GDPR (General Data Protection Regulations) are EU regulations which will make the protection of personal information stronger. 

If a company has a data breach,  it could result in a fine of up to 4% of global turnover. However Cyber Essentials is a baseline and GDPR requires more than just basic security protective measures in place.

As a minimum you should:

• Be registered with the Information Commissioners Office and can be fined if your not.
• You have a duty to report a breach within 72 hours.  If that breach is potentially of high privacy risk.
• You also have to provide data on a person if they request it, remove data if they want it removed and change data if they want it changed.
• Personal information includes anything that can identify a person this includes IP addresses.

 Cyber Essentials with IASME Governance as a good starting step for the GDPR .

Cyber Essentials with IASME Governance is one of the standards recognised by the UK Government and shows that you have prepared for GDPR.

Bespoke GDPR Package

As an IASME governing body we provide packages to assist with Cyber Essentials and IASME governance. However we do understand that some companies  do not require this and wish to go for a bespoke GDPR compliance package this can also be provided.