Chichester Yacht Club Magazine April 2018 | Page 14

General Committee member Philip Brown
updates us on Personal Data Protection
issues for Club members under the new
Regulations
As we reported a couple of issues ago the Data
Protection law in the UK will undergo changes
which will come into force on May 25th 2018
with the incorporation of the General Data
Protection Regulations – GDPR – into UK law. The new rules require CYC to be very specific
about the legal basis on which it processes
As we said then it’s based on new EU
your data. For CYC this is technically
regulation and is in the main an update to
“contract”.
existing regulations, to which the club already
adheres. It is designed to cater for the new
So, it does stuff with your data which you might
world of extensive social media and global
expect it to do in order to handle, for example,
companies who hold massive amounts of our
your membership of the club or your entry into
personal data. However, it will affect just about an event at the club, such as a dinghy race, all
every organisation, big or small, which collects, of which can be regarded as forms of contract.
stores and uses personal informa tion, including Under the new rules the club is required to tell
CYC as it needs members’ personal
you exactly why it collects your personal
information in order to operate.
information and what it does with it, in a so-
called Privacy Notice which you will receive in
If you are like me you are probably receiving
May.
odd emails from all sorts of organisations of
which you are part, telling you that they are
But occasionally CYC will want to use some of
revising their practice on data protection or
the information collected (usually from non-
even asking you to tick boxes to give new
members) for purposes which might not be
consents on how your data is used.
what could reasonably be anticipated to
manage the “contract”.
You’ll be pleased to hear that the club will not
be bombarding you with new consent forms to Here, the legal basis for processing personal
sign but it will be giving you much more
information is “Consent”. For example, while
information about how it stores and uses your
the club might be expected to hold the data it
personal data.
collects from an entrant to an open meeting in
order to produce and publish its annual results,
it might not be expected to use some of that
same data because it wants to notify
participants about next year’s open
meetings in order to encourage repeat
applications.
To do this the club will have to ask for a
specific consent. The new rules mean that
we must offer “opt in” to these sorts of
actions, not just an “opt out”, and we have to
be very specific about why we want this data
and what we will do with it.
14