What GDPR Means for Your Physical Records

The General Data Protection Regulation (GDPR) applies to all records, including paper documents. The GDPR requires companies to notify authorities and customers of any data breach, and the penalties for non-compliance can be severe. To secure paper documents, companies must be transparent about the information they collect and provide ways for people to opt out or delete their personal information. People have the right to know what information companies have collected about them and what they are doing with it. Businesses must be able to find personal data quickly and establish an efficient document tracking system. They must also manage records retention and erasure, and train employees on how to handle personal information securely. Finally, companies should be mindful of printers, which can be a gateway for cybercriminals to steal information, and develop a security protocol that fits their organization's needs.