{"id":3771,"date":"2018-02-13T16:40:02","date_gmt":"2018-02-13T16:40:02","guid":{"rendered":"https:\/\/www.sage.com\/en-gb\/blog\/?p=3771"},"modified":"2025-12-09T16:45:50","modified_gmt":"2025-12-09T16:45:50","slug":"gdpr-guide-accountants","status":"publish","type":"post","link":"https:\/\/www.sage.com\/en-gb\/blog\/gdpr-guide-accountants\/","title":{"rendered":"A quick-start accountants guide for GDPR"},"content":{"rendered":"<header class=\"entry-header has-dark-background-color entry-header--has-illustration entry-header--has-illustration--generic\">\n\t<div class=\"container\">\n\t\t<div class=\"entry-header__row row align-center\">\n\t\t\t<div class=\"col col-lg-7 col-xlg-6 entry-header__content\">\n\t\t\t\t\t\t\t<div class=\"component component-single-header\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"entry-header__misc text--subtitle text--uppercase text--small\">\n\t\t\t\t\t\t\t<a href=\"https:\/\/www.sage.com\/en-gb\/blog\/category\/strategy-legal-operations\/\" class=\"entry-header__link\">Strategy, Legal &amp; Operations<\/a>\t\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t<div class=\"entry-title-wrapper\">\n\t\t\t\t\t<h1 class=\"entry-title\">\n\t\t\t\t\t\tA quick-start accountants guide for GDPR\t\t\t\t\t<\/h1>\n\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t<p class=\"entry-header__description\">\n\t\t\t\t\t\t\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n\t<div class=\"single-post-details container\">\n\t\t<div class=\"col\">\n\t\t\t<span class=\"posted-on \"><time class=\"entry-date published\" datetime=\"2018-02-13T16:40:02+00:00\">13 February, 2018<\/time><\/span><span class=\"reading-time\"> min read<\/span>\n\t\t<button\n\t\t\ttype=\"button\"\n\t\t\tclass=\"social-share-button button button--icon button--secondary js-social-share-button\"\n\t\t\tdata-share-title=\"A quick-start accountants guide for GDPR\"\n\t\t\tdata-share-url=\"https:\/\/www.sage.com\/en-gb\/blog\/gdpr-guide-accountants\/\"\n\t\t\tdata-share-text=\"Please read this interesting article\"\n\t\t>\n\t\t\t<span class=\"social-share-button__share-label\">Share<\/span>\n\t\t\t<span class=\"social-share-button__copy-label\" hidden>Copy Link<\/span>\n\t\t\t<span class=\"social-share-button__copy-tooltip\" aria-hidden=\"true\" hidden>Copied<\/span>\n\t\t<\/button>\n\n\t\t\t\t<\/div>\n\t<\/div>\n<\/header>\n\n\n\n<div class=\"wp-block-post-author\">\n\t\t\t<div class=\"co-authors\">\n\t\t\t\n\t\t<div class=\"entry-author-wrapper\">\n\t\t\t<a class=\"entry-author\" href=\"https:\/\/www.sage.com\/en-gb\/blog\/author\/keirthomasbryant\/\">\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"40\" height=\"40\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2025\/06\/keir-short-hair-350x350.jpg\" class=\"entry-author__image\" alt=\"\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2025\/06\/keir-short-hair-350x350.jpg 350w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2025\/06\/keir-short-hair.jpg 760w\" sizes=\"auto, (max-width: 40px) 100vw, 40px\" \/>\t\t\t\t<span class=\"entry-author__name\">Keir Thomas-Bryant<\/span>\n\t\t\t<\/a>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t<\/div>\n\t\t<\/div>\n\n\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<div class=\"video-container-wrap -mode-full\"><div class=\"video-container\"><video\n\t\t\t\tclass=\"sage-video video-js vjs-default-skin \"\n\t\t\t\twidth=\"640\"\n\t\t\t\theight=\"360\"\n\t\t\t\tdata-setup='{ \"controls\": true, \"aspectRatio\" : \"16:9\", \"poster\": \"https:\/\/img.youtube.com\/vi\/taj8a8iKR0o\/maxresdefault.jpg\", \"techOrder\": [\"youtube\"], \"enablejsapi\": 1, \"origin\": \"https:\/\/www.sage.com\", \"sources\": [{ \"type\": \"video\/youtube\", \"src\": \"https:\/\/www.youtube.com\/watch?v=taj8a8iKR0o\"}], \"youtube\": { \"ytControls\": 0, \"cc_load_policy\": 3, \"modestbranding\": 1, \"hl\": \"en_GB\", \"playsinline\": 1 } }'\n\t\t\t\tcrossorigin=\"\"><\/video><\/div><\/div>\n<\/div><\/figure>\n\n\n\n<p>Believe it or not, it was just 100 days as of Valentine\u2019s Day until the GDPR comes into force on 25&nbsp;May 2018. You might want to use that as a milestone to measure <a href=\"https:\/\/www.sage.com\/en-gb\/gdpr\/accountants\/\">how well your GDPR preparations are progressing<\/a>.