GDPR for commissioned goods and services
The General Data Protection Regulation (GDPR) replaced the Data Protection Act (1998) on 25 May 2018. The UK government is also introducing the Data Protection Bill (2017) to legislate areas not covered by GDPR. These changes affect all organisations that process personal data so you need to be familiar with your new responsibilities.
You can learn more with the Information Commissioner's Office guide to preparing for GDPR.
Since March 2018, we have been writing to our suppliers detailing how the new legislation will affect contracts with us. We've included a form to complete and return which once reviewed, will form part of our contract.
If you have not received or returned your form, you must email firstname.lastname@example.org ASAP or your contract with us could be at risk.