< Back to latest news & events

Retail Scanner

GDPR is here!

June 2018

Have you made the necessary changes? In case you have been living under a rock (from a data protection point of view) for the last two years (or two weeks in some cases!), the most significant changes to the rules that govern the handling of personal data took effect on 25th May.

All retailers are only ever a step away from customers’ personal data and the impact these regulations have on the way personal data can be used, makes this subject relevant across the sector. While there has been some hype around huge new fines, no longer being able to use personal data the way you wish, or having to obtain consent for everything, most organisations have taken a pragmatic approach to these changes using them as an opportunity to get its ‘house’ in order and fully understand where and how personal data is stored and used. In many cases, those who have struggled to come to terms with the changes were not complying with the pre-existing regime in any event.

To be confident around compliance, organisations should first take time to understand what personal data they use, how it flows into, around, and out of the organisation, what it does with it and the lawful basis on which it is processed i.e. why is it justified in using it? (consent is one of six grounds). It will then need to check that any personal data is handled in line with the data protection principles, and in accordance with data subjects’ (identifiable living persons) rights. In large organisations, or where processing is large scale, of certain categories or potentially risky this understanding and analysis should all be documented in order to demonstrate compliance.

Alongside this shift in thinking around use of personal data and how it is documented, organisations should look at updating internal and external policies and consent procedures, so that they adequately reflect and, (importantly) clearly communicate how personal data is used. Relevant changes may include notifying data subjects of their updated rights under the GDPR, and advising them of the personal data obtained, together with what is being done with it and the lawful basis, it is being used for. Other updated duties around data breach reporting, the appointment of a Data Protection Officer and the use of Privacy Risk Assessments may also need to be factored in.

Having a complaint made against an organisation (not forgetting the associated impact on brand and customer confidence) continues to be a key risk in this area, and the Information Commissioner will have greater powers under GDPR including enhanced ability to investigate and levy fines. How the Information Commissioner and other European data protection authorities wield these increased powers over the next few months will certainly be of interest and may also prompt those who are behind in compliance to get up to speed.

Latest updates

HGF Ranked #1 in the UK for Trade Mark Portfolios in the 2025 Trade Mark Filing Trends Report by Clarivate.

HGF has achieved the #1 ranking for the UK for trade mark portfolios in the newly released 2025 Trade mark Filing Trends report by Clarivate, recognising the firm as a …

Read article

The EPO Board of Appeal comments on the scope of the morality exclusion from patentability

The recent decision, T1553/22 of the Board of Appeal required the Board to consider the scope of the exclusions from patentability under Article 53(a) EPC. The invention in this case …

Read article

IP Ingredients: Summer Case Law Review 2025

As the British summer swings once again between sunburn and showers, it’s a great time to take stock of what the first half of the year has delivered by way …

Read article

Celebrating exam success at HGF!

We are once again delighted to share that our colleagues have achieved success in their recent exams! Their dedication, perseverance, and commitment to professional development have paid off, and we …

Read article

Is the Supreme Court denial in Thatcher’s case a fatal blow against lookalikes?

The dispute between Thatcher’s Cider Company and Aldi Stores Limited has been long running and has sparked legal controversy along the way. On 4th June 2025 the Supreme denied Aldi …

Read article

HGF ranked among Europe’s top patent firms in IP STARS Patent Rankings 2025

HGF has once again made a bold mark in the latest Managing IP Stars 2025 firm rankings, with top-tier recognition across multiple jurisdictions for our patent expertise. This year’s results …

Read article

The Enlarged Board of Appeal has today issued its decision in seminal case G1/24

G1/24, described as one of the most important cases in decades, relates to how claims of patents are to be interpreted by the Boards of Appeal and, by extension, all …

Read article