<\/p>\n\n\n\n<p>At the\u00a0Sage Sessions\u00a0event in Newcastle on 20\u00a0February 2018 our panel of experts discussed GDPR for accountants and the impact it will have on your practice and clients, and how to ensure you are on track for the changes in May.<\/p>\n\n\n\n<p>If you were unable to attend (or even if you were there), here are some notes for GDPR adoption within accountancy practices, with the following caveats. First, this is not an exclusive list and nor is it a substitute for receiving legally qualified advice or examining your own procedures and methods in depth (see the Sage Legal Disclaimer at the end of this piece).<\/p>\n\n\n\n<p>Secondly, at the time of writing the exact impact isn\u2019t yet known of <a href=\"https:\/\/www.sage.com\/en-gb\/gdpr\/\">the GDPR<\/a> and accountants and bookkeepers should make sure they stay informed. For example, we lack practical examples of what agencies such as the <a href=\"https:\/\/ico.org.uk\/\">Information Commissioner\u2019s Office<\/a>&nbsp;are likely to find acceptable or objectionable, and some of the wording of the GDPR legislation is open to interpretation. Therefore, what\u2019s detailed below can only be considered educated guesses at the very best.<\/p>\n\n\n\n<div class=\"single-cta\">\n\t<div class=\"single-cta__positioner\">\n\t\t<div class=\"single-cta__wrapper has-dark-background-color\">\n\t\t\t<div class=\"single-cta__content\">\n\t\t\t\t\t\t\t\t<h2 class=\"single-cta__title h3\">GDPR<\/h2>\n\n\t\t\t\t\t\t\t\t\t<div class=\"single-cta__description\">\n\t\t\t\t\t\t<p><!-- wp:paragraph --><\/p>\n<p>Need help with meeting your GDPR obligations and making sure your businesses processes are working in the correct way? Here&#8217;s what you need to know.<\/p>\n<p><!-- \/wp:paragraph --><\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a\n\t\t\t\t\t\thref=\"https:\/\/www.sage.com\/en-gb\/gdpr\/\"\n\t\t\t\t\t\tclass=\"single-cta__button button button--primary\"\n\t\t\t\t\t\t\t\t\t\t\t\t\tid=\"cta-id-3269\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdata-button-location=\"cta_box\"\n\t\t\t\t\t\t\t\t\t\t\t>Find out more<\/a>\n\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<img decoding=\"async\" width=\"1440\" height=\"810\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2023\/09\/GettyImages-1478421401.jpg\" class=\"single-cta__image\" alt=\"Working on business priorities\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2023\/09\/GettyImages-1478421401.jpg 1440w\" sizes=\"auto, (min-width: 48em) 33vw, 100vw\" \/>\t\t\t<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-gdpr-and-accountants-software-considerations\"><strong>GDPR and accountants: software considerations<\/strong><\/h2>\n\n\n\n<p><a href=\"https:\/\/www.sage.com\/en-gb\/accounting-software\/\">Accounting software<\/a> is at the core of many firms that manage financial and personal data on behalf of their clients. Under GDPR enforcement, technical considerations must be given to how and where your selected software processes and hosts personal data, particularly if the software is cloud-based.<\/p>\n\n\n\n<p>Accountants and bookkeepers must clarify with their IT and software providers how these systems will be compliant with GDPR. A comprehensive questionnaire\/checklist will help to map dataflows and identify any vulnerabilities ahead of the GDPR compliance deadline.<\/p>\n\n\n\n<p>This should cover everything relating to how the software interacts with personal data, including but not limited to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Technical specifications of the platform<\/li>\n\n\n\n<li>Data separation<\/li>\n\n\n\n<li>Use of anonymisation, pseudonymisation and encryption techniques<\/li>\n\n\n\n<li>Security, including considerations for mobile devices<\/li>\n\n\n\n<li>Data disablement<\/li>\n\n\n\n<li>Outsourcing\/subcontracting<\/li>\n\n\n\n<li>Backup and disaster recovery procedures<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-marketing-data\"><strong>Marketing data<\/strong><\/h2>\n\n\n\n<p>Consent and legitimate interests are key considerations when assessing the use of personal data for marketing purposes. Do you have consent to contact an individual and is it for the purpose in which they have provided such consent?