There are just three days to go before new data protection laws kick in, but many travel companies are not ready.
A show of hands at this week’s ABTA Travel Law Seminar found the majority of companies are busy putting systems in place, but are not yet fully compliant.
Specialist Alexandra Cooke, associate at commercial law firm Hamlins, said some clients are panicking, some are taking it in their stride and seeing it as a way of getting their house in order, while others are simply ignoring it.
She suggested simple steps that can be taken towards compliance, including putting locks on cabinets containing paperwork, setting up IT systems to automatically delete information after a certain time has passed, and checking that third party suppliers also have the same systems in place.
Companies who are found to fall foul of the new legislation risk incurring fines of up to €20 million or 4% of their annual turnover.
"And that is per breach, so it could be even higher," Cooke told delegates.
If a data breach occurs, companies must also respond within 72 hours.
