Whether or not you’re ready, GDPR (General Data Protection Regulation) is coming. With only 26 weeks left before implementation there is much more that can (and should be) done by publishers and authors, not least mapping what ‘personal’ data you have. This can mean anything from actual names to associated data that can identify an individual. In over simplistic terms think three things that you should be able to answer if an individual or ICO were to ask you:
- What personal data have you got on each individual?
- Why have you got it?
- What are you going to do with it?