The General Data Protection Regulation (GDPR) is the updated legislation relating to Data Protection that becomes enforcable from the 24th May 2018.
It requires that organisations that process data have policies in place about how it is collected, used and stored and have a lawful basis for their processing. These processes must be accessible and clear to people whose data you hold.
Most Men in Shed projects will hold a database of members which will include information that is classed as personal data such as contact name, address and phone number. You may also record their age or information on health conditions which are defined as special categories of personal data.
For personal data you must demonstrate a lawful basis for your use of the data and for special categories you must demonstrate both a lawful basis and an “additional condition”
More information on GDPR and steps you can take to be compliant are in our new information sheet that you can download from our Resources Page. The Essex Shed Network can also offer workshops on GDPR, if you think this would be of interest please get in touch with Hamish on 01621 851891 or firstname.lastname@example.org