<\/p>\n\n\n\n<p>Legitimate interest must be supported by a clear case for contacting an individual if outside of the reasons for why they have granted consent. For example, legitimate interests might cover informing your clients about a new service your firm offers as it is in their interest to be made aware of this information.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-prospect-client-details\"><strong>Prospect client details<\/strong><\/h2>\n\n\n\n<p>It is common for accountancy practices to keep a record of any inbound enquiries from potential clients, typically including contact details and the nature of the enquiry. This would then drive new business initiatives with the aim of converting these prospects to clients.<\/p>\n\n\n\n<p>Post-GDPR, firms will have to consider the lawful basis for why they need to retain this data and the agreement for how it will be used \u2013 whether this is based on consent, contract or other legitimate interest. For many accountants and bookkeepers, this will require a change in procedure that needs to be considered as part of their GDPR readiness plan.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<div class=\"video-container-wrap -mode-full\"><div class=\"video-container\"><video\n\t\t\t\tclass=\"sage-video video-js vjs-default-skin \"\n\t\t\t\twidth=\"640\"\n\t\t\t\theight=\"360\"\n\t\t\t\tdata-setup='{ \"controls\": true, \"aspectRatio\" : \"16:9\", \"poster\": \"https:\/\/img.youtube.com\/vi\/Y7k04399RJ4\/maxresdefault.jpg\", \"techOrder\": [\"youtube\"], \"enablejsapi\": 1, \"origin\": \"https:\/\/www.sage.com\", \"sources\": [{ \"type\": \"video\/youtube\", \"src\": \"https:\/\/www.youtube.com\/watch?v=Y7k04399RJ4\"}], \"youtube\": { \"ytControls\": 0, \"cc_load_policy\": 3, \"modestbranding\": 1, \"hl\": \"en_GB\", \"playsinline\": 1 } }'\n\t\t\t\tcrossorigin=\"\"><\/video><\/div><\/div>\n<\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-supplier-data\"><strong>Supplier data<\/strong><\/h2>\n\n\n\n<p>While you\u2019re thinking about how you treat the personal data of your clients and employees, let\u2019s not forget your suppliers. It may well be that you are in receipt of personal data under this type of relationship and it requires the same level of protection as that afforded to other individuals.<\/p>\n\n\n\n<p>Further to this, if your suppliers are required to process personal data on your behalf, don\u2019t forget that the GDPR requires certain mandatory provisions to be incorporated into written agreements with those suppliers.<\/p>\n\n\n\n<p>And where the situation is reversed, if you are acting as a data processor on behalf of another organisation, you can expect to be asked to enter into new processing terms too.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-staff-data-and-recruitment\"><strong>Staff data and recruitment<\/strong><\/h2>\n\n\n\n<p>The GDPR affords greater rights to employees as data subjects. These include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The right to be informed, which encompasses the obligation on employers to provide transparency as to how personal data will be used.<\/li>\n\n\n\n<li>Data access, which encompasses subject access requests.<\/li>\n\n\n\n<li>Rectification of data that is inaccurate or incomplete.<\/li>\n\n\n\n<li>The right to be forgotten (under certain circumstances).<\/li>\n\n\n\n<li>Requests to block or suppress the processing of personal data.<\/li>\n\n\n\n<li>Data portability, which allows employees to obtain and reuse their personal data for their own purposes, such as joining another firm and asking for their personal data to be transferred.