GDPR Support for Organisations

Salford CVS (leading on behalf of 10GM) has been working with the Greater Manchester Combined Authority (GMCA) to provide Information Governance Courses across Greater Manchester to support the sector to better handle their data more securely and effectively.

What is GDPR and the Data Protection Act?

Data protection legislation isn’t a new thing. The new legislation builds on rules we have had in place for a number of years but refreshes to reflect new technologies and ways we use data and information.

  • The General Data Protection Regulations (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area.
  • The Data Protection Act 2018 controls how your personal information is used by organisations and is the UK’s implementation of the General Data Protection Regulation (GDPR).

The two pieces of legislation essentially work together to cover how we should treat personal data and this will continue post Brexit.

What information does the GDPR apply to?

The GDPR applies to ‘personal data’, which means any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. You can find more detail in the key definitions section of the ICO (Information Commissioners Office) Guide to the GDPR.

Isn't this just for big charities and organisations?

Good Information Governance is important to organisations, charities and groups of all shapes and sizes. For example, if you have a membership, send a newsletter to your users, fundraise or have to provide data to a funder or commissioners then these are all examples of work that requires good information governance and are affected by GDPR.

But isn't this just all about IT and Computers? 

Cyber security does play a part in Information Governance and ensuring compliance with GDPR. But it's more about how we use IT and computer systems than what computer programme you have in place. 

Cyber Essentials is a government back schemed and working through their free checklist will help your organisation have the basic controls in place to protect your organisations and its data - click here for more information. Also the National Cyber Security Centre has produced a free guide aimed at small charities that can be downloaded here.

How do I find out what I need to do?

To support organisations 10GM (working alongside GMCA) have created an Information Governance Toolkit to support organisations. Based on the ICO guidance on getting reading for GDPR it asks the most common questions organisations need to consider and signposts you to more information. You can download a copy here.

Where can I access training?

As mentioned above 10GM are running training course across Greater Manchester, Contact us for details of the next available course. In the meantime, the ICO has produced a webinar aimed at small health-based organisations that you may find helpful. This can be viewed free of charge on YouTube Additionally you can access training through a variety of online providers including Future Learn who have developed this Introduction to GDPR Course with the University of Central London

Where can I get more help and support?

You can contact Salford CVS where our development team can offer help, support and guidance. You can also check out the frequently asked questions we are developing below.

Alternatively, you can contact the Information Commissioner's Office directly with your queries. The ICO has a dedicated advice line aimed at people running small businesses or charities. To access the new service dial the ICO helpline on 0303 123 1113 and select option to be diverted to staff who can offer support.

10GM has also formed a Greater Manchetser VCSE IG Forum. The forum sends out regular updates regarding data protection and information govenance as well as meeting regular to discuss issues and topics. If you have responsibility for data protection within your organisation and would like to join the forum please email Marie Wilson for more information

Frequently Asked Questions

  • Will this apply post Brexit? - The short answer is "yes". On 21 June 2017 (as part of the Queen's Speech) the Government has confirmed its intention to bring the EU General Data Protection Regulation (the “GDPR”) into UK law, ensuring the country’s data protection framework is “suitable for our new digital age, allowing citizens to better control their data.”. The Data Protection Bill which is the legislation to do this was introduced to the House of Lords in September 2017 and is currently progressing through parliament
  • We're a faith based organisation..... - Faith based organisations still have to comply with GDPR. There are some exceptions for Churches and Religious Organisations in regards to enabling the processing of religious data but generally, the rules remain the same. Parish Resources have created some resources that may help. 
  • Do I need to register with the ICO? - Most small organisations and charities are currently exempt from registration will probably continue to be exempt. You can check if you need to register under current Data Protection Legislation by using the ICO free self-assessment (it doesn't ask for your organisation's name or contact details). or for the new GDPR regulations, you can check against the recently issued ICO guidance and checklist. If in doubt contact the ICO helpline as they can help clarify the situation for you!
  • What are the changes regarding children and young people? - GDPR does have specific implications for processing the data of young people (in particular those under 13 years). The ICO have issued draft guidance on the subject that explains the relevant aspects and implications.

contact us

sign up

Join us

Get In Touch

Salford CVS & Volunteer Centre
Registered address 
The Old Town Hall 
5 Irwell Place 
Salford, M30 0FN

Tel: 0161 787 7795 


Salford CVS is the city-wide infrastructure organisation for the voluntary, community and social enterprise sector; providing specialist information, advice, development support and opportunities for influence and collaboration.

Latest Blogs

I don’t know about anyone else, but this second lockdown feels harder than the last one.

Moving from the real world to the digital world when you can’t shake off that resistance.