In the fifth of this special series on the GDPR, Rollits LLP provide a post implementation review
On 25 May 2018 the UK’s data protection regime was shaken up amidst much hullabaloo by the introduction of the General Data Protection Regulation (GDPR). Three months into its reign, as the dust begins to settle, we take a look at the impact the GDPR has had so far, focusing on marketing activities.
Marketing activities
Whenever an organisation sends out marketing material to an identifiable individual, GDPR will apply and the organisation will need to ensure that it has a lawful basis for doing so: typically the consent of the individual is required, but where it is not the organisation may be able to rely on its own legitimate interests.
In the run up to 25 May 2018 one of the biggest consequences of the GDPR felt by the general public related to the stricter requirements controllers had to abide by in order to process personal data based on an individual’s consent. Almost simultaneously marketing departments all over the country (and further afield)
