The guidance is part of the ’GDPR 12 Steps’ area under the GDPR and Data Protection section of the Law Society website. This follows the Data Protection Commissioner’s 12-steps program but tailors the advice to items that may be of particular importance to law firms. There are now 8 steps available on the Society's website.

New steps 6, 7 and 8

The additional notes give guidance on:

• the lawful basis for processing personal data - Step 6,
• processing data based on consent - Step 7, and
• data breach protocol (new template) - Step 8

Go to GDPR 12 steps

Steps 1-5

Steps 1 to 5 of the GDPR 12 Steps give guidance on the following topics and include notes, templates and checklists to help you with GDPR compliance:

1. Becoming aware
2. Becoming accountable
3. Communicating with staff and clients
4. Personal data protection rights
5. Subject access requests

To access this data protection guidance in the Regulations area of the site, go to GDPR 12 steps.

eNewsletters

This article originally appeared in the October 2019 member eZine. For more information, and to subscribe, visit eNewsletters.