GDPR Compliance 2020 Summary - 10 Steps in 10 Minutes to Avoid Fines

[@benhill2561]

As a web developer I have watched 6 videos this morning trying to get an understanding of GDPR. This is by far the best one.

[@benhancock542]

This has been more informative that the hour long webinar I did today. Thank you!

[@GoDigitool]

No worries Ben, always happy to help :) Daisy

[@eaphotoservices]

At last, I finally get it. No legal jargon. No meaningless fluffy overviews. Just the practical steps, in real terms, of what I need to do to be GDPR compliant. Brilliant! Thank you sooooooo much. Have shared on Facebook with all my friends and business owners.

[@bento8]

best video on gdpr so far, with just the right amount of details

[@kanwalhafeez3782]

Want to learn more about GDPR Compliance : stafftimerapp.com/blogs/gdpr-compliance-and-employee-data-monitoring

[@aretnv]

Thank you so much for this useful guide! I have been researching for weeks and it's lovely to see it all put together in tips like this. Clear and easy to understand. Very much appreciated from a small business owner! :)

[@dom38_fr82]

I was wondering what GDPR actually was. 13 minutes later, with simple and clear words ..I really feel I do. That was brilliant. Summing up all this in such a short time, making it understandable by anyone. Great work there !

[@iangordon4852]

Absolutely superb. Easy to understand with no Jargon. As a very small business i am now confident that i can meet all GDPR principles. Thank you very much.

[@mazenkhiami9116]

GDPR was confusing for me but your explanation made it easy to understand and to act upon. Definitely, one of the best explanations I came across ever.

[@ecocleaningfairies8603]

Thanks this has saved me as I love watching videos instead doing all the reading to research what I need to do. You are very good at this. It is clear, well thought out, easy to understand, helpful and super informative. I feel really confident about what to do so thanks again.

[@LanceMcGrew]

GDPR is a goldmine for we folks doing website maintenance. Keep it coming :)

[@fer1892]

Or lawyers

[@georgeskarpas9500]

Great work, really. Within my research for GDPR, this was the 1st video that was not just saying a few (general and confusing) things about GDPR, only to continue with promoting a product or service. Many thanks ..

[@GoDigitool]

Thanks for taking time out to leave such lovely feedback George :) Not here to promote anything, I just did the research for our own business and felt I could save people some time by explaining what I had learnt along the way. Daisy :)

[@theericbeaty]

Amazing information. Thanks so much, Digitool! First-time viewer and just subscribed, so enjoy your happy dance, Daisy!

[@certificationcourses7477]

#GDPR is all about assessing the risk to data subjects. GDPR compliance is a continuous process. The worst thing organisations can do is not do anything at all! Good points raised in this video! However, it is the ICO (Information Commisioner's Office) that is the supervisory authority (SA) in the UK. They investigate GDPR compliance. ICO guidance and advice is the best to follow. (2:08)

[@SecretWealthProject]

Love it, people are literally being SCARED out of business because of this stuff, you make it all sound simple which is GREAT! Shared your video with my 18,000+ FB group members just now to help them (and you) out :) Thanks!

[@javirod8]

Excellent job, Daisy! After reading so many articles that only left me with more questions, this video made everything about GDPR "click".

[@GoDigitool]

Thanks Javier! And thank you for taking the time out to see the video.

[@markcunningham7350]

Tip 6 depends on who is collecting your data and for what reason, if you have entered into a contract with a financial services firm, they would normally need to hold onto the information for at least 6 years (for some pension transfers for your whole life), so that they can defend themselves against a claim for financial mis-selling. The law may also instruct the firm to hold onto personal data, such as HMRC etc. So the answer is no, there is no blanket requirement for a company to destroy your personal data. If depends.....

[@AndyStone28]

Thank You Digitool for putting together this great video for all of us that are still currently baffled by what to do next to prepare for GDPR! The video really brought back memories of when I was a Health and Safety Officer in corporate retail! The terms are different, but the logic and processes are basically congruent with each other. The amount of clarity you shed light on is incredible, and I absolutely love the small Q&A for real business situations! I've shared the video on my FB and LinkedIn, I'll be sure to target any further questions back to your site. Thanks again for the awesome video!

