The art of the perfect fit

Are you ready for the GDPR?

Posted by D.R.A.W in News · May 2018

The new General Data Protection Regulation (GDPR) comes into effect on the 25th May 2018 - have you taken the necessary steps to comply?

The new General Data Protection Regulation (GDPR) affects all businesses, in varying degrees, based on the sorts of information you collect about customers, clients and employees, and whether you have obtained permission to hold this information.

To try and decipher the legislation and what your responsibilities are can be a bit of a mine field, especially with the inevitable grey areas in new legislation. You need to comply, whilst remaining commercial in your decision-making about how to implement measures that protect your business.

Key points to note are that you must obtain permission from all of your contacts, before 25th May, to continue to contact them in future and record their preferences. If a contact wishes to be removed from your database, you must comply with this.

We have put together a few guidelines of steps you can take to achieve compliance, as recommended by the ICO (Information Commissioners Office) going forward:

  • Take a look at the 12 steps to take right now on the ICO’s website
  • You may also want to look at the guide covering all aspects of GDPR
  • It is also important to determine if you are holding data based on ‘legitimate interest’. The ICO has also created some guidance on how to conduct legitimate interest assessments and how to consider if legitimate interest can be used as the basis of holding and processing data. It is useful to conduct a test for each type of data processing activity that is carried out, as follows:
    • Identify the legitimate interest – what is the purpose of processing the data?
    • Carry out the necessity test – is the data processing necessary to achieve organisational objectives?
    • Carry out a balancing test – is processing the data likely to negatively impact the individuals rights?
    • Organisational risk – are there implications to your business, whether legal, operational or reputational?


Please note, this article is for information purposes, and we suggest for any specific advice required relating to your business, that you seek the appropriate legal guidance.

Notes from DRAW · 02.05.2018

Read More

In Partnership With… The Good Nugget

As part of a new partnership we would like to introduce Leo Young from Good Nugget Academy. Leo set up Good Nugget Academy after a successful design career working for numerous agencies specialising in Branding and Packaging. Leo’s personal experiences have helped shape the Academy with a passion…

Working in the Arts: Ruth Millington

We have revived our Working in the Arts segment and this month we talked to Ruth Millington from Sotheby’s Institute of Art. So, where do you work? What is your job title? I am Head of Careers at Sotheby’s Institute of Art, based in London’s beautiful Bedford Square, Bloomsbury. It’s an…

HR on The Big Screen

Ever thought about kicking back and watching some movies to brush up on HR subjects? Here are Lisa’s top 3 recommendations if you are hiding from the heat wave… She-Devil, 1989 A brilliant Roseanne Barr takes revenge on her husband after he leaves her and the children for the glamorous…

DRAW March Update

Since Christmas it really has been a case of heads down and all hands on deck at DRAW. Despite the difficulties we have all faced in the last few years it has been so encouraging to see many of our clients posting record years and using this as a springboard to make positive changes to their…