We are already well placed for the GDPR to come into effect as our business processes and company ethos complement the requirements of the GDPR. That said, because we are a small company, there are some things we need to bring into place in order to consider ourselves fully compliant. These include:
Extending our current contract with an addendum to include the deficit requirements of the GDPR in our contractSchools have now received updated contracts which they need to sign and return to us
- Updating our notification and email messages with Article 6 clauses to maintain transparency with customers how we have achieved our goal of establishing lawful processing as required under the GDPR.