Is the GDPR Good or Bad News for Business

The European Union?s General Data Protection Act (GDPR) is a new data authority coming into force on 25 May 2018. It replaces the current Data Protection Directive 95/46/EC, while extending the remit to include the export of personal data outside the EU. It aims to give EU citizens and residents living there more control over their personal information. It also hopes to make regulatory compliance simpler for participating businesses.

The Broad Implications for Business
The GDPR puts another layer of accountability on businesses falling within its remit. It requires them to implement ?comprehensive but proportionate governance measures? including recording how they make decisions. The long-term goal is to reduce privacy infringements. In the short run, businesses without good governance may find themselves writing new policies and procedures.

Article 5 of the European Union?s General Data Protection Act lays down the following guidelines for managing personal data. This shall be ?
? Processed transparently, fairly, and lawfully
? Acquired for specific, legitimate purposes only
? Adequate, relevant and limited to essentials
? Not used for any other, incompatible purpose
? However it may be archived in the public interest
? Kept up to date with all inaccuracies corrected
? Ring-fenced when the information becomes irrelevant
? Adequately protected against unauthorised access
? Stored in a way that prevents accidental loss
Furthermore, affected businesses shall appoint a ?controller responsible for, and able to demonstrate, compliance with the principles.?

Implementing Accountability and Governance
The UK Information Commissioner?s Office has issued guidelines regarding provisions to assure governance and accountability. These are along the lines of the ?don’t tell me, show me? management approach the office has generally been following. In summary form, a business, and its controller must:
? Implement measures that assist it to ensure demonstrated compliance
? Maintain suitable, relevant records of personal data processing activities
? Appoint a dedicated data protection officer if scale makes this appropriate
? Implement technologies that ensure data protection by design
? Conduct data protection assessments and respond to results timeously

Implementing the General Data Protection Act in Ireland
The Irish Data Protection Commissioner has decided it is unnecessary to incorporate the GDPR into Irish law, since EU regulations have direct effect. The office of the Commissioner is working in tandem with data practitioners, and industry and professional bodies to raise awareness in business through 2017. It has produced a document detailing what it considers the essentials for business compliance. Briefly, these pre-requisites are:
? Ensure awareness among key personnel, and make sure they incorporate the GDPR into their planning
? Conduct an early assessment of quality management gaps, and budget for additional resources needed
? Do an audit of personal data held, to determine the origin, the necessity to hold it, and with whom shared
? Inform internal and external stakeholders of the current status, and your future plans to implement the GDPR
? Examine current procedures in the light of the new directive. Could you ?survive? a challenge from a data subject?
? Determine how you will process requests for access to the data in the future from within and outside your organization
? Assess how you currently obtain customer consent to store their data. Is this “freely given, specific, informed and unambiguous”?
? Find how you handle information from underage people. Do you have systems to verify ages and obtain guardian consent?
? Implement procedures to detect, investigate, and report data breaches to the Data Protection Commissioner within 72 hours
? Implement a culture of always assessing the effect on individual privacy before starting new initiatives

So Is the GDPR Good or Bad for Business
The GDPR should be good news for business customers. Their personal data will be more secure, and they should see their rate of spam marketing come down. The GDPR is also good news for businesses currently investing resources to protect their clients? interests. It could however, be bad news for businesses that have not been focussing on these matters. They may have a high mountain to climb to come in line with the GDPR.
Disclaimer: This article is for information only and not intended as a comprehensive guide.

Contact Us

(+353)(0)1-443-3807 (IRL)
(+44)(0)20-7193-9751 (UK)

Check our similar posts

Mobile Security

Today’s advanced enterprises make extensive use of mobile devices in order for team members to exchange information, collaborate, and carry out business whenever and wherever they need to. BlackBerries, iPhones, Google Phones, and other smartphones as well as PocketPCs and PDAs are now allowed wireless remote access to the enterprise network.

As a result, they introduce additional vulnerabilities into the system.

Bluetooth exploits and unencrypted passwords can allow malicious individuals to gain access to private information.
Various wireless technologies that have substantially simplified the task of transferring data have provided openings for malicious code. In addition, the diversity of these wireless technologies combined with the constrained environments of these devices have made it difficult to come up with an all-in-one solution.
All PocketPCs, PDAs and smartphones can be synchronised with PCs and laptops, giving malware an entry point into computers and networks. Memory cards are guilty of this too.
VoIP, which are usually unencrypted, allow other people to perform unauthorised capture and recording of private conversations.

Mobile security is still an emerging discipline. Because of this, many organisations that allow members’ mobile phone access into the network don’t actually have a specific security policy for such devices.

That’s why we’re here to help. We’ll conduct a thorough evaluation of your security policies and systems in relation to mobile devices and seal gaps we spot along the way. If you don’t have the needed policies or if what you have needs an overhaul, we’ll set everything up (including the needed applications and infrastructure) for you.

Once we’ve got everything in place, you won’t have to worry about the vulnerabilities mentioned earlier. In addition to that, your organisation will already be capable of preventing the following:

Access to company information when the phone ends up in the hands of anyone other than the authorised user.
Being billed for phone usage due to virus activity
Unauthorised phone activity monitoring through spyware
Other disruptions caused by mobile-based malware

Other defences we’re capable of putting up include:

2015 ESOS Guidelines Chapter 7, 8 & 9 – Sign-Off, Compliance & Appeals

This is the final chapter in our series of short posts summarising the quite complex ESOS guidelines (click on ?Comply with ESOS? to see the details). This one addresses the legalities to follow to complete your report – and how to appeal if you are not happy with any of the Environment Agency?s decisions.

