GDPR for Small and Medium-Sized Enterprises (SMEs)

The General Data Protection Regulation (GDPR) is the fundamental data protection law affecting businesses across the UK and EU, and compliance with the Regulation is mandatory for almost every organisation, regardless of size.  Whilst large corporations have dedicated compliance teams, small and medium-sized enterprises (SMEs) often struggle to navigate the complexities of the GDPR, sometimes unaware of the risks, obligations, or potential penalties.  A lack of in-house expertise, budget restrictions, and competing business priorities can make achieving and maintaining compliance particularly challenging.  Even if you believe you are compliant, ever-evolving regulations and enforcement trends mean it’s essential to stay informed and up to date.

Drawing upon our extensive experience supporting SMEs, to comply with the GDPR, URM’s webinar on 25 June 2025 will explain your regulatory obligations as an SME, and offer essential advice on how to stay compliant with limited resources.  Our webinar will provide you with up-to-date and easy-to-understand guidance and will also provide you with the opportunity to ask any questions.

Key areas we will be addressing include:

• Understanding GDPR: Basics for SMEs
  • What is GDPR? Overview of key principles
  • Why GDPR matters for SMEs
  • Common misconceptions about GDPR compliance
• Key GDPR Obligations for SMEs
  • Data processing principles and lawful basis
  • Data subject access requests (DSARs) and how to respond to them
  • Responsibilities of controllers and processors
  • Record-keeping and documentation requirements
• Practical Steps for GDPR Compliance
  • Understanding your data and where it is
  • Implementing appropriate security measures and policies
  • Handling data breaches and reporting requirements
  • Appointing a data protection officer (DPO) or lead
• Common Challenges & Solutions
  • Managing third-party vendors and contracts
  • Handling marketing and customer data ethically
  • Maximising limited resources in GDPR implementation
• Q&A Session

If you have any immediate questions, please use the space provided below the registration form below to ask up to 3 questions.  You will also be able to ask additional questions during the session on Wednesday 25 June 2025.  No question will be left unanswered.