GDPR
Came into force on 25th May 2018 and is European legislation.
Under GDPR there is a requirement for the business to prove the legal basis for which they are collecting personal data (client’s information).
e.g. for a salon could be that asking about allergies / skin conditions for Health & Safety purposes.
Cannot any longer just state ‘it is for marketing purposes’!
Must be able to demonstrate and record how we collect, store and use the data
The reason for legislation is to protect individual’s fundamental rights and freedoms, in particular protection of personal data.
The UK will be pushed to advertise in mainstream media to make people aware of their rights in terms of how businesses can obtain and use their personal data