© Long Buckby URC 2018
News 8
GDPR and your Church
Long Buckby United Reformed Church
Email the Webmaster
The general data protection regulation (GDPR) is a new EU law that will come into effect on 25 May
2018. It’s the biggest overhaul of data protection legislation for over 25 years, and will introduce new
requirements for how organisations process personal data.
Your Elders are looking at this now, here are some of the points to consider.
Arrange a Data Audit
Audit what personal data you hold, where it came from and who you share it with.
Review how you ask for consent
Under GDPR, simply saying “click here to read our privacy policy” is no longer enough. You need to
explain clearly why you are collecting personal data and how you intend to use it.
Ultimately, GDPR is very clear that an individual’s choice to say “no” is paramount.
Provide User Access to Personal Data
People can make subject access requests at any time to check the data you hold and what you do
with it.
Manage Data
Charities should put a process in place, such as to include “Find out what information we hold on you”
and “Remove all information about me” sections in your privacy policy to give people clear information.
© Long Buckby URC 2018
News 8
GDPR and your Church
Long Buckby United Reformed Church
Email the Webmaster
The general data protection regulation (GDPR) is a new EU law that will come
into effect on 25 May 2018. It’s the biggest overhaul of data protection
legislation for over 25 years, and will introduce new requirements for how
organisations process personal data.
Your Elders are looking at this now, here are some of the points to consider.
Arrange a Data Audit
Audit what personal data you hold, where it came from and who you share it
with.
Review how you ask for consent
Under GDPR, simply saying “click here to read our privacy policy” is no longer
enough. You need to explain clearly why you are collecting personal data and
how you intend to use it.
Ultimately, GDPR is very clear that an individual’s choice to say “no” is
paramount.
Provide User Access to Personal Data
People can make subject access requests at any time to check the data you
hold and what you do with it.
Manage Data
Charities should put a process in place, such as to include “Find out what
information we hold on you” and “Remove all information about me” sections
in your privacy policy to give people clear information.
