How To Utilise Document Scanning to Ensure GDPR Compliance
Businesses across the UK are preparing for the forthcoming GDPR . For many larger organisations this will involve creating a distinct job role to ensure GDPR compliance is adhered to and significant fines are avoided.
Part of any GDPR Project Manager’s role will be to evaluate any threats to the company’s existing information management and information governance processes. Storage, distribution and security of paper and digital documents should be treated as a high priority area.
Any company with sensitive information held on paper, in files or in storage cabinets should look to digitise these as soon as possible.
This is where an outsourced document scanning service can help. For very large organisations, it maybe possible to do this in house if scanning hardware already exists, skills are good and time is available to be allocated to a new project. Often though, even for the largest organisations it works out to be far quicker and more cost effective to outsource. Once you’ve added in staff costs(either in house or temps), setup times and costs of gathering the paperwork together and indexing the digitised data it just doesn’t make sense to do anything else than outsource.
How Document Scanning Can Help to Ensure GDPR Compliance
- Document security and privacy – Paper documents are far easier to steal, replicate or lose. Digital documents, even when stored on a basic filing system can be secured with passwords and the data can be digitally encrypted. This in itself should be enough to take the step towards document digitisation.
- Data Search – Paper documents are far harder to find and the contents within them even harder. Article 17 in the GDPR is Right to erasure(“right to be forgotten”). It states “The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay.” With digital documents, this process will be straightforward, particularly if your digital documents have been OCR’d(this means text within a document can be searched). With paper documents, first you have to find every document that relates to this person, secondly you have to find all the relevant pages and then you have to redact and replicate these. All in all, the time savings for doing this digitally are huge. Critically the GDPR states “without undue delay” twice in two sentences. How much of a delay would you have if you were working with paper documents? Perhaps the documents are stored off site, or they are in badly organised bankers boxes in a basement?Other rights included in the GDPR are right of access, right to rectification and right to restriction of processing . All of these will be far easier to comply with for companies working digitally. Once again, the case for working with digital documents becomes very strong.
- Data Retention – Data retention is far easier with digital documents, in fact with the right software in place such as DocuWare Cloud, data retention can be set and controlled by a set of rules automatically. Without a data retention policy, a data breach would be more likely to be regarded as serious if no old data has been deleted, if there is no data retention policy or if no thought had been given to whether data should be deleted.
- Cost – The cost of processing paper data in accordance with the GDPR is far higher than processing digital data. Although the cost itself does not ensure GDPR compliance, its a major consideration for any business when weighing up their options.
Document Scanning Done The Right Way
ORS Group have been operating a secure document scanning centre for nearly 30 years. Needless to say we’ve worked with organisations from every different industry sector and scanned just about every different document type imaginable. We’ve been trusted by some of the UK’s most highly regarded organisations to handle their documents, process their data and return it digitally for use in just about every system available.
Below are some of our most recent case studies: