Data protection risk management guide
Data protection risk management guide

The following Risk & Compliance practice note provides comprehensive and up to date legal information covering:

  • Data protection risk management guide
  • Why you need to manage this risk
  • Top five priorities
  • 1. Responsibility and accountability
  • Do you have to appoint a DPO under the UK GDPR?
  • If not, should you formally appoint a DPO?
  • Can you appoint an external DPO?
  • Do you need to appoint a European Representative?
  • Responsibility for data protection—mini action list
  • 2. Know your data
  • More...

Why you need to manage this risk

Data protection is one of the most challenging areas of risk management—the law is complex and wide-ranging, it operates at UK, EU and international levels, is in a constant state of flux and subject to high-profile legal challenges.

Failing to comply with data protection requirements under the UK General Data Protection Regulation (UK GDPR) can expose an organisation to serious reputational damage, claims by aggrieved data subjects and fines up to £17.5m or 4% of the total worldwide annual turnover.

Top five priorities

The table below identifies five key priorities for data protection risk management and gives the heads-up on why each one is a priority area.

Each priority is then explained in further detail in the main body of this Risk management guide, including a series of mini action lists that:

  1. suggest action points for each priority area

  2. encourage you to record your level of compliance against each action point, and

  3. signpost relevant Precedents in Lexis®Nexis

Priority areaWhy is this a priority?
1. Responsibility and accountabilityYou cannot expect to implement effective data protection systems unless there is clarity about who's responsible and accountable.
You'll need to establish whether your organisation is required to appoint a data protection officer (DPO) under the UK GDPR. If not, an informed decision must be made about whether to confer the job
Related documents:

Popular documents