Workshops could be fined up to 4% of turnover for failing to comply with GDPR. The new regulation will take effect on 25th May 2018, by which time you must ensure that your customers and employees are happy for you to store their personal data (online or on paper). And it must be easy to withdraw consent at any time.
After 25th May, you are also obliged to report any personal data breaches to the individual, and to the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of the issue.
For more information visit www.ico.org.uk