EP NowEP StoreAcademySupportCommunityProducts by Country
Legal & Compliance Home

The UK GDPR and how Productions can Reduce their Exposure - Q&A with Sheridans

Sheridans’ Associate Krishan Neelendra answers key UK GDPR questions from production companies and freelancers.
May 3, 2022
uk-gdpr-and-how-productions-reduce-exposure-LC

We recently teamed up with Sheridans Associate Krishan Neelendra to host a webinar on the UK GDPR, where he answered key questions from production companies and project freelancers.

Although the UK GDPR is not new, an increased need to collect special category data, such as vaccination and diversity data, means that compliance remains a key concern for the production industry. 

Q. How do I know whether the UK GDPR applies to my production company?

Krishan: The UK GDPR applies to your production company if you process personal data. “Process” is interpreted broadly under the UK GDPR and essentially means dealing with personal data in any way, including transferring, analysing or merely storing it. If you do any of these things, you’re caught by the UK GDPR.

Q. I outsource all data processing to my freelance production team — am I safe from liability under the UK GDPR?

Krishan: This depends on your relationship with your freelance production team and the processing activities you undertake. However, broadly, if you’re the decision maker in relation to the processing activities (i.e., the freelance production team is acting on your behalf and in accordance with your instructions), you are a data controller and the freelance production team is a data processor.

Data controllers are primarily responsible for their own compliance and ensuring the compliance of their processors. This means that, regardless of the terms of a contract with a processor, controllers may be subject to any of the corrective measures and penalties set out in the UK GDPR (e.g., claims for compensation from a data subject and administrative fines).

However, it should be noted that data processors can still be: 

  • Contractually liable to the data controller for a failure to comply with the applicable data protection terms
  • Fined by the data protection regulator (i.e., the Information Commissioner’s Office in the UK) 
  • Subject to a claim by an individual where they fail to comply with certain data processor-specific UK GDPR obligations or act outside the data controller’s lawful instructions

Q. How can I ensure that I’m UK GDPR compliant?

Krishan: There are a number of different considerations to consider but the three golden rules for data controllers are as follows:

  • Make sure that you’ve published and implemented the relevant documentation, contracts and policies.
  • When making any personal data-related decision, always consider the seven data protection principles set out in the UK GDPR.
  • Get used to documenting any incidents, projects and decisions relating to data protection. For example, if you’re planning a project that will involve processing a lot of personal data, assess this from a data compliance perspective as soon as possible so you know what safeguards you need to implement later on.

Q. Am I allowed to collect vaccination data and, if so, what are the rules?

Krishan: Vaccination data constitutes “health data” and is therefore special category data. While the requirements largely depend on the context in which this data is collected, you should in any case: 

  • Consider whether you have a lawful basis and special condition (essentially a legal and valid justification) under data protection laws to collect the data
  • Only collect the data from individuals who you reasonably require it from 
  • Tell individuals you are collecting the data (e.g., via privacy notices and appropriate policy documents) 
  • Appropriately safeguard the data (e.g., through appropriate access controls and encryption)
  • Delete or destroy the data as soon as you no longer need it

Q. What special requirements apply to capturing diversity data?

Krishan: The requirements for capturing diversity data are largely the same as for vaccination data (above), but the analysis in relation to lawful basis and special conditions will be slightly different. The key thing to bear in mind is that you must determine a valid and legal justification for processing the data.

Q. I have fewer than 250 employees. If I carry out a one-off diversity survey, do I have to document the processing of that data?

Krishan: All personal data processing activities, regardless of the nature of the personal data, trigger certain documentation requirements. For example, you must tell the relevant individuals how you are using (or “processing”) their personal data in a privacy notice.

When carrying out a one-off diversity survey, as you are processing special category data, some additional requirements apply. In particular, you must prepare a separate “appropriate policy document” (which must set out certain information about how you are processing the special category data in accordance with data protection laws).

Q. I’m collecting data to monitor the diversity of my production, including around disabilities and caring responsibilities. These aren’t listed as types of special category data — do they count as such?

Krishan: Disability data concerns an individual’s health and therefore constitutes special category data.

In relation to caring responsibilities, while the fact that an individual is a carer is unlikely to constitute special category data, if the data reveals that an individual is a carer for a specific person (e.g., a parent or partner), it may constitute special category data of the person being cared for (depending on how the relevant information is provided). If this is the case, and you don’t reasonably require this information, your survey should avoid any invitation to provide this information (e.g., by limiting the response to the question “are you a carer for another individual?” to a simple yes/no).