[@chainstair4]

You are awesome for taking this awful big information of gdpr and compressing it into a 13 min video... Thank you very much U helped a looooooot

[@GoDigitool]

Thanks for the lovely comment, compressing the info into something that was easy to understand took a lot of late nights, coffee and pizza deliveries :)

[@spellicup8469]

X2 speed - much more entertaining & less boring +saves time

[@mhdalmurad8986]

terima kasih banyak atas panduan yg anda berikan semoga menjadi ilmu yg bermanfaat bagi saya

[@om4769]

You got a true follower. Best content on GDPR so far. Thanks a lot sharing with us.

[@nancypreston7966]

excellent. the best overview explanation I've seen!! super clear and enjoyable to watch. thank you!

[@GoDigitool]

Thank you for the lovely feedback Nancy, glad it was clear. Good luck with the GDPR changes and let me know if you have any questions :) Daisy

[@wjd1412]

Nancy Preston hh

[@nothertunemusic6979]

Yes, I agree, super healthy tips! Thanks!

[@kanwalhafeez3782]

Want to learn more about GDPR Compliance : stafftimerapp.com/blogs/gdpr-compliance-and-employee-data-monitoring

[@georgeskarpas9500]

Daisy, thank you for inviting us to post questions. I do have one. I own a small company, that provides services to "Individual Professionals" (like a lawyer, or engineer) and "Companies" ONLY. I am talking about "Legal Entities" with Tax books, that must provide their VAT number, in order to accept an Invoice (not a simple Receipt). I have nothing to do with Retail market, I cannot sell anything to a "Person" (my Tax books, do not allow me to). The only data I keep about my Customers & Suppliers, is their "Tax data", the ones needed to issue or accept an invoice. The only "persons" I communicate with, are the employees of my Suppliers and the employees of my Business Customers (companies). The only data I have about them, is what is usually written in their Email signature (like Name, Job title, Email, Phone, Work address). The only way I use their data, is to communicate with them. I do no marketing at all, I do not collect any data from any source, I do not give any person's data to anybody. The ONLY "person" I deal with, is my 1 employee. His data, are provided only to my company's accountant. SO, the question is: Does GDPR "touches" my company ? Thank you.

[@GoDigitool]

Hey George, Great question! So, yes GDPR does affect your company but don't worry there isn't too much extra work to do! You will still have to take necessary precautions to make sure that data is safe and couldn't be misplaced or stolen. You will also need a system in place in case someone requests what data you have on them (this doesn't need to be anything too advanced, you just need a very clear idea of ALL the information you have on a customer so you can give that to them should they ask for it). I would consider putting all the GDPR marketing provisions in place (such as a privacy policy and opt in form) JUST IN CASE you want to market to your customers in the future. You don't have to send them any marketing but, I'd rather have the provisions in place than realise you want to market to them later down the line and realise you can't. Hope this helps! Daisy

[@georgeskarpas9500]

Thank you very much, George

[@GoDigitool]

No worries George, glad we could help :D

[@untitledobscure]

Best GDPR explanation in the shortest possible time! Great Job Daisy! 👍

[@eurotaxislimited9610]

Great video, we're going to show this to our employees.

[@ankanhalder8341]

Very detailed , wonderful. Thanks

[@GoDigitool]

Thanks! Glad you enjoyed the video!

[@esthertohvideos]

Well done. Learn so much about GDPR in a short time frame. Thanks!

[@GoDigitool]

Thank you! We're happy that you learned so much about it in a short time.

[@rajneeshsingh508]

Very helpful to understand ...GDPR. Thank you!!

[@lalitlakhanpal9690]

Very nicely explained. Useful video. Many thanks.

[@GoDigitool]

Thanks! Glad you enjoyed the video!

[@dnmattews2476]

You must check unzeenu privacy policy. that is the best and simple one

[@gwyneth7812]

Much clearer than anything else I have seen, thank you.

