General Data Protection Regulation

New data protection rules come into force next year. The EU is introducing the General Data Protection Regulation (GDPR) which will allow individuals greater control of their data now that businesses are collecting more personal information than ever. The Information Commissioner’s Office (ICO) has confirmed that all UK businesses will need to be compliant with the rules by 25 May 2018 despite the advance of Brexit. So where will the implementation of GDPR leave accountants? Here are five pointers for those who keep client data on file.

Controllers and processors

The new GDPR rules will apply to two groups: data controllers and data processors. The first comprise individuals or organisations that determine how and why personal information is processed. Accountants will fall into this category. Data processors are third parties with access to data held by data controllers. Under GDPR data processers are also legally required to...