GDPR and Sage

We have been asked by several customers recently about Sage’s position on GDPR and if there are any implications in respect of their Sage software.

Sage is actively working on its own internal GDPR strategy and has a project team who are mobilized and focusing on Sage’s strategy and implementation of GDPR, which is endorsed by the Sage Board.

Sage has always placed high importance on adhering to compliance laws and regulations and the introduction of the GDPR in May 2018 will be no different.

However, it is important to note – Sage customers will never be “GDPR compliant” by default –it is solely up to an individual business to ensure they are compliant in terms of their day to day activities. Indeed we here at Smith Cooper have been lots of work on our own business practices to ensure we are ready for the new legislation. Thus, the use of Sage products and services alone will not make a business GDPR compliant.  Similarly, Sage products will never be “GDPR compliant” by default, because the GDPR is about so much more than just software solutions.

There is lots of information available around GDPR, but a headline summary of the key facts around this legislation is as follows:

• The General Data Protection Regulation is the new European Union data protection law that is due to come into effect on May 25, 2018. It deals with how personal data is collected, processed, managed and shared.
• There are potential fines for non-compliance which can, in theory, go up to 4% of annual global turnover, or €20m, whichever is greater.
• The GDPR sets out the minimum requirements for the treatment of all personal data. Personal data can be defined as any data identifying or relating to an individual in most ways (including things like physical appearance or even biometric data).
• The GDPR goes far beyond existing data protection measures and affects businesses of all sizes–from sole traders up to the biggest corporations.
• Sage is actively working on its own internal GDPR strategy and has a project team who are mobilized and focusing on Sage’s strategy and implementation of GDPR, which is endorsed by the Sage Board.
• Sage has always placed high importance on adhering to compliance laws and regulations and the introduction of the GDPR in May 2018 will be no different.

For further information, download our GDPR guide here