{"id":428,"date":"2018-03-31T11:39:59","date_gmt":"2018-03-31T11:39:59","guid":{"rendered":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/"},"modified":"2018-03-31T11:39:59","modified_gmt":"2018-03-31T11:39:59","slug":"as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance","status":"publish","type":"post","link":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/","title":{"rendered":"As an SME business owner, how should you be addressing GDPR compliance?"},"content":{"rendered":"<p>\nGDPR requires a multi-disciplinary approach involving:  <\/p>\n<p>\nCulture is to be implemented and engrained in staff training and awareness <\/p>\n<p>\nProcesses should be implemented to ensure policies are adhered to <\/p>\n<p>\nLegal advice is necessary for the interpretation of developing laws <\/p>\n<p>\nTechnology should help to bring it all together and add a layer of security. <\/p>\n<p>While this may appear daunting at first sight, taking time to putting together a plan should enable you and your business tackle your compliance requirements:<\/p>\n<p>\n\u2022\tEvaluate your personal data entry \u2013 this could be via your website, by telephone calls, marketing or networking events, and then look where GDPR comes in <\/p>\n<p>\u2022\tUsing the information from above, you can then tackle the drafting of your business\u2019s  Privacy Notice <\/p>\n<p>\n\u2022\tPerform data mapping of all entities your business works with (legal, accountants, supply-chain, subcontractors, etc and then determine which processing grounds are applicable <\/p>\n<p>\n\u2022\tConsider your sub-contractors and assess their GPDR compliancy <\/p>\n<p>\n\u2022\tCompile a record of processing activities including what personal data you are processing, the purpose of the processing, which lawful basis are you seeking to rely on, etc? <\/p>\n<p>\n\u2022\tidentify the risks and then analyse the affect, evaluate control measures need to be implemented or adapted <\/p>\n<p>\n\u2022\tcarry out a data inventory as to where you keep the data <\/p>\n<p>\n\u2022\testablish who has access, consider role-based access, consider what devices and apps are used and whether the data is encrypted <\/p>\n<p>\n\u2022\ttake necessary management and security measures where necessary <\/p>\n<p>\n\u2022\timplement necessary controls <\/p>\n<p>\n\u2022\tkeep a document log of everything <\/p>\n<p>\n\u2022\tensure that there are processes for the rights of data subjects, such as access requests <\/p>\n<p>\n\u2022\tensure your website has an updated cookie policy in place <\/p>\n<p>\n\u2022\tconsider standards-based compliance such as ISO27001 <\/p>\n<p>Further guidance is available from the following links: <\/p>\n<p>Data protection &#8211; Why GDPR compliance is a requirement for SMEs:<br \/>\n<a href=\"http:\/\/www.smeweb.com\/2017\/07\/18\/data-protection-gdpr-smes\/\" target=\"_blank\" rel=\"noopener\">http:\/\/www.smeweb.com\/2017\/07\/18\/data-protection-gdpr-smes\/<\/a><\/p>\n<p>\nBest Practices Staying Compliant with the GDPR:<br \/>\n<a href=\"https:\/\/www.lepide.com\/blog\/staying-compliant-with-the-gdpr-best-practices\/\" target=\"_blank\" rel=\"noopener\">https:\/\/www.lepide.com\/blog\/staying-compliant-with-the-gdpr-best-practices\/<\/a><\/p>\n<p>\nAudit, review policies, train staff, implement new policies that are GDPR compliant. <a href=\"https:\/\/ico.org.uk\/for-organisations\/resources-and-support\/data-protection-self-assessment\/getting-ready-for-the-gdpr\/\" target=\"_blank\" rel=\"noopener\">https:\/\/ico.org.uk\/for-organisations\/resources-and-support\/data-protection-self-assessment\/getting-ready-for-the-gdpr\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>GDPR requires a multi-disciplinary approach involving: Culture is to be implemented and engrained in staff training and awareness Processes should be implemented to ensure policies are adhered to Legal advice is necessary for the interpretation of developing laws Technology should help to bring it all together and add a layer of security. While this may [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[10],"tags":[],"class_list":["post-428","post","type-post","status-publish","format-standard","hentry","category-blog"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>As an SME business owner, how should you be addressing GDPR compliance?<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"As an SME business owner, how should you be addressing GDPR compliance?\" \/>\n<meta property=\"og:description\" content=\"GDPR requires a multi-disciplinary approach involving: Culture is to be implemented and engrained in staff training and awareness Processes should be implemented to ensure policies are adhered to Legal advice is necessary for the interpretation of developing laws Technology should help to bring it all together and add a layer of security. While this may [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/\" \/>\n<meta property=\"og:site_name\" content=\"Three Graces Legal\" \/>\n<meta property=\"article:published_time\" content=\"2018-03-31T11:39:59+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@3GracesLegal\" \/>\n<meta name=\"twitter:site\" content=\"@3GracesLegal\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#\\\/schema\\\/person\\\/3b3ca8846a44fac333321a731ef72f67\"},\"headline\":\"As an SME business owner, how should you be addressing GDPR compliance?\",\"datePublished\":\"2018-03-31T11:39:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\\\/\"},\"wordCount\":344,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#organization\"},\"articleSection\":[\"Blog\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\\\/\",\"url\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\\\/\",\"name\":\"As an SME business owner, how should you be addressing GDPR compliance?