GDPR FAQs

What is GDPR?

The General Data Protection Act (GDPR) is an EU regulation that sets out the key principles, rights, and obligations for most processing of personal data. In the UK, the Data Protection Act 2018 (DPA 2018) came in to force at the same time as GDPR. Both GDPR and DPA 2018 require due care to be taken with personal and identifying information about individuals - be it online, stored electronically, or printed. It is enforced by the ICO, and the penalties for breaching these rules can be substantial. GDPR came into effect on 25 May 2018.

What kind of information does GDPR apply to?

Essentially, anything that can identify and relate to an individual. The ICO provides more information about the data covered under GDPR.

How can professional shredding help me be GDPR compliant?

To maintain your GDPR compliance, you need to completely destroy all information for individuals when you no longer need to retain that information, or they have asked you to remove them from your database. You will need to prove your secure destruction of the data, which we provide via a Certificate of Destruction.