Transcript of the Video
Hello, ladies and gentlemen. Suzanne Dibble here, data protection law expert, coming to you raw and uncut. I'm very, very excited about our first implementation day tomorrow, where I'm going to take a hundred people through all of the documents that they need to put in place to work towards GDPR compliance. So I'll be looking at their privacy policies, their cookie policies, their processor agreements, whatever else they need to put into place, employer privacy notices as well. I'll be answering all of their questions and we'll all be working on it together.
I know it's hard to clear space in your diaries to make room for these things, so that's why we're coming together as a group to motivate and incentivize each other, and I'm going to be on hand all day to answer people's questions. So it's a new thing. We'll see how it works and if it's successful then we'll look into running more of them. But for those of you who are still asking, it is sold out now.
So, what I want to do a quick video on tonight is I had a good question today, which was about what date do you make your privacy notice effective from? I've seen big companies do it both ways. Some have said it's effective from the 25th of May, i.e. the date that the regulation comes into force, and others are effective immediately. So what's the position on that? Well, the answer is, there's nothing in GDPR that says you must have it coming into force on the 25th of May and it's really considerations for you, along with the lines of what I'm going to outline now.
Now, what is the downside of not having the privacy notice in place now? Well, if you are using ... If you need to get fresh consent from people and you're doing a re-engagement campaign like we've suggested in this group, then you're probably going to need to start doing that now so that you can get people re-engaged and opted in before the 25th of May, because obviously if you're relying on consent as a lawful ground of processing and you don't have a GDPR standard of consent post the 25th of May, then you'll have to stop that processing. So people are doing their re-engagement campaigns now, which are of course why we're all getting so many emails asking us to opt-in to different companies' emails, and marketing emails, and newsletters, etcetera.
So I'll leave you with that, and for those of you who are joining me on the implementation day tomorrow, can't wait to see you on that, bright-eyed and bushy-tailed, at 9:30 AM tomorrow. Until then, goodbye.