<\/li>\n<\/ul>\n\n\n\n<p>The other significant consideration for accountancy practices relates to recruitment. Prior to GDPR enforcement, it is common practice for firms to hold on to copies of CVs once an advertised role is filled in case a candidate could be suitable for another position.<\/p>\n\n\n\n<p>Under the GDPR, this will not be possible unless explicit consent is sought and given, in which case the data must be stored and handled in compliance with GDPR regulations.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-compliance-spending\"><strong>Compliance spending<\/strong><\/h2>\n\n\n\n<p>Accountancy firms should identify and plan for any costs relating to new systems, processes and resources needed to be GDPR compliant. This may include a migration from manual, hard-copy record keeping to a software solution, which would require not only investment in the system but also sufficient training for employees and clients.<\/p>\n\n\n\n<figure class=\"wp-block-image alignnone size-full wp-image-3539\"><img loading=\"lazy\" decoding=\"async\" width=\"999\" height=\"665\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2018\/01\/Kingpin_SageLive_101215-166_2-1.jpg\" alt=\"Asking the right questions can really help when you choose accounting software\" class=\"wp-image-3539\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2018\/01\/Kingpin_SageLive_101215-166_2-1.jpg 999w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2018\/01\/Kingpin_SageLive_101215-166_2-1-768x511.jpg 768w\" sizes=\"auto, (max-width: 999px) 100vw, 999px\" \/><figcaption class=\"wp-element-caption\">As an accountant, it&#8217;s important for you to share knowledge on legislation such as GDPR with your clients<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-inspiring-trust-and-confidence\"><strong>Inspiring trust and confidence<\/strong><\/h2>\n\n\n\n<p>Accountants are valued and trusted advisers to clients. To deliver on these expectations, there\u2019s an incumbent need to share knowledge and advise clients appropriately on key legislation. So now is the time to analyse and understand the impact GDPR is likely to have on your practice and your clients.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-safeguarding-personal-data-privacy-rights\"><strong>Safeguarding personal data privacy rights<\/strong><\/h2>\n\n\n\n<p>Safeguarding personal data under the GDPR will be much more stringent, particularly with regards to how data is captured through websites. For example, post-GDPR it must be explicitly clear when users opt-in via contact form tick boxes, and what those boxes correspond to.<\/p>\n\n\n\n<p>Any contamination of personal data, which means an individual receives unsolicited communications for something they did not give consent for, will be reportable as a data safeguarding infringement.<\/p>\n\n\n\n<div class=\"single-cta\">\n\t<div class=\"single-cta__positioner\">\n\t\t<div class=\"single-cta__wrapper has-dark-background-color\">\n\t\t\t<div class=\"single-cta__content\">\n\t\t\t\t\t\t\t\t<h2 class=\"single-cta__title h3\">GDPR webinar<\/h2>\n\n\t\t\t\t\t\t\t\t\t<div class=\"single-cta__description\">\n\t\t\t\t\t\t<p>Join us for a live webinar so you have a better understanding of GDPR, which came into force on 25 May 2018, and learn about how the legislation can benefit your business.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a\n\t\t\t\t\t\thref=\"http:\/\/sageu.com\/en-gb\/gdpr.html\"\n\t\t\t\t\t\tclass=\"single-cta__button button button--primary\"\n\t\t\t\t\t\t\t\t\t\t\t\t\tid=\"cta-id-4049\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdata-button-location=\"cta_box\"\n\t\t\t\t\t\t\t\t\t\t\t>Find out more<\/a>\n\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<img decoding=\"async\" width=\"999\" height=\"666\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2018\/03\/30521_All-Uses.jpg\" class=\"single-cta__image\" alt=\"Here are five ways to save money for your business\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2018\/03\/30521_All-Uses.jpg 999w\" sizes=\"auto, (min-width: 48em) 33vw, 100vw\" \/>\t\t\t<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-exchanging-client-data\"><strong>Exchanging client data<\/strong><\/h2>\n\n\n\n<p>Scoping and mapping not only how your practice manages personal data but also how you exchange data with clients, as a critical element of preparing for GDPR compliance. Under the GDPR, clients are entitled to audit third parties acting as data processors to ensure compliance across their supply chain.