
The new General Data Protection Regulation (GDPR) comes into force on 25th May 2018, but do you know how it will affect you and your members?
Here’s five things you should know:
#1 The UK’s decision to leave the EU will NOT affect the date of commencement or your need to adhere to the regulation
If you operate in the EU, regardless of whether you are based in or outside the area, you will need to comply. If you are a UK-only organisation and have no EU contact data, the advice is still to comply. If you’re subject to the Data Protection Act (DPA) 1998 then you will be subject to GDPR.
#2 As with the DPA, GDPR applies to personal data BUT this now includes online identifiers
Any online identifiers like cookies are now included so you need to provide the ability for contacts to opt into such activity and record the provision of consent. If you use Google Analytics then this includes you.
#3 You need to be able to prove on what basis you are ‘lawfully processing’ data
Consent is one option, and will be the most common method used. But there are two other options to consider… Do you need to process the data for the necessary performance of a contract? This is another option. Is it in the Data Controller’s legitimate interest? Beware of this one – the Information Commissioner’s Office (ICO) has already warned this will be hard to prove. Find out more »
#4 Consent can be provided in a number of ways
The most common way will be ticking an opt-in box but it could be a Yes/No option; a preference dashboard; double opt-in; or volunteering information for a specific purpose. It is NOT pre-checked boxes or opting out. By the way, the ICO recommends refreshing consent every two years.
#5 You need to record the provision of consent against the contact record
Most probably in your CRM. Details need to include who consented (name, online username, session ID etc.); when consent was given; what the policy was at the time; and how consent was given.
It’s not long before GDPR comes into force – now’s the time to get your head around it all and develop an action plan. You can get a lot of information on GDPR from the ICO website (such as the 12 Steps to Take Right Now), from Microsoft (check out their GDPR Trust Centre website) and we are here to help and advise. Call us on 0845 544 2043.


In the olden days – and possibly even today CRM suppliers tended to assume that NFPs were simple organisations. They are not. They require just as much time to understand and unpack the ways in which people work, and the system they employ, as more complex businesses. But in their naivety many under-estimated the time and budget required. Which resulted in budget over-runs, suspicion, and friction on both sides.
Felinesoft
His last CRM project went live in 1998, and his calculation was that less than 10% of the current workforce were actually using the system. The others had become adept at developing work-arounds or used one or more of the seventeen websites developed over time by different departments. The process had seen them discard 100,000 old website pages!


NAJ Appoints Simon Forrester