FOI request (FOI212390)

GDPR

Requested Fri 21 April 2017
Responded  Fri 21 April 2017

Under the Freedom of Information act, can I please request answers to the following questions: 

1. Has your organisation begun planning for the implementation of the GDPR?

• Yes
• No, but we intend to soon
• No, and we have not begun the planning process

2. Is your organisation currently reviewing its personal data consent procedures in light of the changes being implemented under the GDPR?

• Yes
• No, but we intend to
• No, and we have not begun the planning process

3. Are you able to comply now for requests for the right to be forgotten as required by the GDPR?

• Yes
• No, but we intend to soon
• No, and we have not begun the planning process

4. Are you able to comply now with the legal requirement to protect personally identifiable information (PII) as required by the GDPR?

• Yes
• No, but we intend to soon
• No, and we have not begun the planning process

5. Has your organisation already appointed a Data Protection Officer as required by the GDPR?

• Yes
• No, but we intend to soon
• No, and we have not begun the planning process

6. If yes, whom in the organisation does the/will the new Data Protection Officer report to?

• The Chief Executive
• The Head of IT
• Head of Legal
• Other - please state

7. Has a budget been allocated to implementing the provisions of the GDPR?

• Yes
• No
• I don't know

8. If yes, what is your organisation's budget for implementing the provisions of the GDPR?

Response

Q1. Yes Q2 - Q6 We are currently researching the requirements of GDPR and will be creating an action plan for implementation. Q7. Not yet - Budget will allocated once work has been scoped. Q8. Information not held.