[@GoDigitool]

Not a problem Karen, so glad you found it useful :)

[@shubhamverma7747]

If you want to save your business from the fines regulated by EU GDPR then CLICK HERE : bit.ly/2MbIchU

[@kanwalhafeez3782]

Want to learn more about GDPR Compliance : stafftimerapp.com/blogs/gdpr-compliance-and-employee-data-monitoring

[@sandrodofimdomundo]

Great video and tips, tks! Not sure if you are aware of, GDPR rules in Brazil will be effective on February 16, 2020. Basically, it is a ctrl C/ctrl V version of the EU GDPR rules, so we are trying to understand it from the very beginning.

[@03Supranatural]

Student doing aproject on an insurance firm here and wasn't quite up to date with that GDP Regulations nitty gritty thanks for putting me up to date ;)

[@GoDigitool]

No worries - I'm so glad it can be useful. Good luck with your studies, Daisy

[@TheLonare]

thanks for summarizing it

[@cynthiafernandes7668]

This is really helpful, summarizes the concept and tips are great as well.

[@GoDigitool]

Thank you Cynthia :) I appreciate the time you've taken to comment - that's so kind

[@fiorenzamarani2899]

This was very useful! Thank you for sharing all this info:)

[@tarekaskar7373]

what I personally believe is that these set of rules were aimed to control big companies behavior with data but the outcome was that these companies have huge number of lawyers and they can easily adjust to them. overall they got no major changes in their business. on the other hand, small and medium business will suffer complying with these rules and their job will more likely become very challenging. so as a result the rules served indirectly the big companies from any disturbing possibilities of new growing businesses.

[@naveedpk00]

1. Organise your data 2. Make sure data is secure 3. Don't keep data unnecessarily 4. Write a clear fair processing notice 5. Have a process for providing the information you have on a person 6. Have a process for deleting data 7. Allow people to "postively opt in" to you storing their data 8. Try a layered optin form 9. Make it easy to opt out 10. Make your team aware of the new GDPR laws

[@mikgol81]

Thanks for the easy to understand explanation and list, best one i've seen all day :)

[@zestvisions]

Brilliant! Just what I was looking for, many thanks very clearly explained.

[@GoDigitool]

Zest Virtual Solutions thanks so much for the comment :) so glad it could help you out. Daisy

[@MrHelloskinkeguf]

Thank you! this was a big help!

[@spiratronics3887]

This is a brilliant video, thanks for taking the time to create it.

[@JohnWilson-ub9vw]

Interesting and informative. I work with a charitable foundation and keep information on our volunteers. These are not employees and they don't sell anything. We also have patients that we deal with . It would be interesting to know what to do about their records.

[@datasecteacher1895]

Thank you for this helpful video on GDPR!

[@GoDigitool]

Glad it was helpful!

[@LeeRichez]

this was useful - thanks :-)

[@GoDigitool]

Glad it was helpful!

[@balkaranbagga6195]

Thank You Very Much

[@GoDigitool]

Glad it was helpful! :)

[@ankush1275]

Very helpful, thanks for sharing

[@ericcute6471]

Thank you Po

[@GoDigitool]

Thanks! Glad you enjoyed the video!

[@Berniz123]

Great explanation! Well done! Will definitely follow your tips, thanks! ✌🏻

[@BR-gt4zk]

This has been so informative on GDPR than any that i have yet to come across :-)

[@biemachristinabanez7463]

very detailed and informative! thanks for this! SUBSCRIBED :)

[@soniarolfe186]

Clear video with good advice, thank you

[@GoDigitool]

Thanks for the kind words Sonia - so happy it was useful for you. Daisy

[@goldenemperor888]

Another example of when consent goes too far in our society honestly. Legitimately GDPR is taking huge amounts of advertising opportunities away because we now have to be like "Are you sure, are you sure you're sure? Are you REALLY SURE?" I mean come the heck on. Meanwhile I receive robocalls daily because our existing infrastructure can't stop those guys and I gave absolutely no consent to that. But yeah thanks for the clarification, it's definitely not a 2020 summary as the title says but this was very useful none the less.

