{"id":27929,"date":"2017-05-08T10:44:03","date_gmt":"2017-05-08T09:44:03","guid":{"rendered":"https:\/\/www.clearbooks.co.uk\/blog\/?p=27929"},"modified":"2017-05-08T10:47:13","modified_gmt":"2017-05-08T09:47:13","slug":"comply-data-protection-small-business","status":"publish","type":"post","link":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/","title":{"rendered":"How to Comply with Data Protection as a Small Business"},"content":{"rendered":"

No one would argue that data protection is important \u2014 the Yahoo breaches<\/a>, among many others, show just how serious the consequences can be for a business. But when it comes down to it, it can seem like data protection is one of those things that only bigger businesses need to worry about. After all, you\u2019re not keeping massive databases of customer data, or holding anything that would leave you liable for data protection violations, right?<\/p>\n

Actually \u2026 probably wrong.<\/strong><\/p>\n

It\u2019s almost certain that you\u2019re holding some type of data that you need to protect to be in compliance with the Data Protection Act. Unless you never use a computer in your small business, are only collecting information for private use, like a private address book, or are an exempt non-profit, you are likely to have to comply with the Data Protection Act.<\/p>\n

 <\/p>\n

OK, that sounds like a big deal. What does it actually mean?<\/h3>\n

It is important \u2014 breaches of the Data Protection Act are punishable by fines of up to \u00a3500,000. But it\u2019s not that difficult to keep your business in compliance. The first thing you need to do is figure out whether you need to register with the Information Commissioner\u2019s Office. They have a self-assessment here<\/a> that can help you determine whether you need to register or not. You can then register with the ICO as a data controller.<\/p>\n

What do you need to do as a data controller to protect customers\u2019 data?<\/p>\n

There are lots of specifics on the ICO\u2019s site, but these are the broad strokes you can take to avoid a data breach:<\/p>\n

 <\/p>\n

\u2014 Basic computer security.<\/strong><\/p>\n

This includes things like making sure you have firewalls and virus scanning software, and anti-spyware programmes on your computers, and keeping them up to date. You should also make sure that your computers are set to update themselves to the latest operating systems automatically to avoid leaving them open to vulnerabilities that have been fixed in newer versions.<\/p>\n

Along the same lines, consider encrypting personal information, and keep backups of everything so you don\u2019t lose the data in case a breach does happen. Change your passwords regularly, and don\u2019t let staff share passwords.<\/p>\n

Of course, computer security also includes being aware of how email is used in your organisation. Depending on the type of data you\u2019re sending, you may want to have an encryption key on your email. And \u2014 although it sounds like common sense \u2014 do be careful with things like sending emails to the wrong person and avoiding sharing sensitive information on group emails.<\/p>\n

 <\/p>\n

\u2014 Premises security.<\/strong><\/p>\n

The best computer security measures in the world are useless if you have issues with physical security at your business. Make sure that you have up to date locks and alarms at your premises, and consider using a CCTV system. (Although that will be another source of data that you\u2019ll need to protect as a data controller.)<\/p>\n

Also consider ways that you can protect the data you collect by the positioning of your computers. For instance, you may want to face computer screens away from windows where people could look in and see confidential data; or if you have a CCTV monitor running, you could move it so that only security staff can see it.<\/p>\n

Finally, make sure you\u2019re secure when you dispose of waste. A lot of times data isn\u2019t stolen electronically; it\u2019s taken from old hard drives or papers that have been dumped in the trash. There are services that will securely dispose of old equipment, and it doesn\u2019t take a lot of effort to shred any documents that have data on them.<\/p>\n

 <\/p>\n

\u2014 Training your staff.<\/strong><\/p>\n

It makes sense that you should train your staff to follow the security protocols you put in place for the security of your computers and premises, but you should also make sure that they can recognise other potential data risks.<\/p>\n

One common way that data breaches happen is through social engineering, which is manipulating people into revealing data or ways to get at data. This is why it\u2019s really important to train your staff to be able to recognise situations in which a person may be trying to use them to get data.<\/p>\n

Finally, make sure your staff know what kind of information they need to be collecting and how to manage it appropriately. Consider creating a checklist for your business with the type of information your staff need to collect, in what circumstances they can share it, and what they should do if someone is asking them to share information that they can\u2019t legally share. This is a good place to start.<\/a><\/p>\n

