?

Yes, the GDPR does supersede the Data Protection Act of 1998, but there is a new Data Protection Act 2018 in the UK which supports GDPR and runs alongside it.

Are there any penalties?

Yes! If businesses do not comply with the new GDPR, they can be fined up to 4% of their annual turnover or 20 million Euros (whichever is higher). Fines of this scale could very easily lead to business insolvency and, in some cases, closure.

Let us help you…ICT Reverse can help your business be GDPR compliant. Our specialist and experienced data privacy team are available to assist you and provide you with the necessary certificates to demonstrate that your company complies with the regulation.

We provide our own fleet of vans and drivers and do not rely on third parties.

Get in touch!

Call: 01524 580900