Retailers risking damaging fines by ignoring implications of GDPR

by | May 31, 2017 | News | 0 comments

The majority of businesses in the retail sector are unaware of the new wide-ranging GDPR rules which come into force in less than a year?s time – despite 25% admitting the maximum fine for non-compliance would force them out of business and 10% saying it would lead to large scale redundancies.

According to a YouGov survey of 243 retail businesses, which was commissioned by national law firm Irwin Mitchell, only 26% admit to being aware of the new General Data Protection Regulation (GDPR) which comes into force on 25 May 2018.

GDPR represents the biggest change in 25 years to how businesses process personal information and it replaces existing data protection laws.

Under the new rules, the maximum fine for certain data breaches in the UK will rise from ?500,000 to ?20million or 4% of global turnover, whichever is larger.

78%?of retail firms are unaware of the new fines and 25% say they would go out of business if they received the maximum punishment. 10%?think they would need to make significant job cuts with a further a 13% admitting that smaller scale headcount reductions will be necessary.

Joanne Bone, partner and data protection expert at Irwin Mitchell said: ?These results are concerning because with next May?s deadline fast-approaching and with so much at stake, our study reveals there?s a very real possibility that a large number of retailers will not be compliant in time.?

The notification of certain data breaches where there is an impact on privacy, such as a customer database being hacked or a letter being put in the wrong envelope, must be given to the Regulator within 72 hours under the new regime.

However, Irwin Mitchell?s survey found that just 23% of retail businesses are certain that they would be able to detect a data breach within their organisation. Just 35% say they are confident they would notify the relevant stakeholders within the required timescale of three days.

Other changes under the GDPR include an obligation to be more transparent about how personal data is used. Businesses will also need to have processes in place in case an individual asks for all their personal data to be erased.

Irwin Mitchell believes the low level of awareness of GDPR is caused by a number of misconceptions that exist about the new rules and say this has led to a level of complacency.

This view is supported by 45% of respondents in the retail sector saying that GDPR will have no impact, claiming that GDPR is not an issue for their sector.

The reality is that the rules encompass a wide range of personal data including employee data, payroll and pension records. They also apply to data in a business context where individuals are concerned, such as sole traders and partnerships.

Irwin Mitchell?s Joanne Bone added: ?Contrary to popular belief personal data is not just consumer information. It is hard to think of a business today that does not use personal data. Whether you have employee data, customer data or supplier data ? if the data relates to an individual you will be caught by the new data protection laws.?

The survey revealed that only 13% of retail businesses view the new data protection rules as an opportunity and 21% said the rules will have a negative impact on their organisation.

Commenting on this finding, Stuart Padgham, partner and National Head of Commercial at Irwin Mitchell, said: ?Margins are tight in this sector and businesses rely on the right permissions to properly market their offers and discounts. It is important to recognise that taking a proactive approach towards GDPR compliance will potentially reap financial benefits.? Good data governance can build customer trust and the right permissions can also help businesses take advantage of the Big Data Revolution and enable them to commercialise their data for competitive advantage.?

Irwin Mitchell?s latest GDPR report can be downloaded from


more latest news ➡

Burgon & Ball wins four stars at RHS Chelsea Flower Show


Burgon & Ball, creator of beautiful garden tools since 1730, has won four stars from the Royal Horticultural Society for its stand at the RHS Chelsea Flower Show 2024. In its twenty-seventh year at the show, the Sheffield-based company has been honoured for the...

BOT shows catering performing well

Clothing and catering strong in April’s BoT figures

The Garden Centre Association’s (GCA) Barometer of Trade (BoT) for April is out and shows clothing and catering leading the way when compared to the same month last year. There was also a positive, 3.77%, year-to-date variance, but 10 of the 13 categories recorded...

Hozelock auto reel mobile

Hozelock unveils ground-breaking automatic hose system

The demands of modern gardening have evolved as consumers search for more convenient and efficient methods for an array of tasks, from planting and pruning to garden watering. This year, Hozelock has expanded its’ extensive hose storage offering with the launch of...

Squire's achieves peat free milestone

Squire’s achieves peat free milestone

Squire’s Garden Centres has confirmed that it no longer sells any bagged compost containing peat. The UK government proposed to ban the sale of bagged compost containing peat to home gardeners in England by the end of 2024. Although the ban is not yet in force,...

Horticultural manager wanted

Opportunity for horticultural manager

A garden centre in the Ipswich area is looking for a new horticultural manager to run the plant area. The new recruit will lead and develop a small team whilst enjoying the freedom to make decisions. Garden Centre Horticultural Manager £32 – 35,000 + Package &...

Read GCR's latest edition!

Subscribe ToThe Wednesday Word

Subscribe To
The Wednesday Word


Get all the latest news, events & more straight to your inbox every Wednesday.

You have Successfully Subscribed!

Pin It on Pinterest

Share This