# A data protection issue we can’t afford to ignore - Link: https://fundraising.co.uk/2013/02/15/data-protection-issue-we-cant-afford-ignore/ - Published: 2013-02-15T15:19:01+00:00 - Author: Howard Lake At the risk of scaremongering, I am – to say the least – extremely concerned about the potential impact that the proposed EU legislation changes on data protection will have for the third sector. Perhaps we should all be more than just a little bit concerned? Though the UK direct marketing industry is mobilising, if our response to the cookie law is anything to go by (slow to say the least – [more from the ICO here](http://www.ico.gov.uk/news/blog/2012/updated-ico-advice-guidance-e-privacy-directive-eu-cookie-law.aspx)) I’m not reassured that we are going to get the result our industry, and our sector, needs. When I spoke to one of my DM agency contacts about the impact of the legislation it was suggested: “The UK would walk away from Europe rather than risk our industry”. Well, that’s a pretty bold attitude, assuming that the government would put our needs before all the many other things that membership of the EU entails. ## Advertisement [⌊Posthub advert. You create the campaign. We'll handle the postal journey. Get started at post-hub.co.uk.⌉](https://fundraising.co.uk/ads/posthub-20261007-300x250/) But hang on, is it? What is the direct marketing industry worth to the UK? Well the Direct Marketing Association reckons that it’s over [£14.2 billion](http://dma.org.uk/sites/default/files/tookit_files/putting_a_price_on_direct_marketing_2012_0.pdf)– and that is worth sitting up and taking notice of. But all we are talking about is a little change to data protection, personal privacy, which is good for consumers, isn’t it? ## What do the proposed changes mean? Well, let’s take a look in a bit more detail, what does the proposed change mean and why is it important to the third sector? Here are some highlights: General rule for direct marketing – “explicit consent by clear statement or affirmative action”. In other words, **opt-in only**. Given that only about 20% of people ever tick ‘ yes please’, that could mean cold data depleting by 80%. **The right to be forgotten** – “The data subject shall have the right to obtain from the controller the erasure of personal data relating to them and the abstention from further dissemination of such data." Sounds reasonable, but how can you remember to forget someone if you can’t keep hold of their preferences and suppress them from the next cold activity? And there are also legal implications – some data we have to keep by law. Not to mention (and here I quote directly from the DMA): “**Prohibition of profiling** – Your business would no longer be allowed to target marketing at specific consumer profiles… It would also be prohibited to gather individuals' data without their explicit consent.” And profiling is not defined clearly in the legislation update – it could mean anything from digital analytics to lifestyle profiling. Bang goes our ability to target or understand behaviour.  Implementing the new legislation will have cost implications too from employing a DP specialist (for organisations of 250+ employees) to consolidating legacy databases to make sure you can find every single bit of data you store on an individual. ## What should we do? What can we do about it? We have a limited window of opportunity to influence the wording of this law. We need to fully understand the impact that the proposed changes will have not just for charities, but the causes we support and in this respect we have a distinct advantage over our commercial colleagues. We have a huge voice as a sector with considerable influence. Let’s use it. _Carolyn Causton_ _Please note this post reflects the view of the individual and not necessarily the views of the employer or publisher._ **Resources** * [Summary of the changes and implications](http://dma.org.uk/eu-data-protection)( DMA website)   * [Data Protection Toolkit](http://dma.org.uk/news/dma-launches-data-protection-toolkit-businesses-tackle-eu-data-changes)( DMA website)   * [Data Protection Reform](http://dma.org.uk/eu-data-protection) from the Information Commissioner’s Office (DMA website)   * [What the changes mean to you](http://www.computerweekly.com/guides/Essential-guide-What-the-EU-Data-Protection-Regulation-changes-mean-to-you)( Computer Weekly)   * [Lobby your MEP](http://dma.org.uk/eu-data-protection/act-now-write-your-mep)( DMA website)   * **[Irish Charities Act consultation deadline is 20th March](https://fundraising.co.uk/2013/03/17/irish-charities-act-consultation-deadline-20th-march/)**( 17 March 2013) * **[First guide to Charitable Incorporated Organisations published by DSC](https://fundraising.co.uk/2013/06/06/first-guide-to-charitable-incorporated-organisations-published-by-dsc/)**( 6 June 2013) * **[£1.2 million for N Ireland Challenge Fund from plastic bag levy](https://fundraising.co.uk/2013/10/28/1-2m-n-ireland-challenge-fund-plastic-bag-levy/)**( 28 October 2013)