--- title: Evolving Data Security and Privacy Policies for GDPR Compliance description: 6 months on from GDPR, is your business still compliant with the new data security and privacy regulations? GDPR compliance is a continual process; here are some useful tips which will help businesses ensure their data security processes remain fit for purpose over time. image: https://blog.flexmr.net/hubfs/GDPR%20Blog%20Header.png --- close ## Ready to level up your insights? Get ready to streamline, scale and supercharge your research. Fill out this form to request a demo of the InsightHub platform and discover the difference insights empowerment can make. A member of our team will reach out within two working days. close ## Cost effective insights that scale Quality insight doesn't need to cost the earth. Our flexible approach helps you make the most of research budgets and build an agile solution that works for you. Fill out this form to request a call back from our team to explore our pricing options. [![FlexMR logo](https://www.flexmr.net/skin/images/images-custom/2b221b67-b091-4584-9017-872ee2ddf960-logo.svg)](https://www.flexmr.net/) Book a Demo Request Pricing [Contact Us](https://www.flexmr.net/contact/) Menu - [Home](https://www.flexmr.net/) - [InsightHub](https://www.flexmr.net/insighthub/) - [What is InsightHub?](https://www.flexmr.net/insighthub/) - [Data Collection](https://www.flexmr.net/insighthub/data-collection/) - [Data Analysis](https://www.flexmr.net/insighthub/data-analysis/) - [Data Activation](https://www.flexmr.net/insighthub/data-activation/) - [Research Templates](https://blog.flexmr.net/topic/survey-templates/) - [Information Security](https://www.flexmr.net/insighthub/information-security/) - [Services](https://www.flexmr.net/services/) - [Our Expert Services](https://www.flexmr.net/services/) - [Support & Education](https://www.flexmr.net/services/support-and-education/) - [Consultative Services](https://www.flexmr.net/services/consultative-services/) - [Insight Delivery](https://www.flexmr.net/services/insight-delivery-services/) - [Research Methods](https://www.flexmr.net/methods/) - [Sectors We Work With](https://www.flexmr.net/sectors/) - [About](https://www.flexmr.net/about/) - [About Us](https://www.flexmr.net/about/) - [Leadership](https://www.flexmr.net/about/leadership/) - [Meet the team](https://www.flexmr.net/about/meet-the-team/) - [Advisory Board](https://www.flexmr.net/about/advisory-board/) - [Press & Media](https://resources.flexmr.net/tag/press) - [Accolades](https://www.flexmr.net/about/accolades/) - [Careers](https://www.flexmr.net/about/careers/) - [Blog](https://blog.flexmr.net/) - [Resources](https://resources.flexmr.net) - [Contact](https://www.flexmr.net/contact/) - [Book a Demo](https://blog.flexmr.net/) - [Request Pricing](https://blog.flexmr.net/) - [Home](https://www.flexmr.net/) - [InsightHub](https://www.flexmr.net/insighthub/) - - [What is InsightHub?](https://www.flexmr.net/insighthub/) - [Data Collection](https://www.flexmr.net/insighthub/data-collection/) - [Data Analysis](https://www.flexmr.net/insighthub/data-analysis/) - [Data Activation](https://www.flexmr.net/insighthub/data-activation/) - [Research Templates](https://blog.flexmr.net/topic/survey-templates/) - [Information Security](https://www.flexmr.net/insighthub/information-security/) - ![Camp InsightHub](https://blog.flexmr.net/hubfs/Website_Files/Images/Navigation/camp_insighthub_nav.png) Embark on a new adventure. Join Camp InsightHub, our free demo platform, to discover the future of research. [Sign Up Today](https://insighthub.flexmr.net/users/new) - ![FlexMR InsightHub](https://blog.flexmr.net/hubfs/Website_Files/Images/Navigation/insighthub_screenshot.png) Read a brief overview of the agile research platform enabling brands to inform decisions at speed in this PDF. [Download Brochure](https://blog.flexmr.net/hubfs/Public_Files/InsightHub_Brochure.pdf) - ### InsightHub on the Blog - [Surveys, Video and the Changing Face of Agile Research](https://blog.flexmr.net/surveys-video-changing-agile-research) - [Building a Research Technology Stack for Better Insights](https://blog.flexmr.net/research-technology-stack) - [The Importance of Delegation in Managing Insight Activities](https://blog.flexmr.net/delegation-importance-insight-activities) - [Common