The art of the perfect fit

Are you ready for the GDPR?

Posted by D.R.A.W in News · May 2018

The new General Data Protection Regulation (GDPR) comes into effect on the 25th May 2018 - have you taken the necessary steps to comply?

The new General Data Protection Regulation (GDPR) affects all businesses, in varying degrees, based on the sorts of information you collect about customers, clients and employees, and whether you have obtained permission to hold this information.

To try and decipher the legislation and what your responsibilities are can be a bit of a mine field, especially with the inevitable grey areas in new legislation. You need to comply, whilst remaining commercial in your decision-making about how to implement measures that protect your business.

Key points to note are that you must obtain permission from all of your contacts, before 25th May, to continue to contact them in future and record their preferences. If a contact wishes to be removed from your database, you must comply with this.

We have put together a few guidelines of steps you can take to achieve compliance, as recommended by the ICO (Information Commissioners Office) going forward:

  • Take a look at the 12 steps to take right now on the ICO’s website
  • You may also want to look at the guide covering all aspects of GDPR
  • It is also important to determine if you are holding data based on ‘legitimate interest’. The ICO has also created some guidance on how to conduct legitimate interest assessments and how to consider if legitimate interest can be used as the basis of holding and processing data. It is useful to conduct a test for each type of data processing activity that is carried out, as follows:
    • Identify the legitimate interest – what is the purpose of processing the data?
    • Carry out the necessity test – is the data processing necessary to achieve organisational objectives?
    • Carry out a balancing test – is processing the data likely to negatively impact the individuals rights?
    • Organisational risk – are there implications to your business, whether legal, operational or reputational?


Please note, this article is for information purposes, and we suggest for any specific advice required relating to your business, that you seek the appropriate legal guidance.

Notes from DRAW · 02.05.2018

Read More

Spotlight on: Accra, Ghana

DRAW Recruitment have been fortunate enough to be asked to work on two new roles in Accra recently, so we wanted to shine a light on this fascinating city, which is a melting pot of cultures and ethnicities and find out what it has to offer. Once labelled “Africa’s Capital Of Cool” by the New…

AWITA Sponsored Memberships

DRAW are incredibly proud to support this years AWITA Sponsored Membership programme. AWITA strives to support the talent pipeline through professional development, mentoring and networking. Fifteen sponsored memberships are available annually to encourage the widening participation and diversity…

Working in the Arts: From Boutique to Blue Chip – Celia Kinchington

Working in the Arts: From Boutique to Blue Chip, moving from a small team to a large business can be intimidating, and feel well beyond your comfort zone if you don’t have that experience. We caught up with Celia Kinchington who made that move on a grand scale, to hear how she handled this…

Working in the Arts: Victoria Clay

This month’s Working in the Arts segment focusses on Victoria Clay who is the Junior Cataloguer and Valuer for the Paintings and Jewellery departments at Catherine Southon Auctioneers and Valuers. Where do you work? I work at Catherine Southon Auctioneers and Valuers. What is your job title? I am…