As an employer do I have to comply with the new General Data Protection Regulation? If yes, how can this be accomplished?

The General Data Protection Regulation (“GDPR”), which comes into force on 25 May 2018, imposes strict accountability obligations on data controllers and data processors to:

• ensure that data, and data consents, collected prior to 25 May 2018 is brought into line with the new requirements;

• maintain certain compliance documentation; and

• conduct data protection impact assessments where a project could have data protection or privacy implications.

The GDPR imposes direct obligations on data controllers and data processors to demonstrate their compliance with the GDPR and notify the relevant regulatory body, and potentially the data subjects, of a personal data breach without undue delay