You can be fined up to 4% of revenue capped at 20 million euro e.g. If your Clinic’s turnover is £500,000 you could pay a ?ne of over £20,000.

There are two core parties responsible for data protection with GDPR: the “data controller” and then the “data processor”. As a clinic, you are the controller. You collect the data and choose how that data is collected and how to use that data for styles, colours, treatments, marketing, offers, promotions, emails, sms texts, etc. In other words, you are making decisions on how your clients’ personal data should be collected and used.

SoftwareProvider.ai is a processor, as it is a tool that can help you do this. This is the perfect example of why you need a GDPR-compliant Software: If you are using pen and paper and an online email tool for example, it will be virtually impossible to provide all of the data above.

After four years of preparation and debate the GDPR was finally approved by the EU Parliament on 14 April 2016. Enforcement date: 25 May 2018. The regulations will be put in place regardless of Brexit negotiations, and we are aware of the huge effect this will have on SoftwareProvider.ai as a software, as a SAAS provider, and on our customers.

We started investigating the new regulations in July 2017, and have been actively working with our team and advisors to gain a full understanding of the implications, and create a number of action plan for what we will be doing to ensure we are compliant 100% with GDPR, pre 25th of May. We will also offer as much support as possible to our customers in providing their own GDPR (General Data Protection Regulation) compliance.

Please note that we will advise our customers where possible, provide tools, where possible, to enable GDPR compliance to our customers, our role as the data processors is standalone, meaning the data controllers (software users) will need to manage their own internal investigations in line with GDPR, as to ensure their compliance with European Commission rules and regulations.

Union, and the European Commission intend to strengthen and unify data protection for all individuals within the European Union (EU). It also addresses the export of personal data outside the EU.

The GDPR aims primarily to give control back to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.[1] When the GDPR takes effect, it will replace the 1995 Data Protection Directive (Directive 95/46/EC).