Insight Platform Pitfalls (and How to Avoid Them)](https://blog.flexmr.net/platform-pitfalls-how-to-avoid-them) - [Services](https://www.flexmr.net/services/) - - [Our Expert Services](https://www.flexmr.net/services/) - [Support and Education](https://www.flexmr.net/services/support-and-education/) - [Consultative Services](https://www.flexmr.net/services/consultative-services/) - [Insight Delivery Services](https://www.flexmr.net/services/insight-delivery-services/) - [Research Methods](https://www.flexmr.net/methods/) - [Sectors We Work With](https://www.flexmr.net/sectors/) - ![FlexMR Services Team](https://blog.flexmr.net/hubfs/Website_Files/Images/Navigation/services.jpg) Our services drive operational and strategic success in challenging environments. Find out how. [Download Brochure](https://blog.flexmr.net/hubfs/Public_Files/Brochures/FlexMR_Services_Brochure.pdf) - ![Video Close Connection Programme](https://blog.flexmr.net/hubfs/Website_Files/Images/Navigation/video_services.jpg) Close Connections bring stakeholders and customers together for candid, human conversations. [Read Press Release](https://resources.flexmr.net/close-connections-launch) - ### Explore our Practices - [Communities Practice](https://www.flexmr.net/insighthub/) - [Closeness Practice](https://www.flexmr.net/practices/customer-closeness/) - [CX Practice](https://www.flexmr.net/practices/customer-experience/) - [Insight Communications Practice](https://www.flexmr.net/practices/insight-communications/) - [About](https://www.flexmr.net/about/) - - [About Us](https://www.flexmr.net/about/) - [Leadership](https://www.flexmr.net/about/leadership/) - [Meet the Team](https://www.flexmr.net/about/meet-the-team/) - [Advisory Board](https://www.flexmr.net/about/advisory-board/) - [Press & Media](https://resources.flexmr.net/tag/press) - [Accolades](https://www.flexmr.net/about/accolades/) - [Careers](https://www.flexmr.net/about/careers/) - ![FlexMR Credentials Deck](https://blog.flexmr.net/hubfs/Website_Files/Images/Navigation/flexmr_credentials.png) The FlexMR credentials deck provides a brief introduction to the team, our approach to research and previous work. [Download Credentials](https://blog.flexmr.net/hubfs/Public_Files/Brochures/FlexMR_Credentials.pdf) - ![FlexMR Insights Empowerment](https://blog.flexmr.net/hubfs/Website_Files/Images/Navigation/insights_empowerment.png) We are the insights empowerment company. Our framework addresses the major pressures insight teams face. [Download Brochure](https://blog.flexmr.net/hubfs/Public_Files/Brochures/Insights_Empowerment_Brochure.pdf) - ### Latest News - [Insight as Art Shortlisted for AURA Innovation Award](https://resources.flexmr.net/aura-innovation-award-2021) - [FlexMR Launch Video Close Connection Programme](https://resources.flexmr.net/close-connections-launch) - [VideoMR Analysis Tool Added to InsightHub](https://resources.flexmr.net/videomr-launch) - [FlexMR Makes Shortlist for Quirks Research Supplier Award](https://resources.flexmr.net/quirksmr-mr-supplier-award-2020) - [Blog](https://blog.flexmr.net) - - [Latest Posts](https://blog.flexmr.net) - [Strategic Thinking](https://blog.flexmr.net/topic/strategic-thinking) - [Technology & Trends](https://blog.flexmr.net/topic/tech-trends) - [Research Methods](https://blog.flexmr.net/topic/research-methods) - [Practical Application](https://blog.flexmr.net/topic/practical-application) - [Insights Empowerment](https://blog.flexmr.net/topic/insights-empowerment) - [View Full Blog Archives](https://blog.flexmr.net/all) - ![FlexMR Close Connection Programme](https://blog.flexmr.net/hubfs/Website_Files/Images/Navigation/close_connection.png) Discover how to build close customer connections to better support real-time decision making. [Build Connections](https://blog.flexmr.net/practical-support-real-time-decisions) - ![Market Research Playbook](https://blog.flexmr.net/hubfs/Website_Files/Images/Navigation/market_research_playbook.png) What is a market research and insights playbook, plus discover why should your team consider building one. [Discover Playbooks](https://blog.flexmr.net/market-research-playbook) - ### Featured Posts - [Five Strategies for Turning Insight into Action](https://blog.flexmr.net/5-strategies-turn-insights-into-action) - [How