 <\/p>\n

The long and the short of it is\u2026<\/h3>\n

A lot of data protection comes down to common sense. But it\u2019s also one of those things that tends to slip down your priority list until a breach happens and it becomes a huge issue. With a little preparation, you can easily create policies and practices to keep your customers\u2019 data safe \u2014 and your business compliant.<\/p>\n","protected":false},"excerpt":{"rendered":"

No one would argue that data protection is important \u2014 the Yahoo breaches, among many others, show just how serious the consequences can be for a business. But when it comes down to it, it can seem like data protection […]<\/p>\n","protected":false},"author":145,"featured_media":27933,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-27929","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"yoast_head":"\nHow to Comply with Data Protection as a Small Business | Clear Books<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Comply with Data Protection as a Small Business | Clear Books\" \/>\n<meta property=\"og:description\" content=\"No one would argue that data protection is important \u2014 the Yahoo breaches, among many others, show just how serious the consequences can be for a business. But when it comes down to it, it can seem like data protection […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/\" \/>\n<meta property=\"og:site_name\" content=\"Clear Books\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/clearbooks\/\" \/>\n<meta property=\"article:published_time\" content=\"2017-05-08T09:44:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2017-05-08T09:47:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/05\/data.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1500\" \/>\n\t<meta property=\"og:image:height\" content=\"828\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"David Carr\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ClearBooks\" \/>\n<meta name=\"twitter:site\" content=\"@ClearBooks\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Carr\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/\"},\"author\":{\"name\":\"David Carr\",\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/#\/schema\/person\/5fa6f40060d196b7177b75079fb4a3b2\"},\"headline\":\"How to Comply with Data Protection as a Small Business\",\"datePublished\":\"2017-05-08T09:44:03+00:00\",\"dateModified\":\"2017-05-08T09:47:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/\"},\"wordCount\":862,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/05\/data.jpg\",\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/\",\"url\":\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/\",\"name\":\"How to Comply with Data Protection as a Small Business | Clear Books\",\"isPartOf\":{\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/05\/data.jpg\",\"datePublished\":\"2017-05-08T09:44:03+00:00\",\"dateModified\":\"2017-05-08T09:47:13+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#primaryimage\",\"url\":\"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/05\/data.jpg\",\"contentUrl\":\"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/05\/data.jpg\",\"width\":1500,\"height\":828},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.clearbooks.co.uk\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Comply with Data Protection as a Small Business\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/#website\",\"url\":\"https:\/\/www.clearbooks.co.uk\/blog\/\",\"name\":\"Clear Books\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.clearbooks.co.uk\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/#organization\",\"name\":\"Clear Books\",\"url\":\"https:\/\/www.clearbooks.co.uk\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/06\/clear-books-plc-icon-rgb-1.png\",\"contentUrl\":\"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/06\/clear-books-plc-icon-rgb-1.png\",\"width\":400,\"height\":400,\"caption\":\"Clear Books\"},\"image\":{\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/clearbooks\/\",\"https:\/\/x.com\/ClearBooks\",\"https:\/\/www.linkedin.com\/company\/clear-books\",\"https:\/\/www.youtube.com\/user\/ClearBooksVideos\",\"https:\/\/en.wikipedia.org\/wiki\/Clear_Books\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/#\/schema\/person\/5fa6f40060d196b7177b75079fb4a3b2\",\"name\":\"David Carr\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.clearbooks.co.uk\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/69d8259a789425fdfff25c9ee1753a1cd0e9097e39923131700f863a2a0b2933?