Emergency Contact Implementation of the EU General Data Protection Regulation Home Latest updates News Implementation of the EU General Data Protection Regulation 6 Mar 2018 Download Sign up for alerts The General Data Protection Regulation (GDPR) is set to come into force on 25 May 2018. This new regulation will have direct effect in the EEA/ EU and will change the way in which businesses and public sector organisations worldwide, handle the personal information of European Citizens. The new regulation will improve the rights of data subjects and introduce high penalties for non-compliance. All Clubs in the International Group have issued a circular concerning the GDPR, which can be found here . Members operating within the EU/EEA area and those outside the EU/EEA offering goods or services to individuals in that area, or who hold personal data within the EU/EEA, should familiarise themselves with the requirements of the new regulation. The Club recommends that affected Members undertake a review of their current procedures and action the following where necessary: Implement policies for Data Protection, Data Retention and Data Sharing; Implement procedures to allow data subjects to exercise their rights under the GDPR; Consider the appointment of a Data Protection Officer; Establish processes to provide data subjects with information about how their data is processed and their rights; Consider the legal basis upon which data is processed and stored, deleting any data where there is no legal basis for its use and storage. Enhanced security of communications with third parties (including other P&I clubs) where personal data is transferred. This is particularly relevant to the exchange of sensitive personal information including health and medical data; Establish additional checks to ensure that personal data is transferred to third countries only when permitted (e.g. when there is a legal basis or a separate agreement exists). The Club has undertaken a numb