From May 2018 there are going be some important changes to how we access audience data and what we do with it.
This change is called the General Data Protection Regulation (GDPR) and will come into force on 25 May 2018. If you are collecting personal data from your audiences either through online ticketing, or audience feedback forms, this affects you. Non compliance wth these regulations can result in hefty fines (up to 4% of an organisation’s annual turnover).
GDPR places more responsibility on data controllers (i.e. people who collect and hold data) to look after and protect people’s personal data.
These new regulations incorporate some of the legislation already in place through the Data Protection Act which has been in place since 1998, but there are some important things to consider when you are preparing for these changes.
Individuals rights are becoming more robust, and organisations rights are becoming more demanding. There are essentially 8 rights you must ensure your data complies with
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights related to automated decision making and profiling
For more information on what this means read this articles on the Culture Republic website – it gives an informative overview of the new requirements; https://www.culturerepublic.co.uk/blog/news-&-resources/whats-coming-new-general-data-protection-regulation-gdpr/