News & InfoEP StoreAcademySupportCommunityProducts by Country
Legal & Compliance Home

The UK GDPR and how Productions can Reduce their Exposure - Q&A with Sheridans

Sheridans’ Associate Krishan Neelendra answers key UK GDPR questions from production companies and freelancers.
May 3, 2022
uk-gdpr-and-how-productions-reduce-exposure-LC

We recently teamed up with Sheridans Associate Krishan Neelendra to host a webinar on the UK GDPR, where he answered key questions from production companies and project freelancers.

Although the UK GDPR is not new, an increased need to collect special category data, such as vaccination and diversity data, means that compliance remains a key concern for the production industry. 

Q. How do I know whether the UK GDPR applies to my production company?

Krishan: The UK GDPR applies to your production company if you process personal data. “Process” is interpreted broadly under the UK GDPR and essentially means dealing with personal data in any way, including transferring, analysing or merely storing it. If you do any of these things, you’re caught by the UK GDPR.

Q. I outsource all data processing to my freelance production team — am I safe from liability under the UK GDPR?

Krishan: This depends on your relationship with your freelance production team and the processing activities you undertake. However, broadly, if you’re the decision maker in relation to the processing activities (i.e., the freelance production team is acting on your behalf and in accordance with your instructions), you are a data controller and the freelance production team is a data processor.

Data controllers are primarily responsible for their own compliance and ensuring the compliance of their processors. This means that, regardless of the terms of a contract with a processor, controllers may be subject to any of the corrective measures and penalties set out in the UK GDPR (e.g., claims for compensation from a data subject and administrative fines).

However, it should be noted that data processors can still be: 

  • Contractually liable to the data controller for a failure to comply with the applicable data protection terms
  • Fined by the data protection regulator (i.e., the Information Commissioner’s Office in the UK) 
  • Subject to a claim by an individual where they fail to comply with certain data processor-specific UK GDPR obligations or act outside the data controller’s lawful instructions

Q. How can I ensure that I’m UK GDPR compliant?

Krishan: There are a number of different considerations to consider but the three golden rules for data controllers are as follows:

  • Make sure that you’ve published and implemented the relevant documentation, contracts and policies.
  • When making any personal data-related decision, always consider the seven data protection principles set out in the UK GDPR.
  • Get used to documenting any incidents, projects and decisions relating to data protection. For example, if you’re planning a project that will involve processing a lot of personal data, assess this from a data compliance perspective as soon as possible so you know what safeguards you need to implement later on.

Q. Am I allowed to collect vaccination data and, if so, what are the rules?

Krishan: Vaccination data constitutes “health data” and is therefore special category data. While the requirements largely depend on the context in which this data is collected, you should in any case: 

  • Consider whether you have a lawful basis and special condition (essentially a legal and valid justification) under data protection laws to collect the data
  • Only collect the data from individuals who you reasonably require it from 
  • Tell individuals you are collecting the data (e.g., via privacy notices and appropriate policy documents) 
  • Appropriately safeguard the data (e.g., through appropriate access controls and encryption)
  • Delete or destroy the data as soon as you no longer need it

Q. What special requirements apply to capturing diversity data?

Krishan: The requirements for capturing diversity data are largely the same as for vaccination data (above), but the analysis in relation to lawful basis and special conditions will be slightly different. The key thing to bear in mind is that you must determine a valid and legal justification for processing the data.

Q. I have fewer than 250 employees. If I carry out a one-off diversity survey, do I have to document the processing of that data?

Krishan: All personal data processing activities, regardless of the nature of the personal data, trigger certain documentation requirements. For example, you must tell the relevant individuals how you are using (or “processing”) their personal data in a privacy notice.

When carrying out a one-off diversity survey, as you are processing special category data, some additional requirements apply. In particular, you must prepare a separate “appropriate policy document” (which must set out certain information about how you are processing the special category data in accordance with data protection laws).

Q. I’m collecting data to monitor the diversity of my production, including around disabilities and caring responsibilities. These aren’t listed as types of special category data — do they count as such?

Krishan: Disability data concerns an individual’s health and therefore constitutes special category data.

