The General Data Protection Regulation (“GDPR”) comes into law on 25th May 2018. In summary, this law means any business who processes European Economic Area (EEA) resident data will need to comply with the new regulations.
The products available from Loqate (a GBG company) process EEA resident data. As a UK based company, Loqate’s standard Terms and Conditions are governed by the law of England and Wales, which references the UK Data Protection Act 1998 (DPA). As the DPA will be superseded by GDPR, it is important we have agreed terms to reflect this change in regulation.
To help achieve GDPR compliance, there will be a variation to existing customer contracts to bring in the terms that will be required from 25th May 2018 (we’re calling this the Data Processing Addendum).
We are making the contract variation accessible via the Loqate account section.
Its vital to note that if customers want to continue to use product(s) from Loqate after 25th May 2018 they will need to accept the terms of the “Data Processing Addendum” and notify us of their “Lawful Processing Condition”. More information is located on the GBG website.
Without this in place, both customers and Loqate will not be able to meet their respective GDPR obligations, which are required by law.
The Data Processing Addendum we have drafted contains the standard clauses issued in the guidance by the Information Commissioner’s Office (IC0). Customers will need to ensure they’ve provided PCA Predict with documented processing instructions; this doesn’t form part of the Data Processing Addendum, so customers have plenty of time to action this if needed prior to 25th May 2018.
Customers must identify which lawful processing condition(s) they'll be relying upon to access PCA Predict products.
If the product customer use doesn’t process EEA resident data, there will be a further option to pick from: Not EEA data.
More information on GDPR
We want to assure all our customers that PCA Predict will be GDPR compliant by 25th May 2018, which means that our products and data will be too.
If GDPR is relevant to your business, there should someone within your organisation who is leading your GDPR plan, but in case it’s of interest, we have lots of information about our own GDPR plan, plus some helpful advice, on our GBG website.
If you have any questions, please speak with your Account Manager or email PCAGDPR@pcapredict.com.