General Data Protection Regulation (GDPR)
is really (Analog & Digital) Data Protection Regulation

So if you are a small to medium sized business, here's a FREE resource to help you get started.

For a small to medium sized business knowing where to start with GDPR can be a nightmare. It is important to understand though that most GDPR tasks are something you probably needed to be doing anyway or probably already do without realising, namely:
  • Business Process Management
  • Shadow IT
  • Retention
  • Marketing
  • Rights/Sharing 
  • Responsibilities & Legal Requirements
Think of this as a series of questions about your data when it comes to personal information. What do you hold, Who do you have data on, Why do you have it, Where is it stored, When did you get it, How did you get it, etc. etc.

These questions need to be answered to classify your data for GDPR and decide whether a Data Protection Impact Assessment (DPIA) is required, no matter the size of your business. For small and medium businesses a good starting point is our GDPR Data Classification Template which lists over 51 types of personal data that you might be holding and the basic questions that need answering. Download it for FREE here.