Q. What is a data subject access request?

Krishan: Data subject access requests are an example of data subject rights under the UK GDPR. Effectively, any data subject can ask a company to provide them with all the information it holds about them, subject to certain limited exemptions. In recent years, there’s been an increase in the number of data subject access requests. They tend to arise in two contexts: 

  • A pre-litigation context, where a data subject may want to sue someone and is gathering information before doing so
  • A grievous employee context, where an employee has left a business and is gathering information about why they were dismissed or why certain decisions were made before taking their case to an employment tribunal

It’s important to remember that there are no formality requirements for data subject access requests. You can receive requests by phone or text and they don’t have to include the words “data subject access request.” 

Please note that the responses in this document do not constitute legal advice. If you require legal advice on any of these points, we recommend that you seek this independently.

Topic: UK

Related Content

ICO Issues 4.4M Penalty

ICO Warns Against Complacency as it Hands Out £4.4M GDPR Penalty

11/16/2022
The Information Commissioner’s Office (ICO) imposes hefty penalty for failing to protect employee personal...
Topic: Security
More
Blue graphic with map of UK and title ICO penalty following ransomware attack

ICO issues £98,000 penalty following ransomware attack

7/13/2022
Information Commissioner’s Office (ICO) imposed penalty on a leading UK law firm for breaching the UK...
Topic: UK
More
Sian Richards and Queen Latifah-square

A Face Kit for Every Skin Tone

6/14/2022
Hollywood makeup artist Siân Richards is transforming the makeup industry for actors of every shade.
uk-gdpr-compliance-for-productions

UK GDPR Compliance for Productions: Q&A with Sheridans

5/4/2022
Special category data, liability, data transfers and reporting - Sheridans answer your questions on the UK...
Topic: UK
More
cell phone with sticky note stating sign here

Six e-Consent Myths (and Why They’re Not True)

5/2/2022
Sheridans Associate, Sarmad Saleh, debunks some common e-consent myths.
Topic: Legal
More

7 Things Production Finance Teams Need to Know for Budgeting in 2023

1/25/2023
Mark Hammond, VP of International Finance & Ops, shares some of the key factors production finance teams...

New Union Agreement for Engaging Crew on UK HETV Takes Effect

1/20/2023
Pact/Bectu 2023 agreement makes a number of key changes to the terms and conditions for engaging crew.
Topic: UK
More
Virtual Production

The UK Invests in Virtual Production as Content Boom Continues

1/10/2023
The UK is doubling down on Virtual Production infrastructure; learn how and why they’re leading the charge...
Topic: UK
More
Doctor Strange

9 Hollywood Blockbusters Actually Filmed in the UK

12/27/2022
Major US studios are taking advantage of what the UK has to offer, and clever set design and special...
Topic: UK
More

UK Production Incentives All Producers Should Know About

11/17/2022
Don't miss out on the UK's tax incentives, special programs, and national and regional funding...

Behind the Boom: Why the UK is a Hotspot for Production

11/17/2022
Explore the generous industry incentives, talent, and infrastructure available to productions filming in...
UK Court Issues Warning for Personal Data at Work

UK Court Issues Warning for those with Access to Personal Data at Work 

10/12/2022
UK Coventry Magistrates’ Court fines a former health adviser £3,000 for unlawfully accessing personal data...
Topic: UK
More
Changes to UK right to work checks

Important Changes to UK Right to Work Checks

9/20/2022
On September 30, 2022 the UK rules around right to work checks will change. Here’s what productions need...
Topic: UK
More
Los Angeles Times logo-sq

Hollywood production in U.K. soars to record levels as crews complain of burnout

8/22/2022
Spending on film and high-end television shoots reach record-breaking amounts as production activity...
Cabinet Office fined for disclosing addresses

Cabinet Office Fined £500,000 for Disclosing Addresses of High-Profile Individuals

7/9/2022
The Information Commissioner’s Office (ICO) has fined the Cabinet Office £500,000 for accidentally...
Topic: UK
More
Blue graphic with map of UK and title ICO fines charity for GDPR breach

ICO Fines Charity £10,000 for UK GDPR Breach

7/9/2022
According to the ICO, the charity failed to apply appropriate organizational and technical security...
Topic: UK
More
EP Blog_Jesse Wente

Supporting Indigenous Storytellers of Canada

6/21/2022
How the Indigenous Screen Office (ISO) offers advocacy and funding for First Nations, Inuit, and Métis...
Topic: Canada
More
EP Blog_SQUARE_Fighting Hollywood Stereotypes-TTEI