to Design Surveys that Ask the Right Questions](https://blog.flexmr.net/effective-survey-design-guide) - [Scaling Creative Qual for Rich Customer Insight](https://blog.flexmr.net/scale-creative-qual-rich-understanding) - [How to Measure Brand Awareness: The Complete Guide](https://blog.flexmr.net/measure-brand-awareness) - [Resources](https://resources.flexmr.net) - - [All Resources](https://resources.flexmr.net) - [Client Stories](https://resources.flexmr.net/tag/case-studies) - [Whitepapers](https://resources.flexmr.net/tag/whitepapers) - [Events & Webinars](https://resources.flexmr.net/tag/events) - [The Open Ideas Panel](https://ideas.flexmr.net/auth/sign_in) - [InsightHub Help Centre](https://help.flexmr.net/en) - [FlexMR Client Network](https://www.linkedin.com/groups/9165407/) - ![Insights Empowerment Readiness Calculator](https://blog.flexmr.net/hubfs/Website_Files/Images/Navigation/insights_calculator.png) The insights empowerment readiness calculator measures your progress in building an insight-led culture. [Get Your Score](https://resources.flexmr.net/insights-empowerment-calculator) - ![MRX Lab Podcast](https://blog.flexmr.net/hubfs/Website_Files/Images/Navigation/flexmr_podcast.png) The MRX Lab podcast explores new and novel ideas from the insights industry in 10 minutes or less. [Listen Now](https://resources.flexmr.net/mrx-lab-podcast) - ### Featured Stories - [Specsavers Informs Key Marketing Decisions with InsightHub](https://resources.flexmr.net/specsavers) - [The Coventry Panel Helps Maintain Award Winning CX](https://resources.flexmr.net/coventry-building-society) - [Isagenix Customer Community Steers New Product Launch](https://resources.flexmr.net/isa-insights) - [Curo Engage Residents with InsightHub Community](https://resources.flexmr.net/curo) - [Tech & Trends](https://blog.flexmr.net/topic/tech-trends) / - [Research Methods](https://blog.flexmr.net/topic/research-methods) / - [Strategic Thinking](https://blog.flexmr.net/topic/strategic-thinking) / 7 MIN READ ## Evolving Data Security and Privacy Policies for GDPR Compliance #### Louisa Thistlethwaite # [Workshops and Beacons: A Guide to Building Custome...](https://blog.flexmr.net/workshops-beacons-customer-salience) Most organisations are not short of data, insight or decks.Their biggest challenge is not whether cu... [Read more](https://blog.flexmr.net/workshops-beacons-customer-salience) 9 MIN READ #### Ed Hill - [Events (1)](https://blog.flexmr.net/topic/events) - [Insights Empowerment (38)](https://blog.flexmr.net/topic/insights-empowerment) - [Practical Application (178)](https://blog.flexmr.net/topic/practical-application) - [Research Methods (285)](https://blog.flexmr.net/topic/research-methods) - [Strategic Thinking (232)](https://blog.flexmr.net/topic/strategic-thinking) - [Survey Templates (7)](https://blog.flexmr.net/topic/survey-templates) - [Tech & Trends (397)](https://blog.flexmr.net/topic/tech-trends) Here we are, 6 months on from the May 25th deadline and what now for GDPR? If you are reading that sentence and thinking to yourself “GDPR?  - that ship has sailed” then I urge you to read on. ### GDPR is Still Important GDPR represents a sea of change in data privacy legislation; redefining the relationship and balance of power between businesses and consumers when it comes to the collection, manipulation and retaining of personal data. No longer do consumers have to blindly trade their personal data in exchange for services. GDPR sets restrictions on how personal data may be used. It demands that organisations communicate clearly and honestly with customers about the use of their personal data.  GDPR also gives consumers the power to meaningfully control their data and seek redress when it is misused.  Notice how I use the present tense? GDPR is here to stay, it is the new normal. A fact which, I fear, may have passed many businesses by - lost in amongst the frenetic activity, eager anticipation and intense speculation surrounding its introduction. Now the deadline has passed, privacy policies have been updated and the staff awareness training has been delivered, it is easy to believe the job has been done. Right? On the contrary, this is only the start. GDPR compliance isn’t a one off destination – somewhere you reach, park up and get comfortable; it’s a continual journey. Let’s remind ourselves that the GDPR legislation only sets the requirements to which businesses must comply.  