The GDPR, week #11 - 3 simple questionsâ¦

Right, it's whiteboard or flip-chart time again! Round up the usual suspects - sales, marketing, data and CRM heads, proposition owners, customer experience, technology - and get them to answer a couple of questions: 1. What customer personal data do we (or have we in the past) capture? 2. Where's that personal data held? Now, unless your organisation is - in personal data terms - quite simple and/or very new, getting comprehensive answer to those questions is no small task. By the same token, though it's one that can't be avoided if you want to understand what you need to do to address the GDPR and the new Data Protection Act. However, there's a vital 3rd question to be asked, too: 3. Why do we need that data? Was there ever a good reason for collecting that data - and is there any basis to still retain it now? (this one may require both repeated questioning and some challenging of the answers you're given...). Have fun!