Director Sign-Off

This is by no means an easy ride. Confirmation of the work at individual or lead assessor level locks the company into the penalty cycle in the event there are significant irregularities. By signing off the assessment, the board level director(s)^# agree that they have

Reviewed the enterprise?s ESOS recommendations
Believe the enterprise is within the scope of the scheme
Believe the enterprise is compliant with the scheme
Believe the information provided is correct

Having an internal assessor requires a second board-level signature.

Compliance

You report compliance on the internet. This is free and you can do it at any time within the deadline. You can dip in and out of the process as many times as you wish, but must use the link in the receipting email. While this is something a board member must do, there is no reason why the lead assessor should not complete the basics. The online compliance notification addresses the following topics:

The ESOS contact person in the enterprise
Any aggregation / dis-aggregation during the period
The names and contact details of the lead assessor
The proportion of energy consumption per compliance route

The Environment Agency will acknowledge receipt. This does not constitute acceptance. You should keep the ESOS evidence pack in a safe place with at least one backup elsewhere.

Compliance & Enforcement Issues

In the event the Environment Agency decides your enterprise has not met ESOS requirements, it may either (a) issue a compliance notice with instructions, or (b) apply one of the following civil penalties:

A fine of up to ?5,000 for failure to maintain records
A fine of up to ?50,000 for failure to undertake an energy audit
A fine of up to ?50,000 for a false or misleading statement

Any enterprise has the right of appeal against government decisions. In the case of ESOS, this is via:

The First-Tier Tribunal if your enterprise is England, Wales or off-shore based
The Scottish Minister if your enterprise is based in Scotland
The Planning Commission if your enterprise is Northern Ireland-based

The notice you appeal against will supply details of the appeal steps to take.

This blog and its companion chapters concerning the ESOS Guidelines as amended 2015 are with compliments of ecoVaro. We are the people who break ESOS data into manageable chunks of information, so that board-level directors have greater confidence in what they sign.

5 Ways To Grow Your Business | How Field Service Management Software Helps

Building up any business is already hard, more so when it involves providing field services.

A field service business owner has to manage the usual tasks, like scheduling jobs efficiently or inventory checks, and you have to do it while your employees are scattered about on various locations.

It’s the reason FieldElite was created, to provide companies with a much better way to manage and monitor their field workers.

Aside from effective management for your workforce on the move, field service management software can also help your business grow.

5 Ways Using Field Service Management Software Grows Your Business

1. Management Integration

You replace manual field service processes. If your business also uses other management apps, like CRM, payroll, industry-specific software, etc., make sure to integrate them with your chosen field service management software.?

Make those software work side-by-side with your field service management app to achieve streamlined business management.

Integration also removes the possibility of duplicate input on the regular system used and your field service management software, maximising your efficiency and business growth.

2. Improved Tracking

Utilising a field service management software gives you better tracking of every aspect of your field service business.

Track your inventory numbers in real-time ? know exactly how much stock is on hand for parts, and when it’s time to order more
Constant updates on Key Performance Indicators ? ensure your business is running smoothly
First-time fix rates tracking ? avoid wrong rate application
Monitor your technician?s performance ? ensuring quality work, in turn, profit.

Grow your business by having improved tracking on meaningful data and analytics produced from your field service management software.

3. Cost Cutting

Cutting costs can improve your bottom line and a lot of businesses turn to laying off technicians to cut costs. With a field service management software, there?s no need to go this route.

You cut costs through no manual processes needing to be completed. No need to hire back-office staff to field service calls or produce paperwork orders.

Your field service software should have all your automated needs met for efficient field job management.

An example of cost-cutting using field service app:

Track how much your technicians drive and find alternate routes for them to take.

Reduce gas expenses
Reduce repair bills for the truck
Finding better alternate routes can give more time to get to more jobs
Increased efficiency for the field technician

4.? Mobile Adaptability

Field service companies are focusing on mobility to grow their business. With a field service management software, technicians have on hand the tools and information needed to complete their job.

Field technicians can utilise the following field service software features:

Limit how much time they spend completing administrative work with the automated work-order management
Complete checklists on their mobile device and follow step-by-step instructions
Check service history
Close job orders/calls, collect signatures and start the invoice process

With a mobile app, technicians can complete a call faster, increasing the number of job order scheduled each day, giving additional revenue and that helps to grow your business.

5. Automation

What good is a field service management software without automated features??

Automation, in any industry, is an important factor in managing and growing your business.

Here are some examples of automation features and tools that your software needs in field service:

Create and convert quotations into work orders
Schedule/Reschedule jobs
Accept jobs in the field
Convert jobs into invoices
Preventative maintenance service
Customer updates
Automated job reports

Business Growth with your Field Service Management Software

Field service management software is growing businesses through automation, tracking and workflow management.

Your operation can run smarter and more efficiently, all while empowering your field technicians to do their job smoothly.

If you haven’t turned to a field service management software yet, you’re missing out on chances to grow your business.

Check out FieldElite to help grow your field service business today!