Fighting Stereotypes and Rethinking Representation

5/10/2022
How TTIE is advancing authentic storytelling in Hollywood by empowering historically excluded writers and...
contracting-in-a-covid-19-world-LC

Contracting in a COVID-19 World  

5/3/2022
The pandemic has affected how UK production companies contract crew. Here’s how to reduce the impact of...
terms-to-include-uk-contracts-LC

Terms to Include in UK Crew Contracts

5/3/2022
Common terms which studios and production companies include in their UK crew contracts.
Topic: UK
More
KJ Lamb and Simon Donovan

Empowering the Next Wave of Production Accountants

5/2/2022
The EP Production Portal team was delighted to participate in the biannual Netflix Assistant Production...
EP Newsroom-Thumbnail-PGGB

6FT From The Spotlight Wins Inaugural Earl of Wessex Award at PGGB Talent Showcase

1/25/2023
Film and TV industry charity 6ft From the Spotlight were awarded The Production Guild of Great Britain’s...

Entertainment Partners and Netflix Pledge £500K ($608K) to New PGGB Talent Development Fund

1/25/2023
Production Guild of Great Britain (PGGB) Talent Development Fund will support the development and...
Master Series square Thumbnail Pact Bectu Agreement

Understanding the New Pact/Bectu TV Drama Agreement 2023

1/12/2023
Your comprehensive overview of the new Pact/Bectu TV Drama Agreement and how key changes will impact...
Topic: UK
Watch

Hawaii 2023 Loan-Out GET Tax Rule FAQs

1/5/2023
Productions seeking a Hawaii tax credit must withhold and report general excise tax (GET) on loan-outs in...

Meet the Music Supervisor

1/4/2023
Kasey Truman ('Grey’s Anatomy,' 'The Sandman,' 'Fire Country') on the art of creating cinematic...

Production Incentives Update: December 2022

12/27/2022
A look at changing film incentive programs across the US, Canada, and Czech Republic.
tax

Hawaii Production Tax Incentives Notice

12/22/2022
Hawaii announces new rules and procedures for reporting and paying loan-out HI General Excise Tax (GET)...

Budgeting and Forecasting Film and Television Residuals

12/13/2022
What production accountants need to know to confidently budget and forecast for residuals.
Master Series Budgeting 2023

Budgeting for 2023: Federal, State, and Incentive Considerations

12/9/2022
Learn what Federal and State payroll tax changes are coming in 2023, plus tips for setting up your...

Three Mistakes That Can Slow Down Your Production Payroll (And How to Avoid Them)

11/11/2022
Stay compliant with UK rules and regulations, and get your crew and talent paid on time, with these...

Production Incentives Update: November 2022

11/1/2022
Don't miss these US incentive programs, accepting applications now!

The Production Accountant’s Guide to Year-End Payroll

11/1/2022
A step-by-step breakdown of how to navigate pitfalls and fix production payroll errors for a smooth year...

US Production Incentives Special Alert: Hawaii

11/1/2022
Hawaii amends Motion Picture, Digital Media, and Film Production Income Tax Credit

Preparing for Year End: Focus, Find, and Fix!

10/28/2022
EP's payroll tax experts share best practices to identify and resolve payroll tax errors for a smooth year...

Special Report: Entertainment – A Hollywood Education

10/24/2022
It’s the best of times and the worst of times for employment in the entertainment/streaming industry.

Special Report: Entertainment – Soundstage Gold Rush

10/24/2022
Hollywood is experiencing an ongoing boom that fills its Los Angeles production hub to overflow levels.
UK Govt backtracks on growth plan

UK Government Backtracks on Growth Plan: What it Means for Production

10/18/2022
Former UK Chancellor Kwasi Kwarteng was replaced by Jeremy Hunt after 38-day run, and policies reversed in...
Topic: UK
More
EP Blog_SQUARE_Creating a development budget

The Beginner’s Guide to Creating a Development Budget

10/18/2022
Before you start the filmmaking process, learn what basics you need to budget for to get your idea off the...
Changes to UK Pensions Act

Proposed Changes to the UK Pensions Act Could Impact Production Budgets

10/12/2022
Reintroduced bill seeks to give UK government the power to extend pensions auto-enrollment to young and...
Topic: UK
More
UK Gov Growth Plan

Mini Budget; Big Changes: What the UK Government’s Growth Plan Means for Production 

10/12/2022
UK Chancellor Kwasi Kwarteng announces new Growth Plan (aka the “mini budget”) and a big shake up of the...
Topic: UK
More
EP Blog_SQUARE_Streaming service

Streaming Services Expand to Latin America and New Audiences

10/11/2022
SVOD providers look to Latin America as a gateway to global stories and new subscribers
Western Canada

Production Tax Incentives in Western Canada Every Producer Should Know About

10/4/2022
Alberta and Manitoba offer film and TV productions competitive tax incentive programs and versatile...

