Does GDPR apply to me?

ITG Instructor Training & First Aid Inst

Another video from our video online Data Protection and GDPR course at www.prodataprotection.co.uk.

GDPR applies to everyone. As an employee, your employer will hold your personal data and in this way, you have the same rights as any other data subject.

As an employee, you also have a responsibility to your organisation to make sure that you are not responsible for a breach of anybody's personal data. We will cover the subject of data security later on in the course.

As an individual GDPR provides you with more rights, some of which include:

The right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object and rights in relation to automated decision making and profiling.

This means that an individual has the right to be informed about when and how their data was collected and how and why it is used. This information should be provided in the privacy policy at the time the data is collected. Where the data is collected from another source, the data subject should be provided with privacy information within a reasonable period, deemed to be no longer than one month.

Information should be provided in a clear, concise way and be easily accessible. This could be an email attachment, a printed out notice, or a privacy policy on a website.

This means that an individual can ask an organisation to provide them with information about the personal data that organisation holds which gives them far more control over how their personal data is processed.