NFDA working with dealers towards GDPR compliance

“With the approaching deadline of 25 May 2018 for all organisations to comply with the new General Data Protection Regulation, NFDA has been working very closely with dealers to assist them in meeting the challenge of compliance. However, it is concerning to see that many organisations are still ‘unprepared’ for GDPR”, said Sue Robinson, Director of the National Franchised Dealers Association (NFDA) which represents franchised car and commercial vehicle dealers in the UK.

As reported by The Times, a survey of almost 900 members of the Institute of Directors shows that 30 per cent have not even heard of the General Data Protection Regulation. The regulations apply to all organisations that control and process personal data. Failure to comply with GDPR can result in fines of up to €20 million or 4% of annual turnover for the most serious contraventions. To support its members, NFDA has already held three very successful workshops which saw a total of over 500 attendees engaging in the GDPR debate with NFDA legal partners. A fourth workshop is now lined up for 1 December.

Some of the crucial steps that must be part of organisations’ strategy for compliance include:

• Carrying out a data mapping exercise to understand how their personal data are being collected and used
• Reviewing contracts which include data processes and data sharing with third parties
• Reviewing cases where personal data is processed based on the "consent" of the individual
• Ensuring current privacy notices have mandatory information required under GDPR
• Appointing a Data Protection Officer (DPO) where necessary
• Ensuring that language used in privacy notices is clear, concise and easy to understand and that contractual provisions clearly set out the rights and obligations of both parties.

Robinson continued, “Preparing for GDPR compliance requires significant time and resources and having in place a successful GDPR implementation programme must be a critical priority for dealers to ensure that they can continue to use and share data.

“To ensure a co-ordinated industry approach, we have also contacted manufacturers and finance houses to request what steps they are taking.

“Once again, we urge NFDA dealer members to take GDPR very seriously and contact us if they need any further guidance on the issue.”