The General Data Protection Regulation (GDPR) 2016 came into force on 25 May 2018. The UK Data Protection Act 2018 received Royal Assent on 23 May and was published several days later. Both pieces of legislation are relevant to Section A6 of the CNHC Code of Conduct, Ethics and Performance for registrants (‘the Code’), which spells out the requirement to comply with data protection laws. We have updated section A6 accordingly. All current CNHC registrants have been sent notification of the changes and the updated Code can be accessed on our website here.
In the period leading up to 25 May, we sent all registrants links to the advice services provided by the Information Commissioner’s office. And in response to the volume of enquiries we received about client records, we issued a Briefing Note to CNHC registrants which is available by logging into MyCNHC.
Should you have queries on how the new legislation applies to you, a specific advice service for small organisations is provided by the Information Commissioner’s Office.