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#website\"},\"datePublished\":\"2018-03-31T11:39:59+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"As an SME business owner, how should you be addressing GDPR compliance?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#website\",\"url\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/\",\"name\":\"Three Graces Legal\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#organization\",\"name\":\"Three Graces Legal\",\"url\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/logo.png\",\"contentUrl\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/logo.png\",\"width\":222,\"height\":140,\"caption\":\"Three Graces Legal\"},\"image\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/3GracesLegal\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/three-graces-legal\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#\\\/schema\\\/person\\\/3b3ca8846a44fac333321a731ef72f67\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/aecf3f750710d1d9193635e72597e6c31cecbceec1193c52121d09ce2c866a8b?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/aecf3f750710d1d9193635e72597e6c31cecbceec1193c52121d09ce2c866a8b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/aecf3f750710d1d9193635e72597e6c31cecbceec1193c52121d09ce2c866a8b?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\"],\"url\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"As an SME business owner, how should you be addressing GDPR compliance?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/","og_locale":"en_GB","og_type":"article","og_title":"As an SME business owner, how should you be addressing GDPR compliance?","og_description":"GDPR requires a multi-disciplinary approach involving: Culture is to be implemented and engrained in staff training and awareness Processes should be implemented to ensure policies are adhered to Legal advice is necessary for the interpretation of developing laws Technology should help to bring it all together and add a layer of security. While this may [&hellip;]","og_url":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/","og_site_name":"Three Graces Legal","article_published_time":"2018-03-31T11:39:59+00:00","author":"admin","twitter_card":"summary_large_image","twitter_creator":"@3GracesLegal","twitter_site":"@3GracesLegal","twitter_misc":{"Written by":"admin","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/#article","isPartOf":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/"},"author":{"name":"admin","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#\/schema\/person\/3b3ca8846a44fac333321a731ef72f67"},"headline":"As an SME business owner, how should you be addressing GDPR compliance?","datePublished":"2018-03-31T11:39:59+00:00","mainEntityOfPage":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/"},"wordCount":344,"commentCount":0,"publisher":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#organization"},"articleSection":["Blog"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/","url":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/","name":"As an SME business owner, how should you be addressing GDPR compliance?","isPartOf":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#website"},"datePublished":"2018-03-31T11:39:59+00:00","breadcrumb":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/as-an-sme-business-owner-how-should-you-be-addressing-gdpr-compliance\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/"},{"@type":"ListItem","position":2,"name":"As an SME business owner, how should you be addressing GDPR compliance?"}]},{"@type":"WebSite","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#website","url":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/","name":"Three Graces Legal","description":"","publisher":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#organization","name":"Three Graces Legal","url":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#\/schema\/logo\/image\/","url":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-content\/uploads\/2025\/11\/logo.png","contentUrl":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-content\/uploads\/2025\/11\/logo.png","width":222,"height":140,"caption":"Three Graces Legal"},"image":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/3GracesLegal","https:\/\/www.linkedin.com\/company\/three-graces-legal\/"]},{"@type":"Person","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#\/schema\/person\/3b3ca8846a44fac333321a731ef72f67","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/aecf3f750710d1d9193635e72597e6c31cecbceec1193c52121d09ce2c866a8b?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/aecf3f750710d1d9193635e72597e6c31cecbceec1193c52121d09ce2c866a8b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/aecf3f750710d1d9193635e72597e6c31cecbceec1193c52121d09ce2c866a8b?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/isquaredemo.com\/MLT\/threegraceslegal"],"url":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/posts\/428","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/comments?post=428"}],"version-history":[{"count":0,"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/posts\/428\/revisions"}],"wp:attachment":[{"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/media?parent=428"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/categories?post=428"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/tags?post=428"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}