Film Industry Booms in Buffalo

9/20/2022
Western New York draws top filmmakers with expanded tax incentives, new soundstages, and architectural...
EP Blog_SQUARE_New York

NY Convenience Rule Impacts Remote Production Workers and Film Incentives

9/13/2022
How remote employee payroll taxes apply to New York-based productions and if an employee’s physical...
Master Series Square Thumbnail-Film Financing-Crowdfunding

Film Financing Explained: Crowdfunding

9/8/2022
Emily Best (Seed&Spark), Stacy Bradford (Indiegogo), and producer Zach Fineblum join us to discuss the ins...
EP Blog_SQUARE_US Expanded Incentives 2022-2

A Record Number of US States Expand Filmmaking Incentives in 2022

8/25/2022
Your guide to the latest news in production incentives and film programs to come from the 2022 legislative...
EP Blog_SQUARE_New US Incentives 2022

New US Film Incentives Introduced in Arizona, Indiana, Florida, and West Virginia

8/23/2022
As production continues to boom, new tax credits and other programs welcome industry to new locations...
EP Webinar Panelists - US Production Incentives Update

US Production Incentives Update: New and Expanded Programs in 2022

8/19/2022
Film commissioners Colleen Bell and Sandy Lighterman, and production executives Jay Roewe and Ashley Rice,...
EP Blog_SQUARE-Atlantic Canada Expands Incentives

Atlantic Canada Expands Film Incentives in 2022

8/16/2022
Enhanced production incentive programs attract industry to Newfoundland & Labrador, Nova Scotia, and...
Streaming platform on tablet device

The Evolution of Residuals: How Streaming Changed the Model

8/11/2022
Understanding how residuals payments are calculated for new content on streaming platforms.
EP Blog_SQUARE_Penka Kouneva-2

Meet the Composer

8/2/2022
A conversation with award-winning orchestrator and composer Penka Kouneva (‘Revenge,’ ‘Pirates of the...
Compliant crew contracting panel-square

Compliant Crew Contracting in the UK

8/1/2022
Learn how to ensure your crew contracts are compliant with UK regulations and why the Production Portal is...
Topic: UK
Watch
dollar signs representing digital crowdfunding

The Beginner’s Guide to Crowdfunding

7/26/2022
How filmmakers can leverage the power of social networks and online platforms to build buzz and secure...
Mount Hood, Oregon

Building on Oregon’s Cinema Legacy

7/19/2022
How improved tax Incentives, job training, and production infrastructure is expanding the filmmaking...
5 Master Series panelists discussing Atlantic Canada production incentives-square

Production Incentives Update: Atlantic Canada

7/15/2022
Learn how productions can benefit from newly expanded incentives in Nova Scotia, Newfoundland & Labrador,...
EP Blog_SQUARE_Wes Hagen

Meet the Location Manager

7/7/2022
A conversation with award-winning location manager Wes Hagen ('Ozark,' 'Hidden Figures.')
EP Blog_SQUARE_filmmaking in new mexico

Forging the Future of Filmmaking in New Mexico

6/29/2022
As the film industry expands in the Southwest, New Mexico leads the region as top destination thanks to...
EP Blog_SQUARE-Pitching Reality Tv-blue

Pitching and Financing Unscripted Television

6/7/2022
Ready to sell your big idea for a reality TV program? This guide will help prepare you for the road ahead.
Jennifer Liscio

Spotlight: Jennifer Liscio, VP of Tax Incentives and Legal Affairs

5/31/2022
Meet EP's Canadian legal affairs and tax incentives domain expert, Jennifer Liscio, and learn how she’s...
EP Blog_Residuals and the streaming model

Residuals and the Streaming Model

5/24/2022
How residuals apply to historical content on new media platforms.
Oklahoma route 66 sign

A New Frontier in Filmmaking

5/5/2022
Oklahoma is becoming a production destination, thanks to new incentives and infrastructure programs.

Payroll & Finances

PayrollResidualsSmartStartNew SmartTimeProduction PortalEP On LocationSmartAccountingEP LiveSmartPOCASHétPayPaymaster Rate GuideEP Residency

Manage Multiple Productions

AssetHubSmartHubSmartHub Vault
Subscribe now

Be an industry insider with EP's
newsletters and alerts

LegalPrivacy NoticeSecurity
© 2023 Entertainment Partners. All rights reserved.