To receive an update from Jennifer Shaw.

Jenifer Shaw (RBWM), outlined the item. Members were informed that GDPR and the UK Data Protection Act 2018 were now in force. RBWM now had over 60 privacy notices and these could be found on the borough’s website. There had been face to face training for over 550 RBWM staff. The Forum were informed that non-compliance of data protection would result in hefty fines and penalties. Details of all privacy notices had been published on the RBWM website. Members were urged to think about the ways in which they currently store and share data and about the information journey.

It was highlighted that equal responsibilities were expected by Facebook and admin users on social media platforms. Policies and statements were needed for all types of data procession by organisations and there were also special categories of data where specific procedures should be outlined. The Forum were also reminded that there were now different requirements for keeping and storing information and that consent had become more explicit. It was also noted that fines for breaches of the GDPR and UK Data Protection Act 2018 ranged from £500,000 to £18 million. Members could contact the Data Protection team via email for all enquiries, (DPA@RBWM.gov.uk)