The art of the perfect fit

Are you ready for the GDPR?

Posted by D.R.A.W in News · May 2018

The new General Data Protection Regulation (GDPR) comes into effect on the 25th May 2018 - have you taken the necessary steps to comply?

The new General Data Protection Regulation (GDPR) affects all businesses, in varying degrees, based on the sorts of information you collect about customers, clients and employees, and whether you have obtained permission to hold this information.

To try and decipher the legislation and what your responsibilities are can be a bit of a mine field, especially with the inevitable grey areas in new legislation. You need to comply, whilst remaining commercial in your decision-making about how to implement measures that protect your business.

Key points to note are that you must obtain permission from all of your contacts, before 25th May, to continue to contact them in future and record their preferences. If a contact wishes to be removed from your database, you must comply with this.

We have put together a few guidelines of steps you can take to achieve compliance, as recommended by the ICO (Information Commissioners Office) going forward:

  • Take a look at the 12 steps to take right now on the ICO’s website
  • You may also want to look at the guide covering all aspects of GDPR
  • It is also important to determine if you are holding data based on ‘legitimate interest’. The ICO has also created some guidance on how to conduct legitimate interest assessments and how to consider if legitimate interest can be used as the basis of holding and processing data. It is useful to conduct a test for each type of data processing activity that is carried out, as follows:
    • Identify the legitimate interest – what is the purpose of processing the data?
    • Carry out the necessity test – is the data processing necessary to achieve organisational objectives?
    • Carry out a balancing test – is processing the data likely to negatively impact the individuals rights?
    • Organisational risk – are there implications to your business, whether legal, operational or reputational?


Please note, this article is for information purposes, and we suggest for any specific advice required relating to your business, that you seek the appropriate legal guidance.

Notes from DRAW · 02.05.2018

Read More

Working in the Arts: Sarah Arnett Ordaz

Continuing our focus on the US, for this week’s Working in the Arts segment we spoke with Sarah Arnett Ordaz who is the Gallery Manager at Lisson, New York. So, where do you work? I work at Lisson Gallery, in our New York office. What is your job title? Gallery Manager – though this title…

Unlocking Success: The Numerous Benefits of Utilising Temporary Workers in the…

In today’s dynamic and fast-paced business environment, our clients are constantly seeking innovative ways to stay agile, efficient, and competitive. One workforce strategy that has gained significant traction in the art world is the use of temporary workers. Whether it’s seasonal…

Working in the Arts: Hooper Turner

This month’s Working in the Arts segment focusses on the US and this week we spoke with Hooper Turner who is the Registrar for White Cube, New York. So, where do you work? I work at White Cube, a very well known and respected UK-based art gallery with international locations. I work in the New…

When to Disclose a Disability in the UK Recruitment Process?

Sandy, our Administrator here at DRAW looks at when to disclose a disability in the UK recruitment process. A question that we are often asked by candidates is when, and if, they should disclose a disability or health condition, to a potential employer during the recruitment process here in the UK.…