<\/p>\n\n\n\n<p>The GDPR provides prescriptive requirements relating to the data sharing agreement between data controllers and data processors. For example, data processors are now required to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Maintain records of all processing activities carried out on behalf of a data controller if they employ 250 people or more; unless the processing it carries out is likely to result in a risk to the rights and freedoms of data subjects, the processing is not occasional, or the processing includes special categories of data or personal data relating to criminal convictions and offences.<\/li>\n\n\n\n<li>Obtain the data controller\u2019s consent for the appointment of a sub-processor.<\/li>\n\n\n\n<li>Cooperate with the data controller in the performance of its obligations under the GDPR, including notifying the data controller of a personal data security breach without delay.<\/li>\n<\/ul>\n\n\n\n<p>The impact this will have on accountancy firms is that clients (as data controllers) will likely want to review their current and future agreements to ensure these requirements are adhered to.<\/p>\n\n\n\n<p>Where your firm will act as a \u201ccontroller in common\u201d with your clients, consideration should be given to the following key areas when establishing a data sharing agreement:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Clarify the purpose of the sharing.<\/li>\n\n\n\n<li>State which data will be shared.<\/li>\n\n\n\n<li>Confirm the basis of shared data.<\/li>\n\n\n\n<li>Detail the limitations on recipients shared data.<\/li>\n\n\n\n<li>Validate data quality, security and retention.<\/li>\n\n\n\n<li>Verify the process for practical governance.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-sage-legal-disclaimer\"><strong>Sage Legal Disclaimer<\/strong><\/h2>\n\n\n\n<p>The information contained here is for general guidance purposes only. It should not be taken for, nor is it intended as, legal advice. We would like to stress that there is no substitute for customers making their own detailed investigations or seeking their own legal advice if they are unsure about the implications of the GDPR on their businesses.<\/p>\n\n\n\n<p>While we have made every effort to ensure that the information provided herein is correct and up to date, Sage makes no promises as to completeness or accuracy and the information is delivered on an \u201cas is\u201d basis without any warranties, express or implied.<\/p>\n\n\n\n<p>Sage will not accept any liability for errors or omissions and will not be liable for any damage (including, without limitation, damage for loss of business or loss of profits) arising in contract, tort or otherwise from the use of or reliance on this information or from any action or decisions taken as a result of using this information.<\/p>\n\n\n\n<div class=\"single-cta gated-content\">\n\t<div class=\"single-cta__positioner\">\n\t\t<div class=\"single-cta__wrapper has-dark-background-color\">\n\t\t\t<div class=\"single-cta__content\">\n\t\t\t\t\t\t\t\t<h2 class=\"single-cta__title h3\">GDPR Guide For Accountants And Bookkeepers<\/h2>\n\n\t\t\t\t\t\t\t\t\t<div class=\"single-cta__description\">\n\t\t\t\t\t\t<p>As an accountant or bookkeeper, it\u2019s important that you have\u00a0a good understanding of what the GDPR means for your practice and your clients. Get up to speed with your free guide.