{"id":5162,"date":"2020-08-06T13:54:07","date_gmt":"2020-08-06T13:54:07","guid":{"rendered":"https:\/\/www.paperstone.co.uk\/News\/?p=5162"},"modified":"2020-08-06T13:54:08","modified_gmt":"2020-08-06T13:54:08","slug":"the-gdpr-applies-wherever-you-are-working","status":"publish","type":"post","link":"https:\/\/www.paperstone.co.uk\/News\/articles\/the-gdpr-applies-wherever-you-are-working","title":{"rendered":"The GDPR applies wherever you are working"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

The GDPR affects businesses of all sizes and every employee including remote workers. If you’re working from home or anywhere outside your office here’s how you can stay compliant.<\/h2>\n\n\n\n

The GDPR, or General Data Protection Regulation, which came into effect in May 2018, has drastically transformed the digital landscape. Chances are, it has also affected how your workplace secures paper data, handles cybersecurity, and protects user information.<\/p>\n\n\n\n

But when it comes to remote work, employees are left guessing. In fact, HRZone\u2019s 2020 report<\/a> on HR trends found that 57% of employers didn\u2019t have a formal remote work policy.<\/p>\n\n\n\n

So how does the GDPR apply to remote workers? Can you even remain compliant while working from home? This is what we\u2019ll answer in this short post.<\/p>\n\n\n\n

Does The GDPR Apply To Home Or Remote Work?<\/h4>\n\n\n\n

That\u2019s an easy one: the answer is a resounding yes. The risks of a data breach or losses are just as high at home as in the office, probably even more so if you don\u2019t have the right processes or equipment setup.<\/p>\n\n\n\n

This could have dramatic consequences for companies of all sizes, including lengthy legal proceedings and hefty fines. It is therefore in everyone\u2019s interest to create a remote work policy that goes into as many specifics as possible about how remote workers handle sensitive paper based data.<\/p>\n\n\n\n

What Should a Remote Work Policy Cover?<\/h4>\n\n\n\n

While every business will handle remote work policies differently, there are a few general guidelines to follow:<\/p>\n\n\n\n

\u2022 Who has permission to take paperwork home
\u2022 What kind of paperwork
\u2022 How it should be transported
\u2022 Who can print paperwork
\u2022 How to discard it
\u2022 How to report lost files or misplaced data
\u2022 What to do if you suspect a data breach<\/p>\n\n\n\n

How to Handle Home Encryption and Security<\/h4>\n\n\n\n

Here again, it\u2019s hard to come up with a one-size-fits-all policy, but generally, you\u2019ll want to ensure your Wifi network is secure, and that business digital files are properly encrypted. Elsewhere, common sense applies; you should lock your screen when not in use, use strong passwords, and 2FA (2-factor authentication) when possible.<\/p>\n\n\n\n

The IT department could also set up a device monitoring tool, to ensure no suspicious traffic is coming or going to the remote worker\u2019s computer. It\u2019s common practice to use a VPN, or Virtual Private Network, to ensure any communication or file transfer is under control.<\/p>\n\n\n\n

Having the Right Home Equipment<\/h4>\n\n\n\n

Going back to the HRZone report, one of the biggest complaints from home workers is that they lack the proper equipment. 40% or remote employees said they did not have the right tools.<\/p>\n\n\n\n

That equipment will include software and hardware as well as consumer electronics. Computers and laptops with the appropriate security tools for login, encrypted removable devices<\/a>, and even business machines to dispose of important information such as paper shredders<\/a>.<\/p>\n\n\n\n

Do You Really Need to Shred Documents?<\/h4>\n\n\n\n

Once again, the answer is yes. Many people assume the GDPR only covers digital data, while in fact it also has strict guidelines on how to deal with paper-based sensitive documents.<\/p>\n\n\n\n

It is highly recommended that you shred documents that have been removed from your workplace and taken home for business use. This also applies to any sensitive or confidential documents that you print yourself at home for business or personal reasons.<\/p>\n\n\n\n

This is where having the correct paper shredder can go a long way in helping you remain compliant. <\/p>\n\n\n\n

Generally speaking, you should ensure:<\/p>\n\n\n\n