[@grahamsmith7463]

So if I get a speeding or parking fine through the post, I can phone them up and demand they delete all my data from their system?

[@gregorymagee4720]

Yeah, thats inaccurate. If there is a legal/regulatory basis for holding the data it can't just be 'deleted'

[@joemunkey30]

they would probably rely on a legal basis for processing like legitimate interest

[@krzychaczu]

The data deletion policy and procedures must also consider other applicable laws. In case of consent withdrawal, data processor shall stop processing this data for business purposes, but might be legally or regulatory required to keep this data for a period of time defined by a law or a regulation.

[@williamburndred6284]

Àaaààààaàaà

[@williamburndred6284]

A

[@roncooke2188]

Hope you get paid well, you should be an high court solicitor very helpful to everyone

[@dawnpickford9132]

Thank you for this information, been a great help :)

[@GoDigitool]

I'm so glad it could be helpful Dawn, good luck with the GDPR changes and let me know if you have any questions! Daisy

[@muni123100]

Great summary, thanks

[@GoDigitool]

Glad it was helpful! :)

[@atlas9a]

Really helpful, thanks.

[@untitled19DR]

you legit saved my life! thanks

[@MisStressBizarre]

Very helpful 👍 thank you

[@kishorechavan3471]

Succinct and clear. Thanks.

[@tikax2085]

I found this video very helpful. thank you very much

[@woleadediran8007]

Excellent presentation of GDPR overview. You made it look simple and enjoyable.

[@GoDigitool]

Glad it was helpful!

[@jonathanclifton8373]

Many thanks

[@adamjgh]

I work for a business that sells home improvements, the data we have is used for guarantees, our guarantee is 10 years so we keep data for that long we also keep limited data to prove when the guarantee has ended, can someone ask for that data to be deleted? If so how do we prove when products were installed????

[@mathuraidurai7337]

Thanks for the 10 useful tips given in the video.

[@aleksekokorev]

But, unfortunately You haven't mentioned the situation, when i use cookies only to store a session number or something else strings of data, that has been saved only in order to help the user to not input this string again and again, when he/she's working with my website. And nothing personal data, nothing names, phonenumbers e.t.c. Just for a technical use. As i know, in that case, i do not need to inform about cookies saved at all. And You did not mentioned nothing about - can i use any code (javascript banner's code) i like, or i should only use a script banner code from an official GDPR approved services? Because, i'd write that code by self, in order to be more compact looking, and less annoying .

[@mirandarector4298]

Great structure of content throughout the video.

[@russellwallace6466]

This is a very good and informative video and easy to follow. My main thought however is that most small businesses will only do the very basics. I cannot see sole proprietors and other small businesses writing out data security and data retention policies etc etc. My take from this is that as a basic minimum you need to contact everyone in your database and get their consent to keep the data and delete those that do not consent. The other really good point from this is to make sure the data you do keep is secure - for example if someone breaks into your business and steals the small file server you keep and the data is not encrypted you could get caught out quick easily. Overall great video - I wouldn't worry about the 20 million euro fines however as I think they will be directed at the big bully organisations out there that choose to flout the law.

[@neilcooper6798]

Really helpful and clear. Thank you.

[@GoDigitool]

Glad to help Neil - good luck with the GDPR changes.

[@TarrelScot]

Very useful and well structured video. Thank you. However it’s worth pointing out that the need for customers to opt in to electronic marketing communications has been in place for 15 years! (Privacy and Electronic Communications Act, 2003). It’s not new in GDPR.

[@wanjirumwoka6187]

Great video! You explained the law very well.

[@michaelandrew4812]

Wow fantastic presentation we are undertaking a GDPR review with Deloitte but your explanation and examples are great.

[@nazirhirji5620]

Great content and presentation - thank you

[@josephineanselin5503]

Thank you so much, super helpful!

[@GiggleGenius0]

PERFECT!

[@rachelguard939]

What will happen about business cards? can people still hand those out?

[@GoDigitool]

Absolutely Rachel! If someone hands a business card to you, that is an example of someone giving an 'opt-in' action to you having their contact details, however, if you want to use this person's information in another way ie. add them to your mailing list you will have to get them to 'opt-in' to that too and ensure they have access to you fair notice policy.

