The Solution

Jon Rush from HR Smart was asked to handle a number of tasks for the client. Firstly, to conduct an audit on all data held within the Company, which highlighted areas that needed strengthening.

Jon's approach was then to:

• help the client put in place the policies and procedures required under GDPR - they were drafted by HR Smart and then tailored to the exact client requirements.
• conduct training for everyone in the business over 2 days, following the completion and issue of the policies and procedures to the employees.
• return after six months to complete a full data impact audit that covered building sites, offices and vehicles to see if there were any areas that still required a review.
• produce a follow-up report with recommendations and a summary of where the client was at in relation to its duties under GDPR.

Our client is now confident that they are protecting personal data and following GDPR legislation rules as much as they can in a very difficult environment.

"I found understanding the new GDPR legislation time consuming and I needed someone who understood our business and the information we may store, as well as general support on the process that should be followed. We were lucky that Jon had the right knowledge for our business and was able to steer us in the right direction. Jon broke the process down into sizeable chunks of work, which made it less daunting and also carried out training sessions to all those who stored information. We completed the audit of the business within the specified time frame and still have support from HR Smart as and when required."