In relation to caring responsibilities, while the fact that an individual is a carer is unlikely to constitute special category data, if the data reveals that an individual is a carer for a specific person (e.g., a parent or partner), it may constitute special category data of the person being cared for (depending on how the relevant information is provided). If this is the case, and you don’t reasonably require this information, your survey should avoid any invitation to provide this information (e.g., by limiting the response to the question “are you a carer for another individual?” to a simple yes/no).

Q. What is a data subject access request?

Krishan: Data subject access requests are an example of data subject rights under the UK GDPR. Effectively, any data subject can ask a company to provide them with all the information it holds about them, subject to certain limited exemptions. In recent years, there’s been an increase in the number of data subject access requests. They tend to arise in two contexts: 

  • A pre-litigation context, where a data subject may want to sue someone and is gathering information before doing so
  • A grievous employee context, where an employee has left a business and is gathering information about why they were dismissed or why certain decisions were made before taking their case to an employment tribunal

It’s important to remember that there are no formality requirements for data subject access requests. You can receive requests by phone or text and they don’t have to include the words “data subject access request.” 

Please note that the responses in this document do not constitute legal advice. If you require legal advice on any of these points, we recommend that you seek this independently.

Topic: UK

Related Content

Blue graphic with map of UK and title ICO penalty following ransomware attack

ICO issues £98,000 penalty following ransomware attack

7/13/2022
Information Commissioner’s Office (ICO) imposed penalty on a leading UK law firm for breaching the UK...
Topic: UK
More
Sian Richards and Queen Latifah-square

A Face Kit for Every Skin Tone

6/14/2022
Hollywood makeup artist Siân Richards is transforming the makeup industry for actors of every shade.
uk-gdpr-compliance-for-productions

UK GDPR Compliance for Productions: Q&A with Sheridans

5/4/2022
Special category data, liability, data transfers and reporting - Sheridans answer your questions on the UK...
Topic: UK
More
cell phone with sticky note stating sign here

Six e-Consent Myths (and Why They’re Not True)

5/2/2022
Sheridans Associate, Sarmad Saleh, debunks some common e-consent myths.
Topic: Legal
More
Master Series Women in Animation-thumbnail

Women in Animation: A 3D View

3/24/2022
Marge Dean, Mandy Tankenson, and other women leaders from across animation come together to celebrate...
Changes to UK right to work checks

Important Changes to UK Right to Work Checks

9/20/2022
On September 30, 2022 the UK rules around right to work checks will change. Here’s what productions need...
Topic: UK
More
Los Angeles Times logo-sq

Hollywood production in U.K. soars to record levels as crews complain of burnout

8/22/2022
Spending on film and high-end television shoots reach record-breaking amounts as production activity...
Cabinet Office fined for disclosing addresses

Cabinet Office Fined £500,000 for Disclosing Addresses of High-Profile Individuals

7/9/2022
The Information Commissioner’s Office (ICO) has fined the Cabinet Office £500,000 for accidentally...
Topic: UK
More
Blue graphic with map of UK and title ICO fines charity for GDPR breach

ICO Fines Charity £10,000 for UK GDPR Breach

7/9/2022
According to the ICO, the charity failed to apply appropriate organizational and technical security...
Topic: UK
More
EP Blog_Jesse Wente

Supporting Indigenous Storytellers of Canada

6/21/2022
How the Indigenous Screen Office (ISO) offers advocacy and funding for First Nations, Inuit, and Métis...
Topic: Canada
More
EP Blog_SQUARE_Fighting Hollywood Stereotypes-TTEI

Fighting Stereotypes and Rethinking Representation

5/10/2022
How TTIE is advancing authentic storytelling in Hollywood by empowering historically excluded writers and...
contracting-in-a-covid-19-world-LC

Contracting in a COVID-19 World  

5/3/2022
The pandemic has affected how UK production companies contract crew. Here’s how to reduce the impact of...
terms-to-include-uk-contracts-LC

Terms to Include in UK Crew Contracts

5/3/2022
Common terms which studios and production companies include in their UK crew contracts.
Topic: UK
More
KJ Lamb and Simon Donovan

Empowering the Next Wave of Production Accountants

5/2/2022
The EP Production Portal team was delighted to participate in the biannual Netflix Assistant Production...
recycling conversation

Sustainability in Production: Q&A with Nikki Saunders

4/22/2022
Nikki Saunders on sustainable filming practices, COVID-19, and why carbon offsetting isn’t a...
EP Blog_The Race to Net Zero is On for Big Studios

The Race to Net Zero is On for Big Studios

4/20/2022
Film and television studios are embracing the green movement in a big way. Here’s what you can expect to...
EP Blog_SQUARE_meet the cinematographer-dan-laustsen

Meet the Cinematographer

4/12/2022
A conversation with Dan Laustsen ('John Wick', 'Nightmare Alley').
EP Blog_Marge Dean

Opening Career Doors

3/29/2022
How WIA President, Marge Dean, is shaping the future of animation and empowering underrepresented genders
International Film Financing panel-featured

Film Financing Explained: International Financing

3/10/2022
International production experts discuss how producers can utilize financing systems outside of the US,...
EP Blog_SQUARE-Sound Mixer-Lora Hirschberg

Meet the Sound Mixer

3/1/2022
A conversation with Oscar-winning re-recording mixer, Lora Hirschberg ('Inception', Skywalker Sound)
Los Angeles Times logo-sq

Why the Cherokee Nation is Offering Rebates to Film in Oklahoma

2/5/2022
Joseph Chianese speaks to the LA Times on new incentive
EP Blog_SQUARE_Island Incentives

A Ticket to Paradise

1/26/2022
Island Incentives Bring Productions Ashore
Western Canada

Production Tax Incentives in Western Canada Every Producer Should Know About

10/4/2022
Alberta and Manitoba offer film and TV productions competitive tax incentive programs and versatile...

Film Industry Booms in Buffalo

9/20/2022
Western New York draws top filmmakers with expanded tax incentives, new soundstages, and architectural...
EP Blog_SQUARE_New York

NY Convenience Rule Impacts Remote Production Workers and Film Incentives

9/13/2022
How remote employee payroll taxes apply to New York-based productions and if an employee’s physical...
Master Series Square Thumbnail-Film Financing-Crowdfunding

Film Financing Explained: Crowdfunding

9/8/2022
Emily Best (Seed&Spark), Stacy Bradford (Indiegogo), and producer Zach Fineblum join us to discuss the ins...
EP Blog_SQUARE_US Expanded Incentives 2022-2

A Record Number of US States Expand Filmmaking Incentives in 2022

8/25/2022
Your guide to the latest news in production incentives and film programs to come from the 2022 legislative...
EP Blog_SQUARE_New US Incentives 2022

New US Film Incentives Introduced in Arizona, Indiana, Florida, and West Virginia

8/23/2022
As production continues to boom, new tax credits and other programs welcome industry to new locations...
EP Webinar Panelists - US Production Incentives Update

US Production Incentives Update: New and Expanded Programs in 2022

8/19/2022
Film commissioners Colleen Bell and Sandy Lighterman, and production executives Jay Roewe and Ashley Rice,...
EP Blog_SQUARE-Atlantic Canada Expands Incentives

Atlantic Canada Expands Film Incentives in 2022

8/16/2022
Enhanced production incentive programs attract industry to Newfoundland & Labrador, Nova Scotia, and...
Streaming platform on tablet device

The Evolution of Residuals: How Streaming Changed the Model

8/11/2022
Understanding how residuals payments are calculated for new content on streaming platforms.
EP Blog_SQUARE_Penka Kouneva-2

Meet the Composer

8/2/2022
A conversation with award-winning orchestrator and composer Penka Kouneva (‘Revenge,’ ‘Pirates of the...
Compliant crew contracting panel-square

Compliant Crew Contracting in the UK

8/1/2022
Learn how to ensure your crew contracts are compliant with UK regulations and why the Production Portal is...
Topic: UK
Watch
dollar signs representing digital crowdfunding

The Beginner’s Guide to Crowdfunding

7/26/2022
How filmmakers can leverage the power of social networks and online platforms to build buzz and secure...
Mount Hood, Oregon

