Wilbery’s GDPR Compliance

1. Understanding GDPR Principles

• Wilbery’s will ensure adherence to GDPR principles including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality in all data processing activities.

2. Appointing a Data Protection Officer (DPO)

• Wilbery’s will appoint a dedicated Data Protection Officer responsible for overseeing GDPR compliance and serving as the point of contact for data protection inquiries.

3. Conducting a Data Audit

• Perform a comprehensive audit to identify all personal data collected, processed, and stored by Wilbery’s, including its source, purpose, and sharing practices.

4. Reviewing and Updating Policies

• Update Wilbery’s privacy policies and notices to ensure they are compliant with GDPR requirements, providing clear information on data processing activities, legal basis, data subject rights, and contact details.

5. Implementing Data Subject Rights

• Establish efficient procedures for data subjects to exercise their rights under GDPR, including the right to access, rectify, erase, restrict processing, data portability, and object to processing.

6. Ensuring Lawful Basis for Processing

• Document and validate the lawful basis for each type of data processing activity conducted by Wilbery’s, obtaining explicit consent where necessary and ensuring transparency in data processing purposes.

7. Data Minimization and Security

• Implement measures to minimize the collection and storage of personal data to what is strictly necessary for Wilbery’s operations.
• Strengthen data security measures, including encryption, access controls, and regular security audits to protect personal data from unauthorized access or breaches.

8. Data Breach Response Plan

• Develop and maintain a data breach response plan outlining clear procedures for detecting, reporting, and responding to data breaches promptly and in compliance with GDPR requirements.

9. Vendor Management

• Review and update contracts with third-party vendors and processors to ensure they meet GDPR standards for data protection and security.

10. Data Protection Impact Assessments (DPIAs) – Conduct DPIAs for high-risk data processing activities, evaluating potential risks to individuals’ privacy and implementing appropriate measures to mitigate such risks.

11. Staff Training – Provide regular GDPR training and awareness programs for all Wilbery’s employees involved in data processing activities to ensure they understand their responsibilities and obligations under GDPR.

12. Cross-Border Data Transfers – Implement appropriate safeguards for transferring personal data outside the EU/EEA, such as Standard Contractual Clauses or Binding Corporate Rules, to ensure GDPR compliance.

13. Monitoring Compliance – Establish a process for ongoing monitoring of GDPR compliance, conducting regular reviews, audits, and assessments to identify and address any gaps or areas for improvement.

14. Documenting Compliance Efforts – Maintain detailed records of GDPR compliance efforts, including policies, procedures, assessments, training records, and incident responses, to demonstrate accountability and transparency.

15. Continuous Improvement – Foster a culture of continuous improvement in data protection practices at Wilbery’s, adapting to changes in GDPR regulations and evolving best practices to enhance data privacy and security.