What is GDPR and what are we doing about it?

Protecting our clients’ data is a priority for Bloobo. The General Data Protection Regulation (GDPR) is a welcome opportunity for us to demonstrate our commitment to put data protection first. We have setup a dedicated programme within Bloobo to ensure we are fully compliant with GDPR by 25 May 2018.

Protecting our clients’ data is a priority for Bloobo. The General Data Protection Regulation (GDPR) is a welcome opportunity for us to demonstrate our commitment to put data protection first. We have setup a dedicated programme within Bloobo to ensure we are fully compliant with GDPR by 25 May 2018.

As part of this programme, we will be assessing all of our systems, processes and policies. Following this in-depth assessment, we will be making changes to our products and systems to ensure that we comply with the Regulation.

What is GDPR?

• The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a regulation intending to strengthen and unify data protection for all individuals within the European Union (EU). It also addresses the export of personal data outside the EU.

• The GDPR is the result of four years of EU work to bring data regulation legislation up to date. It was adopted on 27 April 2016. It becomes enforceable from 25 May 2018, after a two-year transition period.

• The Regulation and UK Act will standardise data protection laws and give EU and UK citizens greater control of their personal data.

• For the UK, on 25 May 2018, the UK’s Data Protection Bill will pass into law, as the Data Protection Act 2018.

• Organisations that handle personal data will need to, by law, meet new requirements to ensure compliance.

• The sanction for non-compliance is a maximum of EUR 20 million or 4% of the total global annual turnover of an organisation, whichever is higher.

What Bloobo is doing to comply with GDPR
We handle personal data (e.g. names, email addresses and postal addresses of our clients) and therefore, we are taking a number of steps to ensure we are compliant with GDPR. These include:

• Mapping all data we, and third-parties (e.g. our suppliers) handle.

• Assessing our systems, processes and policies.

• Making changes to our products and systems.

• Updating our policies, processes and contracts.

• Training our staff on GDPR requirements and our new Data Protection policies.

• Creating a “Privacy by Design” guideline for website and app owners.

• Helping existing clients work towards GDPR compliance.

It is vital that you understand your requirements for GDPR compliance. We will be in touch with you soon to discuss your products and services. You can also contact us any time if you wish to discuss GDPR or if you have any concerns.