The ODPC has published guidance, The GDPR and You – Preparing for 2018, to help organisations prepare for the GDPR. It contains a checklist to provide companies with a practical starting point to ensure full compliance by May 2018. It is important for organisations to start taking steps to prepare now, to ensure that adequate policies and procedures are in place to deal with the new rules when they come into force. Organisations will face hefty fines for non-compliance, and the risk of individuals bringing private claims for breach of their data privacy rights.
The Article 29 Working Party (consisting of representatives of national data protection authorities) is also expected to shortly issue guidance at European level on Data Protection Officers, Data Portability, and Designation of Lead Supervisory Authority.