---
title: Getting ready for GDPR
description: How Head Light is working with its clients to get ready for GDPR and their use of talent management software
image: https://blog.head-light.co.uk/hubfs/Imported_Blog_Media/gdpr-flag-1.jpg
---

[![HeadLight-logo-from LF for website](https://blog.head-light.co.uk/hubfs/HeadLight_Sep2016/HeadLight-logo-from%20LF%20for%20website.png)](https://head-light.co.uk/)

- [About Us](https://head-light.co.uk/what-makes-head-light-different/)
  
  ### [Our Clients Our clients come from industry, justice, government and not for profit sectors.](https://head-light.co.uk/our-clients/)
  
  
  
  ### [Case Studies Find out what people have said about Head Light and how we have helped.](https://blog.head-light.co.uk/case-studies)
  
  
  
  ### [Client Charter We like to be clear and upfront in how we work – and how we won’t work. Our Client Charter sets this out.](https://head-light.co.uk/client-charter/)
  
  
  
  ### [Consulting Partners When you partner with another organisation to deliver services to your clients, your reputation and future business success rests on your Partner’s ability and commitment to make it happen.](https://head-light.co.uk/consulting-partners/)
  
  
  
  ### [Our Location Head Light is based in Ascot, if you visit us with an electric vehicle, then you can have a free charge on us!](https://head-light.co.uk/contact-us/)
  
  
  
  ### [About Head Light Head Light helps public sector and regulated organisations turn workforce signals into intelligence about capability, readiness and risk. We are recognised in the Fosway 9-Grid™ for Talent & People Success and have supported customers for 20 years.](https://head-light.co.uk/what-makes-head-light-different/)
- [Workforce Capability Intelligence](https://head-light.co.uk/workforce-intelligence-platform/)
  
  ### [Workforce Signals Surfacing the evidence layer that turns workforce data into intelligence.  ](https://head-light.co.uk/workforce-intelligence-platform/)
  
  
  
  ### [Capability Intelligence Understanding workforce capability across your organisation.](https://head-light.co.uk/workforce-intelligence-platform/capability-intelligence/)
  
  
  
  ### [Workforce Readiness Tracking organisational readiness in real time.](https://head-light.co.uk/workforce-intelligence-platform/workforce-readiness/)
  
  
  
  ### [Succession Intelligence Understanding leadership continuity and succession risk.](https://head-light.co.uk/workforce-intelligence-platform/succession-intelligence/)
  
  
  
  ### [Workforce Risk Identifying workforce capability risk before it becomes operational risk.](https://head-light.co.uk/workforce-intelligence-platform/workforce-risk/)
  
  
  
  ### [Organisational Insight Understanding workforce sentiment and organisational confidence.](https://head-light.co.uk/workforce-intelligence-platform/organisational-insight/)
- [Products](https://head-light.co.uk/products-overview/)
  
  ### [Talent 360 360-degree feedback software - spot potential, pinpoint development focus, embed recognition.](https://head-light.co.uk/products-overview/talent-360/)
  
  
  
  ### [Talent Performance Embedding a culture of performance conversation and recognition.](https://head-light.co.uk/products-overview/talent-performance/)
  
  
  
  ### [Talent Navigator Individual career ownership through career path mapping.](https://head-light.co.uk/products-overview/talent-navigator/)
  
  
  
  ### [Talent Successor Succession planning software: providing a strategic line of sight.](https://head-light.co.uk/products-overview/talent-successor/)
  
  
  
  ### [Talent SafeGuard Skills management: by the individual and for the individual.](https://head-light.co.uk/products-overview/talent-safeguard/)
  
  
  
  ### [Talent En-Gauge Plan and take action to strengthen employee engagement.](https://head-light.co.uk/products-overview/talent-en-gauge/)
  
  
  
  ### [Talent Advance Keep track of goal planning.](https://head-light.co.uk/products-overview/talent-advance/)
- [Consultancy & Training](https://head-light.co.uk/consultancy-training/)
  
  ### [Design a Skills or Competency Framework Get a skills or competency framework right for your organisation and your talent management practices make a real and lasting contribution.](https://head-light.co.uk/designing-your-competency-framework/)
  
  
  
  ### [360 and Performance Assessment Design We develop, test and validate bespoke assessments across all sectors, at every level of talent and every stage of talent management.](https://head-light.co.uk/assessment-design/)
  
  
  
  ### [Designing a Talent Management Strategy Do you have a Talent Management strategy? Do all your talent activities integrate, utilise the same language and align with your organisational strategy?](https://head-light.co.uk/talent-management-strategy/)
  
  
  