It does not define the internal processes necessary to support this compliance. Nor does it help you identify how your current processes might change in the future and the impact of this on your compliance.  Regardless of whether you had a little or a lot to do to be GDPR ready for May, what shape are you in for being GDPR compliant in 12 months, 2 years, or 5 years’ time?  | ![Tweet from FlexMR](https://www.flexmr.net/images/webpage-images/45-tweet-this-from-flexmr.png) | ***Tweet This*** | | --- | --- | | [GDPR is here to stay and compliance isn’t a one off destination, it’s a continual journey. What shape are you in for being GDPR compliant in 12 months, 2 years, or 5 years’ time?](https://ctt.ac/uo0v8) | | So, 6 months on, now is the time to take stock of what has been achieved; identify any planned work that is left to do. It is also the time to look inward and consider if you are able to remain compliant in the future and through changes to your business. The new GDPR challenge for us all is maintenance. Here are some useful tips which will help you ensure your approach to GDPR compliance remains fit for purpose over time.  ### Review and Re-evaluate Whatever actions you have taken on your road to GDPR, be sure to repeat them on a regular basis. Many of you will have carried out an initial gap analysis and data audit in order to shape your GDPR response. Keep in mind that these will need to be repeated at an appropriate interval and ensure you have the resources in place to carry it out. Technologies, systems, suppliers and even the nature of a business can change and evolve over time which could see you moving into previously unidentified and unfamiliar GDPR waters.  Just because you’re not a data processor today, doesn’t mean you can’t be tomorrow. Taking the time to reassess is an important step, which if ignored could see you exposed. The same goes for all relevant policies and procedures. It would be a mistake to see these as set in stone, they should, in fact, change in line with your business else they become inaccurate and outdated. For all GDPR related actions and materials draw up a review schedule to ensure the content and your compliance remains accurate and reliable.  ### Don’t Assume - Check The best way to illustrate this point is with an example.  GDPR requires that you as an organisation respect and respond to a data subject’s right to see the data you have on them, aka a Subject Access Request. You might have taken the time to document an internal policy and process on this.  Is that enough? No! Don’t assume blindly that the process you have put together actually works in a real life situation – test it! Should you receive a SAR, are your staff well-trained enough to recognise it and then apply the relevant process? Does the process include enough detail to guide your investigations and assembling of relevant data? Such practice is important to ensure efficiency of processes and avoid unexpected problems when time is really against you.    ### Go Beyond Simple Compliance Like most information security professionals, I’ve done my fair share of ranting and raving about GDPR. At times it has felt like my personal Everest. For compliance to stick, it’s time to move into a position of acceptance. Let’s remember, the intent of GDPR isn’t about making life complicated. It’s also about making legislation fit for purpose in line with our online-centric, technology-focused world. GDPR recognises the growth in the volume digital information we create, its inherent value and thus the need for protection.  