[@GeekBoy03]

Sorry, all Verboten now!

[@SeekerLabs]

If you meet someone and they're European, just run.

[@Linandara]

Thank you for the video. Two questions, first, what about emails you are finding on business or organisation's website or a leaflet. Doy you still ask them if they want to stop receiving emails from you? Obviously they want to be contacted! Second, what about old friends or groups of friends. Do I have to ask all of them too? Thanks.

[@GeekBoy03]

MsMarchella sorry, but according to European regime laws, now everything is banned.

[@boathorn]

excellent explanation

[@mohammeddaud8448]

A super explanation. very succinct. thanks

[@funfairrentals1679]

Digitool, We keep the info for 30 days max and then after we will remove it or unless they contact us to remove it for them. Regards Funfair Rentals

[@NewLeafProgramme]

brilliant film

[@randonneurUK]

So I have a phone book Yellow Pages which has details of suppliers that I might use. Do I need to inform plumbers and electricians that I have their phone No. in my records?

[@madshendriksen1795]

Will start writing the tax authorities and ask then to delete all my data 😂😂 Thanks for a great presented video 👍

[@TruthofDilly]

Very very helpful

[@sunegroennebaek5283]

4320 Happy dances. You must be fit by now😂😂😂💃💃💃

[@philiphall152]

Very helpful Daisy. Thank you!

[@GoDigitool]

Phil! Thanks for watching, it wasn't as fun doing this video on my own! Hopefully see you soon :) Daisy

[@slinkyakash]

thank you! well done. Keep up your work.

[@conradpreen2368]

Very useful, but I have one question. What is the situation regarding invoice and transaction data in e-commerce? The obligation to keep these records for the tax authorities to inspect seems to conflict with the "right to delete". If a customer comes to me and demands that I delete all her invoices which government department wins or do they both fine me?

[@GoDigitool]

Hey Conrad, great question. My understanding is that you can keep these records but would delete the information needed to market to her. Although this is just my interpretation and I'm not legally trained, I'd double check this with the ICO helpline, I've found them useful. ico.org.uk/global/contact-us/helpline/ I've found them really useful at answering specific questions :) Hope this helps and let me know what they say! Daisy

[@Rambhaoa]

Thanks

[@GoDigitool]

You're welcome, thank you for taking the time to see the video.

[@CartooonTHAT]

Question. Lets say i went on holiday. and i happen to take loads of photos and videos in public areas. when people walk around. it happens i would have collected so many different people's data, their face information etc. and if i am to post videos of scenes where you can see someone's face. loads of random face walking around. is there anything i need to do on my side? and its not for any business purposes.

[@bossoli60]

Very well done, thanks

[@GoDigitool]

Thank you Olivier!

[@fp1030]

thank you

[@nitin124goel]

Is it okay to force user to accept terms & Condition /privacy policy? I mean not allowing to use the services unless they accept their privacy policy ?

[@nikhilmain4831]

Do employers need to take and document consent for obtaining personal data from potential candidate for employment ? (refer Article 9 of GDPR). Can you lease guide.

[@MaggieFromm]

Great explanation, thank you for making this video so comprehensive! (GDPR is a scary unknown to me still!)

[@GoDigitool]

Thanks! Glad you enjoyed the video!

[@rosiebaker4250]

What is my settings all my phones the changes in th I ere on settings thank you

[@rafahkabir]

is it mandatory to show the Privacy Policy on the navigation bar? i mean, what if your site does not have a navigation bar at all?

[@markchristianflores8375]

Thanks so much, very informative!

[@GoDigitool]

Glad it was helpful! :)

[@kinokokeiko]

THANK YOU SO MUCH😭💙👌 fantastic

[@GoDigitool]

You're very welcome Sarah! Daisy

[@kanwalhafeez3782]

Want to learn more about GDPR Compliance : stafftimerapp.com/blogs/gdpr-compliance-and-employee-data-monitoring

[@kakoozaazizi8131]

awesome!!!