GDPR & DOCUMENT STORAGE

In 2018, the Data Protection Act was updated, alongside the introduction of a GDPR, (General Data Protection Regulation) an EU directive that has redefined how personal data should be managed. Compliance is now mandatory, with heavy fines in place for businesses that are not compliant with the regulations. 

Whilst many may think that GDPR only relates to digital data, it actually dictates that any personal information must be securely deleted once it is no longer required for the purpose it was originally obtained for. Affecting all businesses within the EU and the UK, it also applies to businesses outside the EU who deal with the personal data of those within the EU. This will still apply following the UK’s exit from the EU.

How will GDPR affect my business?

The new GDPR regulations set out requirements for shorter timescales for access requests and demand stricter requirements to storing data, not to mention much more severe penalties for failing to do so properly. Therefore it is vital that you know where each and every document that you have is stored securely and can be accessed quickly if necessary. It also means that if you’re legally required to destroy documents and data past a certain date, that you do so to avoid prosecution and financial penalties. 

At Archive-Vault, we recommend that businesses review their document management processes, including how it is stored and when and where it is destroyed. Our secure storage facility and document destruction services can ensure that your documents are stored in compliance with GDPR and when you are no longer legally obliged to keep them, we can ensure that they’re destroyed in accordance with EN15713 (European Standard for Information Destruction) and sent for recycling. We also issue you a detailed Certificate for Destruction for your records.