Hi all, first post here, so I'm hoping I don't come off *too* clueless.
I'm a computer visual effects contractor, operating as a limited company. My contracts invariably take the form of subcontracting for larger visual effects studios.
Until fairly recently I hadn't even heard about GDPR, and until very recently I just assumed that since my work never involves handling any form of personal data, it wouldn't apply to me any more than previous data protection laws.
But I've heard from a couple of different acquaintances now, that simply communicating by email with individuals working at my clients' offices could constitute personally identifiable data. Aside from those persons' first and last names, I have never been privy to any other personal data.
Can anyone advise on what measures, if any, would be best to take? I really would rather avoid throwing money at a specialist unnecessarily, and if necessary, I'd like to keep any potential costs down if I can manage it. I'm somewhat concerned that if I go directly to a specialist, I could end up being "upsold" services that would be overkill for my situation.
Alternately, I might be massively underestimating the situation. Any advice would be most appreciated.
I'm a computer visual effects contractor, operating as a limited company. My contracts invariably take the form of subcontracting for larger visual effects studios.
Until fairly recently I hadn't even heard about GDPR, and until very recently I just assumed that since my work never involves handling any form of personal data, it wouldn't apply to me any more than previous data protection laws.
But I've heard from a couple of different acquaintances now, that simply communicating by email with individuals working at my clients' offices could constitute personally identifiable data. Aside from those persons' first and last names, I have never been privy to any other personal data.
Can anyone advise on what measures, if any, would be best to take? I really would rather avoid throwing money at a specialist unnecessarily, and if necessary, I'd like to keep any potential costs down if I can manage it. I'm somewhat concerned that if I go directly to a specialist, I could end up being "upsold" services that would be overkill for my situation.
Alternately, I might be massively underestimating the situation. Any advice would be most appreciated.
Comment