  ### [Talent Management for Managers Talent Management is not the sole domain of the HR or Learning & Development team. delivering your organisation’s people a strategy.](https://head-light.co.uk/talent-management-for-managers/)
  
  
  
  ### [Feedback Facilitator Training Investing in 360-degree feedback delivers little benefit if the review and feedback conversation is not handled properly.](https://head-light.co.uk/facilitator-training/)
  
  
  
  ### [Administrator Training Deploying a talent management software system successfully is not about luck. It requires robust and secure software, solid processes and great administrators.](https://head-light.co.uk/administrator-training/)
- [Our Blog](https://blog.head-light.co.uk)
- [Blue Light Services](https://head-light.co.uk/blue-light-services/)
  
  ### [Blue Light User Group Sharing talent management best practice and collaborating on new features to the Talent platform.](https://head-light.co.uk/blue-light-user-group/)
  
  
  
  ### [Talent Management for Police 360, PDR and talent and succession planning for police officers and staff.](https://head-light.co.uk/talent-management-for-police-forces/)
  
  
  
  ### [Talent Management for Fire and Rescue Services 360, PDR and succession planning for fire and rescue services.](https://head-light.co.uk/talent-management-for-fire-and-rescue-services/)

[TELL ME MORE](https://head-light.co.uk/contact-us/)

# Getting ready for GDPR

---

![GDPR flag](https://blog.head-light.co.uk/hubfs/Imported_Blog_Media/gdpr-flag-1.jpg)The forthcoming GDPR is causing us all take a closer look at the way in which we manage and process the personal information about employees, customers, suppliers and so on.

**But what does this mean for your talent management software? **

To help our clients, we've been on the case for months making sure that their contract with us and the functionality of their Talent system, is not one of the things they need to be worrying about.

**About the GDPR**

The General Data Protection Regulation (GDPR) aims to harmonise data protection legislation across EU member states, enhancing the privacy rights for individuals. It applies to organisations processing Personal Data based within the EU and also those organisations which operate outside the EU but oﬀer goods or services to, or monitor the behaviour of, individuals in the EU. This is applicable from 25 May 2018 and it makes clear the responsibilities of the Data Controller and the Data Processor.

**Head Light as a Data Processor**

The GDPR places specific legal obligations on us as a Data Processor and on our customers as Data Controllers. The GDPR requires us to show how we comply with the principles – for example by documenting the decisions we take about a processing activity.

As with the Data Protection Act, the GDPR applies to ‘personal data’. But its definition is more detailed and makes it clear that information such as an online identifier – eg an IP address – can be classified as personal data and this more expansive definition provides for a wide range of personal identifiers to constitute personal data.

As a Processor, we are required to maintain records of personal data and processing activities and we have greater legal liability if we are responsible for a breach. As such, our customers (as Data Controllers) need to obtain explicit consent from its own software users that this information can be used, and as the Data Processor we need to tell our customers how we process that information.

As these are new requirements and obligations for us as Processors under the GDPR, we have:

- updated our Data Protection Policy;
- rewritten our standard contract with our customers which sets out clearly how we process data and our procedure should there be a breach;
- enhanced our Talent® software to enable our customers to fulfil requests from its users based on the eight rights of individuals as outlined in GDPR.

**Head Light as a Data Controller**

Head Light also assumes the role of Data Controller for our client and prospect personal information that we store securely through encryption within our Customer Relationship Management and Marketing Automation system (our Data Processor).

As a result we have:

- updated our privacy policy on our website with full details of this, including the rights of individuals to request amends or deletions – and to unsubscribe from future communication;
- ensured our contract with our Data Processor details how the information is processed and what happens in the event of a breach.

The guidance from the Information Commissioner’s Office (ICO) regarding the changes to obtain explicit consent is being finalised and will be published by the end of 2017. At this time we will embrace and implement this guidance for those accessing our Website, those wanting to sign up to access marketing and promotional material and how we contact our clients. As we do now, we will continue to provide the opportunity to change or remove permission to use personal data.

**Our Head Light team**

We understand what constitutes a breach of data and our staff understands that this is more than a loss of personal data. We have in place an internal breach reporting procedure and this helps us to decide how we notify the relevant supervisory authority.

If you have any questions or queries about how we're gearing up for this change, then do, get in touch.

