Data protection and IT

As technology continues to evolve, legislation has developed to keep pace. It affects everything from data protection and online selling to internet policies for employees.

The EU General Data Protection Regulation (GDPR) regulates how your business processes personal information. All businesses must comply with the data protection principles.

As part of your IT management, which includes purchasing and maintaining IT, you should make sure you understand and manage any legal issues involved.

Why you need to take data protection legislation seriously, your obligations, plus information on the penalties you might face if you breach the GDPR.

Communicating and selling online is subject to the same laws as 'traditional' business, and often brings added complications. Read our overview.

How to go about purchasing hardware, software and IT systems for your business, licensing and what to do if your IT solution fails to work properly.

Illegal software can carry viruses as well as leaving you open to prosecution. Make sure you stay within the law when you buy business software.

Public bodies have to release information they hold on you. These tips will make sure nothing confidential gets into the public domain inadvertently.

There are a number of legal issues you need to be aware of when building your website, from intellectual property protection to advertising and distance selling rules.

If your business processes personal information you must notify the Information Commissioner's Office. Use this link to submit your form online.

Not all businesses are required to notify the Information Commissioner about data they hold - use this online tool to work out whether you need to.

How your business can use individuals' personal data under the GDPR. Managing privacy, individuals' rights, security and data breaches.

Use this checklist to find out if you're complying with the GDPR. There is also further guidance and contact numbers for further advice

Self-assessment tool for businesses which use surveillance cameras to help them comply with Data Protection Rules

To comply with web cookie laws, businesses are required to install a method of requesting user consent, or remove web cookies completely