It is time for businesses to understand this too. | ![Tweet from FlexMR](https://www.flexmr.net/images/webpage-images/45-tweet-this-from-flexmr.png) | ***Tweet This*** | | --- | --- | | [The intent of GDPR isn’t about making life complicated, it’s about making legislation fit for purpose in line with our evolving online-centric, technology-focused world; so our policies must evolve too.](https://ctt.ac/ugm05) | | The best way to achieve this is through seeing the bigger picture and embracing data security as a legitimate business priority. Ask yourself this, which usually has the better outcome, doing something because you have to or doing something because you want to? I have already written in [another blog](https://blog.flexmr.net/beyond-cyber-security-how-to-create-an-information-security-culture) about techniques for creating a positive culture towards data security and they can all be applied here. #### About FlexMR We are The Insights Empowerment Company. We help research, product and marketing teams drive informed decisions with efficient, scalable & impactful insight. #### About Louisa Thistlethwaite Louisa is a self-described Info Sec Warrior, who has been key to our success in obtaining the ISO 27001 and Cyber Essentials Plus certifications. #### Stay up to date ## You might also like... ![Blog Featured Image Header](https://blog.flexmr.net/hubfs/Marketing_Files/Blogs/Headers/retaining_human_touch_customer_salience_cx_ai.png) ### [Retaining a Human Touch with Custom...](https://blog.flexmr.net/customer-salience-cx-ai) In recent years, companies have embraced artificial intelligence (AI) at pace, swept up in a technological momentum that promises efficiency and cost savings. However, in their rush to pursue quickly ... [Continue reading](https://blog.flexmr.net/customer-salience-cx-ai) 5 MIN READ ![Blog Featured Image Header](https://blog.flexmr.net/hubfs/Marketing_Files/Blogs/Headers/casual_conversation_iosetta_santini.png) ### [A Casual Conversation... with Ioset...](https://blog.flexmr.net/casual-conversation-iosetta-santini) Most research projects still currently end with a powerpoint report and a debrief. This has become deeply entrenched as the industry standard, and it is what stakeholders have come to expect when they... [Continue reading](https://blog.flexmr.net/casual-conversation-iosetta-santini) 4 MIN READ ![Blog Featured Image Header](https://blog.flexmr.net/hubfs/Marketing_Files/Blogs/Headers/synthetic_data_richer_market_insights.png) ### [Synthetic Data: The Key to Richer M...](https://blog.flexmr.net/synthetic-data-richer-market-insights) In the dynamic world of market research, the need for robust and accurate data is critical. Whilst the increased prevalence of generative AI has provided a range of benefits to market research process... [Continue reading](https://blog.flexmr.net/synthetic-data-richer-market-insights) 7 MIN READ ![](https://www.flexmr.net/skin/images/images-custom/48f118ee-cef9-42d6-b60b-5575d5ac26e3-flexmr_footer.svg) - [Home](https://www.flexmr.net/) - [Contact Us](https://www.flexmr.net/contact/) - [Privacy Policy](https://www.flexmr.net/legal/privacy/) - [Cookie Policy](https://www.flexmr.net/legal/cookies/) - [Terms of Use](https://www.flexmr.net/legal/terms-of-use/) [Follow us on Facebook](https://www.facebook.com/flexmr/) [Follow us on Twitter](https://twitter.com/_flexmr) [Follow us on LinkedIn](https://www.linkedin.com/company/flexmr) [Follow us on YouTube](https://www.youtube.com/c/FlexmrNetOnlineResearch) [![Grit Top 50 Logo](https://www.flexmr.net/uploads/photo-gallery-include-images/34/44258f4d-7452-40d6-bb23-0e220c8ba21f.png)](https://www.greenbook.org/mr/grit/business-innovation-edition) [![ISO 27001 Alcumus](https://www.flexmr.net/uploads/photo-gallery-include-images/34/fa89f9b3-d866-43b8-8de0-4a052a9053d8.png)](https://www.alcumus.com/en-gb/certification/iso-27001/) [![Cyber Essentials Plus Logo](https://www.flexmr.net/uploads/photo-gallery-include-images/34/cba57df6-75a2-4544-9599-dcc0c2f14b79.png)](https://blog.flexmr.net/hubfs/Public_Files/Other/FlexMR_Cyber_Essentials_Certificate.pdf?__hstc=163229475.dde2c3d212762f49b059c9f62e7537a0.1624542718433.1626339489304.1626701624468.7&__hssc=163229475.2.1626701624468&__hsfp=3142549060) © FlexMR 2021. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Louisa Thistlethwaite", "url" : "https://blog.flexmr.net/author/louisa-thistlethwaite" }, "dateModified" : "2021-07-21T23:24:01.937Z", "datePublished" : "2018-11-22T10:52:59.000Z", "headline" : "Evolving Data Security and Privacy Policies for GDPR Compliance", "image" : [ "https://blog.flexmr.net/hubfs/GDPR%20Blog%20Header.png" ], "mainEntityOfPage" : { "@id" : "https://blog.flexmr.net/evolving-data-security-privacy-policies-gdpr", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.flexmr.net/hubfs/Website_Files/Images/Logos/flexmr_logo_amp.png" }, "name" : "FlexMR" } } ```