GDPR: help or hindrance?

Paula Veysey Smith • 19 February 2018

GDPR – a help or a hindrance?

So, for the uninitiated, GDPR stands for General Data Protection Regulations. It’s basically the Data Protection Act (DPA) on speed!

The new regulations, from the European Parliament, will come into force on 25th May 2018, and when they say come into force, they mean come into force. Everyone who holds any personal data of any sort in any way will need to comply. Now, before we go all “what have the European’s done for us”, let’s consider the world we currently live in. Well publicised hacks of international mega-corporates show the importance of cyber security in todays world, but let’s not ‘Talk Talk’ about that now! I actually believe that ensuring personal data security is more important now than ever and although the introduction of this new legislation may mean we have a few more policies to write surely it’s worthwhile.

Over a series of articles, I will unpack what this legislation means for the small business and what we need to do to ensure that we are compliant.

The first, and I think most important point to make, is that many of the GDPR’s main concepts and principles are much the same as those currently under DPA, so if you are complying properly with the current law then most of your approach to compliance will remain valid under GDPR and that’s the starting block upon which we will build. Now, whether you are compliant under DPA is something you will need to assess but I’m going to aim my articles with a view that you are.

It is essential to plan your approach to GDPR compliance now – although the 25th May seems in the future it will come around quickly. You will need to gain a ‘buy in’ from key people in your organisation; for many of you this may only mean a conversation with yourself, something I do regularly (although I’m in two minds about that) or with your co-directors. You may need, for example, to put new procedures in place to deal with the GDPR’s new transparency and individuals’ rights provisions; we’ll come onto that later. The GDPR does place greater emphasis on the documentation that you must keep to demonstrate accountability. One important aspect of this is to review the contracts and other arrangements you have in place when sharing data with other organisations. For myself, I am relishing the moment I approach HMRC for a copy of their data compliance!

Some parts of the GDPR will have more of an impact on some organisations than on others (for example, the provisions relating to profiling or children’s data). So, if I can leave you with any homework now it would be to map out which parts of the GDPR will have the greatest impact on your business model, though please don’t send it in for marking!

Next week we will start looking at the twelve step process for GDPR nirvana – that’s what I’m going to call compliance from now on!!!

R is for Reward

by Paula Veysey-Smith • 8 July 2026
The finish line isn't just a destination. It's proof of everything you put in to get there. “Nothing feels so good as when you've succeeded at something you set out to do.” We made it. Seven letters, seven posts, and one very important journey. If you've been following this series from the beginning, you'll know that back in January we started with a goal — a triathlon in July. And as I write this, sitting in the garden with an iced coffee and a medal around my neck, I can tell you: it happened.  R is for Reward. And it might just be my favourite letter of the lot.

E is for Evaluate

by Paula Veysey-Smith • 8 July 2026
Setting a goal is just the beginning. What keeps it alive — and keeps you moving towards it — is what you do in between. “Evaluating what you're doing is so important. What worked, what didn't, what can I do better?” We're six letters into the SMARTER framework now. We've covered Specific, Measurable, Achievable, Relevant and Time-bound. Today we reach E for Evaluate — and I'll be honest with you, I think this might be the most important letter of the lot.

T is for Time-Bound

by Paula Veysey-Smith • 26 June 2026
A goal without a deadline is just a wish with good intentions. Here's why putting a date on it changes everything. “Having that end date is something that gives you the enthusiasm, the commitment, and the motivation to continue.” We're now on T in the SMARTER Goals series - and this one is beautifully simple. T stands for Time-Bound, or Targets. It means giving your goal an end date.

R is for Relevant

by Paula Veysey-Smith • 26 June 2026
Short-term goals are more powerful when they're built towards something bigger. Here’s why relevance is what keeps you going when motivation dips. “Goals that are shorter term in nature, but built to a bigger vision, are the most motivating that you can get” So far in this series we've looked at S for Specific, M for Measurable, and A for Achievable. Now we come to R for Relevant -- and this one is about making sure your goals are connected to something that genuinely matters to you.
More posts