The purposes of this guidance document, produced by the UK Chamber of Shipping with Hill Dickinson LLP, are:
-
to summarise the key points of the General Data Protection Regulation (GDPR);
-
to identify the main areas where shipping companies will be affected by it; and
-
to advise companies on the most effective and efficient ways to familiarise themselves with the new rules and then to determine how to best implement them.
The document defines GDPR terminology and lists the types and sources of personal data and how it should be processed. It also describes the role and responsibilities of the Data Controller and the Company Data Protection Officer.
Guidance is also provided on the strict provisions relating to transfer of personal data to ‘third countries’ and those outside the EU. This is particularly relevant in the offshore industry where crew are transferred from one site to another and to and from a multitude of jurisdictions where their personal data will follow.
Finally, the publication sets out an ‘Action Plan for Companies’, describing suggested stages for a company to implement GDPR and verify compliance.
Introduction
Summary of the GDPR
Key definitions
Key articles
Lawfulness
Consent
The right to Erasure
Data Subject’s right to information
Company Data Protection Officer (DPO)
Issues specific to the shipping sector
Implementation and familiarisation – How to achieve compliance
Action plan for companies
Phase 1: Awareness, information audit and risk assessment
Phase 2: Make decisions
Phase 3: Develop policies, procedures and documents
Phase 4: Review security
Phase 5: Training and governance
Further Contact
ANNEX 1
General Data Protection Regulation
The purposes of this guidance document, issued by the UK Chamber of Shipping with Hill Dickinson LLP, are:
-
to summarise the key points of the General Data Protection Regulation (GDPR);
-
to identify the main areas where shipping companies will be affected by it; and
-
to advise companies on the most effective and efficient ways to familiarise themselves with the new rules and then to determine how to best implement them.
This document is for guidance only and companies are advised to obtain their own legal advice on compliance with the GDPR.
This document focuses specifically on the maritime sector and the key areas for implementation, such as crewing issues and seafarer payments. It seeks to give a simplified explanation of the GDPR and of how companies can identify what further measures, if any, they should take to implement data protection policies that comply with the GDPR.
The UK Chamber of Shipping is the trade association and voice of the UK shipping industry. We work with Government, parliament, international organisations and others to champion and protect the industry on behalf of our members.
It is our mission to deliver for our members trusted specialist expertise, lobbying and influence at a UK level on maritime issues across national, European and international government and governmental bodies. By combining the strength of our members with this expertise we will advance the competitive strength of the industry ensuring that the UK remains as a leader in the global maritime business.
With a growing membership of 180 member companies throughout the UK, made up of shipowners, professional organisations and service companies, we do not just seek to raise awareness of shipping; we work to create an understanding of it, ensuring that member companies’ commercial objectives are at the heart of the government process.
The UK is a global centre for maritime business and our location here, in a stable and business orientated democracy, provides unique access to a range of international bodies and influencers at a global level.
Title: The General Data Protection Regulation Guidance to Shipping Companies
Number of Pages: 17
Product Code: WS1636K
ISBN: ISBN 13: 978-1-85609-783-3 (9781856097833), ISBN 10: 1-85609-783-8 (1856097838)
Published Date: July 2018
Binding Format: Paperback
Weight: 0.80 kg
Author: UK Chamber of Shipping
| 