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/69d8259a789425fdfff25c9ee1753a1cd0e9097e39923131700f863a2a0b2933?s=96&d=mm&r=g\",\"caption\":\"David Carr\"},\"url\":\"https:\/\/www.clearbooks.co.uk\/blog\/author\/david\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Comply with Data Protection as a Small Business | Clear Books","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/","og_locale":"en_GB","og_type":"article","og_title":"How to Comply with Data Protection as a Small Business | Clear Books","og_description":"No one would argue that data protection is important \u2014 the Yahoo breaches, among many others, show just how serious the consequences can be for a business. But when it comes down to it, it can seem like data protection […]","og_url":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/","og_site_name":"Clear Books","article_publisher":"https:\/\/www.facebook.com\/clearbooks\/","article_published_time":"2017-05-08T09:44:03+00:00","article_modified_time":"2017-05-08T09:47:13+00:00","og_image":[{"width":1500,"height":828,"url":"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/05\/data.jpg","type":"image\/jpeg"}],"author":"David Carr","twitter_card":"summary_large_image","twitter_creator":"@ClearBooks","twitter_site":"@ClearBooks","twitter_misc":{"Written by":"David Carr","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#article","isPartOf":{"@id":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/"},"author":{"name":"David Carr","@id":"https:\/\/www.clearbooks.co.uk\/blog\/#\/schema\/person\/5fa6f40060d196b7177b75079fb4a3b2"},"headline":"How to Comply with Data Protection as a Small Business","datePublished":"2017-05-08T09:44:03+00:00","dateModified":"2017-05-08T09:47:13+00:00","mainEntityOfPage":{"@id":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/"},"wordCount":862,"commentCount":0,"publisher":{"@id":"https:\/\/www.clearbooks.co.uk\/blog\/#organization"},"image":{"@id":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#primaryimage"},"thumbnailUrl":"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/05\/data.jpg","inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/","url":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/","name":"How to Comply with Data Protection as a Small Business | Clear Books","isPartOf":{"@id":"https:\/\/www.clearbooks.co.uk\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#primaryimage"},"image":{"@id":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#primaryimage"},"thumbnailUrl":"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/05\/data.jpg","datePublished":"2017-05-08T09:44:03+00:00","dateModified":"2017-05-08T09:47:13+00:00","breadcrumb":{"@id":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#primaryimage","url":"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/05\/data.jpg","contentUrl":"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/05\/data.jpg","width":1500,"height":828},{"@type":"BreadcrumbList","@id":"https:\/\/www.clearbooks.co.uk\/blog\/comply-data-protection-small-business\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.clearbooks.co.uk\/blog\/"},{"@type":"ListItem","position":2,"name":"How to Comply with Data Protection as a Small Business"}]},{"@type":"WebSite","@id":"https:\/\/www.clearbooks.co.uk\/blog\/#website","url":"https:\/\/www.clearbooks.co.uk\/blog\/","name":"Clear Books","description":"","publisher":{"@id":"https:\/\/www.clearbooks.co.uk\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.clearbooks.co.uk\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.clearbooks.co.uk\/blog\/#organization","name":"Clear Books","url":"https:\/\/www.clearbooks.co.uk\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.clearbooks.co.uk\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/06\/clear-books-plc-icon-rgb-1.png","contentUrl":"https:\/\/www.clearbooks.co.uk\/blog\/wp-content\/uploads\/2017\/06\/clear-books-plc-icon-rgb-1.png","width":400,"height":400,"caption":"Clear Books"},"image":{"@id":"https:\/\/www.clearbooks.co.uk\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/clearbooks\/","https:\/\/x.com\/ClearBooks","https:\/\/www.linkedin.com\/company\/clear-books","https:\/\/www.youtube.com\/user\/ClearBooksVideos","https:\/\/en.wikipedia.org\/wiki\/Clear_Books"]},{"@type":"Person","@id":"https:\/\/www.clearbooks.co.uk\/blog\/#\/schema\/person\/5fa6f40060d196b7177b75079fb4a3b2","name":"David Carr","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.clearbooks.co.uk\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/69d8259a789425fdfff25c9ee1753a1cd0e9097e39923131700f863a2a0b2933?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/69d8259a789425fdfff25c9ee1753a1cd0e9097e39923131700f863a2a0b2933?s=96&d=mm&r=g","caption":"David Carr"},"url":"https:\/\/www.clearbooks.co.uk\/blog\/author\/david\/"}]}},"_links":{"self":[{"href":"https:\/\/www.clearbooks.co.uk\/blog\/wp-json\/wp\/v2\/posts\/27929","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.clearbooks.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.clearbooks.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.clearbooks.co.uk\/blog\/wp-json\/wp\/v2\/users\/145"}],"replies":[{"embeddable":true,"href":"https:\/\/www.clearbooks.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=27929"}],"version-history":[{"count":5,"href":"https:\/\/www.clearbooks.co.uk\/blog\/wp-json\/wp\/v2\/posts\/27929\/revisions"}],"predecessor-version":[{"id":27935,"href":"https:\/\/www.clearbooks.co.uk\/blog\/wp-json\/wp\/v2\/posts\/27929\/revisions\/27935"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.clearbooks.co.uk\/blog\/wp-json\/wp\/v2\/media\/27933"}],"wp:attachment":[{"href":"https:\/\/www.clearbooks.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=27929"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.clearbooks.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=27929"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.clearbooks.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=27929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}