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a\n\t\t\t\t\t\thref=\"#gate-e1f7c79f-e3da-4d85-8988-f82685b292f8\"\n\t\t\t\t\t\tclass=\"single-cta__button button button--primary\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t>Download your free guide<\/a>\n\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<img decoding=\"async\" width=\"999\" height=\"666\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2018\/02\/SAGE_CROWDSTACKER_061117_0312_All-Uses.jpg\" class=\"single-cta__image\" alt=\"Democratising AI could really benefit your business\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2018\/02\/SAGE_CROWDSTACKER_061117_0312_All-Uses.jpg 999w\" sizes=\"auto, (min-width: 48em) 33vw, 100vw\" \/>\t\t\t<\/div>\n<\/div>\n\n\n<div class=\"single-cta\">\n\t<div class=\"single-cta__positioner\">\n\t\t<div class=\"single-cta__wrapper has-dark-background-color\">\n\t\t\t<div class=\"single-cta__content\">\n\t\t\t\t\t\t\t\t<h2 class=\"single-cta__title h3\">Subscribe to the Sage Advice newsletter<\/h2>\n\n\t\t\t\t\t\t\t\t\t<div class=\"single-cta__description\">\n\t\t\t\t\t\t<p>Join more than 500,000 UK readers and get the best business admin strategies and tactics, as well as actionable advice to help your company thrive, in your inbox every month.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a\n\t\t\t\t\t\thref=\"#gate-b1a63862-3fa0-4a5e-bb67-c76b88bbc6b8\"\n\t\t\t\t\t\tclass=\"single-cta__button button button--primary\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t>Subscribe now<\/a>\n\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<img decoding=\"async\" width=\"1440\" height=\"810\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2022\/04\/GettyImages-1073797282-1-1440x810.jpg\" class=\"single-cta__image\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2022\/04\/GettyImages-1073797282-1-1440x810.jpg 1440w\" sizes=\"auto, (min-width: 48em) 33vw, 100vw\" \/>\t\t\t<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Believe it or not, it was just 100 days as of Valentine\u2019s Day until the GDPR comes into force on 25&nbsp;May 2018. You might want to use that as a milestone to measure how well your GDPR preparations are progressing. At the\u00a0Sage Sessions\u00a0event in Newcastle on 20\u00a0February 2018 our panel of experts discussed GDPR for [&hellip;]<\/p>\n","protected":false},"author":280,"featured_media":2892,"menu_order":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sage_video":true,"post_featured_image_hide":false,"footnotes":""},"categories":[9],"tags":[117,41],"business_type":[115],"lilypad":[],"context":[],"industry":[],"persona":[67],"imagine_tag":[220],"coauthors":[369],"class_list":["post-3771","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-strategy-legal-operations","tag-gdpr","tag-hr-process","business_type-accountants"],"sage_meta":{"region":"en-gb","author_name":"Keir Thomas-Bryant","featured_image":"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2017\/09\/GettyImages-175138834_super.jpg","imagine_tags":{"220":"Accountant accounting"}},"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Sage Advice UK","distributor_original_site_url":"https:\/\/www.sage.com\/en-gb\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts\/3771","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/users\/280"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/comments?post=3771"}],"version-history":[{"count":0,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts\/3771\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/media\/2892"}],"wp:attachment":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/media?parent=3771"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/categories?post=3771"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/tags?post=3771"},{"taxonomy":"business_type","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/business_type?post=3771"},{"taxonomy":"lilypad","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/lilypad?post=3771"},{"taxonomy":"context","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/context?post=3771"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/industry?post=3771"},{"taxonomy":"persona","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/persona?post=3771"},{"taxonomy":"imagine_tag","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/imagine_tag?post=3771"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/coauthors?post=3771"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}