Data Protection

Under the EU General Data Protection Regulation any SMEs that process or store personal data belonging to those resident within the EU or European Economic Area are required to ensure that appropriate security controls are in place to protect that data. This includes ensuring that any third parties working on behalf of the SME have appropriate security measures in place. The Irish Data Protection Commission provides a guide on the security measures expected to be in place.