Introduction
On the 25 May 2018, the new General Data Protection Regulation (GDPR) came into force across the UK. These regulation enhance and change commitments to handling personal data set out in the Data Protection Act (1998), strengthening and unifying data protection for all individuals.
GDPR applies to organisations that take personal data from its customers or members, for example via manual or electronic based formats e.g. member forms, online platforms or provider website.
It relates to how the provider not only obtains personal information but how it then stores and uses this data.
The British Shuai Jiao Union (BSJU) is committed to helping providers and members alike to ensure that they become and remain GDPR compliant.
The BSJU guidance is aimed at providers and is based on Information Commissioner’s Office (ICO) guidelines and standards for meeting GDPR compliance.
How does GDPR apply?
GDPR applies to organisations that take personal data from its customers or members, for example
via manual or electronic based formats e.g. member forms, online platforms or club website. It
relates to how the club not only obtains personal information but how it then stores and uses this
data. All providers need to ensure that when dealing with personal data:
- They process it securely
- It is updated regularly and accurately
- It is limited to what the provider needs
- It is used only for the purpose for which it is collected
- It is only used for marketing purposes if the individual has given the provider consent to do so.
The principles of data protection set out within the existing Data Protection Act still exists and
therefore, if you are compliant with this, it is likely you will only have a few changes to make to fall in
line with the new GDPR regulation.
What is Personal Data?
Personal data can be defined as any information relating to:
- A person
- The data subject, who can be directly or indirectly identified by the use of that data; for
example, by their name, ID number, or online identifier such as an email address.
Sensitive personal data can be defined as:
- Any information consisting of racial or ethnic origin
- Political opinions
- Religious or philosophical beliefs
- Trade union membership
- Genetic data, biometric data
- Data concerning health
- Data concerning a natural person’s sex life or sexual orientation.
GDPR relates to members who are participants at your provider, coaches, referees, volunteers, parents and any individual that you request personal data from, or hold data on.
Support and Guidance
The Information Commissioner’s Office (ICO) website provides important information and further clarity on GDPR which we advise all service providers to read. Please visit
https://www.ico.org.uk/for-organisations.
- ICO Helpline on 0303 123 1113, and select Option 4 under the list of options
- BSJU Data Protection Officer.