Building on Oregon’s Cinema Legacy

7/19/2022
How improved tax Incentives, job training, and production infrastructure is expanding the filmmaking...
5 Master Series panelists discussing Atlantic Canada production incentives-square

Production Incentives Update: Atlantic Canada

7/15/2022
Learn how productions can benefit from newly expanded incentives in Nova Scotia, Newfoundland & Labrador,...
EP Blog_SQUARE_Wes Hagen

Meet the Location Manager

7/7/2022
A conversation with award-winning location manager Wes Hagen ('Ozark,' 'Hidden Figures.')
EP Blog_SQUARE_filmmaking in new mexico

Forging the Future of Filmmaking in New Mexico

6/29/2022
As the film industry expands in the Southwest, New Mexico leads the region as top destination thanks to...
EP Blog_SQUARE-Pitching Reality Tv-2

Pitching and Financing Unscripted Television

6/7/2022
Ready to sell your big idea for a reality TV program? This guide will help prepare you for the road ahead.
Jennifer Liscio

Spotlight: Jennifer Liscio, VP of Tax Incentives and Legal Affairs

5/31/2022
Meet EP's Canadian legal affairs and tax incentives domain expert, Jennifer Liscio, and learn how she’s...
EP Blog_SQUARE-Historical content and new media

Residuals and the Streaming Model

5/24/2022
How residuals apply to historical content on new media platforms.
Oklahoma route 66 sign

A New Frontier in Filmmaking

5/5/2022
Oklahoma is becoming a production destination, thanks to new incentives and infrastructure programs.
six-elements-for-uk-contracts-LC

Six Elements for Enforceable UK Crew Contracts

5/2/2022
Although parties to a crew contract can largely enter into whatever terms they choose, certain elements...
Topic: UK
More
EP blog-square-tax day

Tips for Tax Day 2022

4/5/2022
Your ultimate tax filing checklist - the deadline this year is Monday, April 18th!

Georgia Proposes Capping and Prohibiting Sale of Film Tax Credits

3/30/2022
The changes, if signed into law, would cap the amount Georgia hands out in film and TV tax credits at $900...
EP Newsroom-Thumbnail-Portland Business Journal

How Oregon’s updated film incentive law could boost the local economy

3/29/2022
A new Oregon film and media incentive law could draw more movie productions to the state.
EP Blog-proud to support-square

Proud to Support: Celebrating Client Nominations at the 94th Academy Awards

3/22/2022
A look at the evolution of the Oscars and the notable films powered by Entertainment Partners technology.
Bradley Cooper-nightmare alley

Meet the Assistant Director

3/16/2022
A conversation with Myron Hoffert ('Nightmare Alley')
Digging Out of a Deficit-featured

Digging Out of a Deficit: What to Expect in the Second Quarter of 2022

2/25/2022
Federal and State Unemployment Insurance rates are rising. Learn how these changes will affect 2022 and...
EP Blog_Uncovering Treasures_IndieCollect

Uncovering Lost Treasures of Independent Film

2/23/2022
How IndieCollect is preserving Black independent films to reflect a more honest view of America and of...
International Financing-John Hadity-ft

The Beginner’s Guide to International Film Financing

2/15/2022
What to know before you begin an international financing plan
Crew contracting in the UK-panel

Quick and Compliant Crew Contracting in the UK

2/9/2022
Neisha Glynternick and Sarmad Saleh from UK-based entertainment law firm Sheridans discuss crew...
Topic: Legal
Watch
meet-the-executive-producer-just-mercy-sq

Meet the Executive Producer

2/8/2022
A conversation with Mike Drake ('Just Mercy') on the path to becoming and EP, and the role of social...
EP-Blog-Meet-the-Set-Decorator-2

Meet the Set Decorator

1/19/2022
A Conversation with Claire Kaufman ('Little Women')

Payroll & Finances

PayrollResidualsSmartStartNew SmartTimeProduction PortalEP On LocationSmartAccountingEP LiveSmartPOCASHétPayPaymaster Rate GuideEP Residency

Manage Multiple Productions

AssetHubSmartHubSmartHub Vault
Subscribe now

Be an industry insider with EP's
newsletters and alerts

LegalPrivacy NoticeSecurity
© 2022 Entertainment Partners. All rights reserved.