[![Get in touch](https://no-cache.hubspot.com/cta/default/2397834/df8130bb-66ee-4ece-b9c8-0b3a974eabe8.png)](https://cta-redirect.hubspot.com/cta/redirect/2397834/df8130bb-66ee-4ece-b9c8-0b3a974eabe8)

[Talent Management software](https://blog.head-light.co.uk/topic/talent-management-software)

## Related posts

<https://blog.head-light.co.uk/police-leadership-commission-report-what-it-means-for-your-force>

### [The Police Leadership Commission Report: What It Means for Your Force](https://blog.head-light.co.uk/police-leadership-commission-report-what-it-means-for-your-force)

The Police Leadership Commission report sets a clear direction for policing - and it has immediate i...

 23 Jul 2026

<https://blog.head-light.co.uk/organisational-insight-evidence-not-used>

### [Organisational Insight: evidence that organisations fail to use](https://blog.head-light.co.uk/organisational-insight-evidence-not-used)

Organisational insight is one of the most underestimated assets available to HR and business leaders...

 13 Jul 2026

<https://blog.head-light.co.uk/workforce-intelligence-platform-turns-data-into-signals>

### [How your Workforce Intelligence platform turns data into signals](https://blog.head-light.co.uk/workforce-intelligence-platform-turns-data-into-signals)

Every organisation generates data about its people continuously. Performance ratings, development ac...

 13 Jul 2026

[![HeadLight-logo-from LF for website](https://blog.head-light.co.uk/hubfs/HeadLight_Sep2016/HeadLight-logo-from%20LF%20for%20website.png)](https://head-light.co.uk/)

[![Fosway-2025](https://blog.head-light.co.uk/hs-fs/hubfs/Fosway-2025-150x150.jpg?width=150&height=150&name=Fosway-2025-150x150.jpg)](https://blog.head-light.co.uk/news/head-light-fosway-grid-2025)

 

### Useful Links

- [Home](https://head-light.co.uk/)
- [About](https://head-light.co.uk/what-makes-head-light-different/)
- [Workforce Signals](https://head-light.co.uk/workforce-intelligence-platform/)
- [Products](https://head-light.co.uk/products-overview/)
- [Blue Light Services](https://head-light.co.uk/blue-light-services/)

### Workforce Signals

- [Capability Intelligence](https://head-light.co.uk/workforce-intelligence-platform/workforce-mobility/)
- [Organisational Insight](https://head-light.co.uk/workforce-intelligence-platform/organisational-insight/)
- [Succession Intelligence](https://head-light.co.uk/workforce-intelligence-platform/organisational-insight/)
- [View All](https://head-light.co.uk/workforce-intelligence-platform/)

### Our Products

- [Talent 360](https://head-light.co.uk/products-overview/talent-360/)
- [Talent Performance](https://head-light.co.uk/products-overview/talent-performance/)
- [Talent Navigator](https://head-light.co.uk/products-overview/talent-navigator/)
- [View All](https://head-light.co.uk/products-overview/)

### Consultancy & Training

- [Consultancy & Training Services](https://head-light.co.uk/consultancy-training/)
- [Designing your competency framework](https://head-light.co.uk/designing-your-competency-framework/)
- [360 and performance assessment design](https://head-light.co.uk/assessment-design/)

### Support

- [Contact](https://head-light.co.uk/contact-us/)
- [Blog](https://blog.head-light.co.uk)
- [FAQs](https://head-light.co.uk/faqs/)
- [Resources](https://head-light.co.uk/resources/)
- [News](https://blog.head-light.co.uk/news)

 

Copyright © Head Light Ltd. All rights reserved. Company Number 05087004. **[ISMS Statement](https://blog.head-light.co.uk/news/head-light-retains-iso-27001-certification-audit-for-2025)** | [**Privacy Policy**](https://head-light.co.uk/wp-content/uploads/2024/10/PV01-HL-Privacy-Policy-v4.5-Website.pdf) | **[Terms](https://head-light.co.uk/stage/?page_id=253)** | [**ISMS Policy**](https://head-light.co.uk/wp-content/uploads/2019/12/ISMS-SIgned-2020.pdf)

 

Search Head Light

This is a search field with an autosuggest feature attached.

- There are no suggestions because the search field is empty.

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Head Light",
    "url" : "https://blog.head-light.co.uk/author/head-light"
  },
  "dateModified" : "2025-12-03T10:10:26.473Z",
  "datePublished" : "2017-10-01T23:00:00.000Z",
  "headline" : "Getting ready for GDPR",
  "image" : [ "https://blog.head-light.co.uk/hubfs/Imported_Blog_Media/gdpr-flag-1.jpg" ],
  "mainEntityOfPage" : {
    "@id" : "https://blog.head-light.co.uk/blog/gdpr-talent-management-software",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://blog.head-light.co.uk/hubfs/Version%202%20(text%20without%20shadow)-%203x%20300.png"
    },
    "name" : "Head Light"
  }
}
```