Impact of new GDPR on firms using legacy faxing

We provide EU data protection directive (GDPR) compliant fax solutions

The EU’s new General Data Protection Regulation (GDPR) is due to come into force in May 2018. And with the government confirming the decision to leave the EU will not affect the commencement of the GDPR, UK organisations cannot just disregard the regulations with Brexit around the corner.

The rules increase privacy for individuals and give authorities greater powers to enforce data protection laws and take action against any organisations that commit data breaches.

This is a major area of concern that has been highlighted to us for organisations that are still using traditional faxes. Particularly in the health and legal sectors, where their use is still common. The continued use of traditional faxes by these organisations could mean that they will soon be in breach of the new GDPR.

The EU GDPR and faxes

In relation to the use of faxes the following elements of GDPR should be reviewed.

An individual’s personal data is to be protected at all times

In many organisations traditional faxes cannot adhere to this requirement because they are often sent to a communal fax machine and not directly to an approved individual.

In any transmission of data there are two traditional paper faxes containing an individual’s personal private data, meaning the system is too easily open to breaches of privacy and abuse. Faxes can also often go missing or get misplaced, particularly where a number of faxes are being sent/received on the same machine.

Individuals may request all data kept on them (in a portable format)

Under the GDPR users can request a copy of all data that an organisation has on them. Any individual can request copies of all the faxes that have been sent or received, which contain data on them. This presents significant hurdles for organisations still using traditional paper faxes, in terms of them being able to collate, store and issue hard copies in a portable format.

Our digital fax services

Security, privacy and protection

The digital fax services that we provide are fully compliant with the EU GDPR. They do not require the use of a fax machine; instead faxes are sent and received by email, thus ensuring the privacy of the data is protected. Only authorised users with access to the email can read the faxes. All faxes are processed by the sender’s and recipient’s own organisations’ mail servers, so that their faxes have the same level of privacy, protection and security as their emails.

Data requests

All faxes are sent and stored digitally. Therefore, they can be easily retrievable and supplied in a portable format, and within a reasonable time period, should an individual request a copy of all the data stored on them.

Data storage and transit

All of the servers that we use for transmitting and storage of our customers’ digital fax data reside in our secure data centres, which are all based in the EU – a requirement of the GDPR.

This enables the routing of data to be restricted to within the EU’s boundaries or any country that has been authorised as complying with GDPR. Where possible faxes are sent encrypted, if our customer’s servers support it – even cross-server transmissions within our own data centres are encrypted.

Set up and transfer of your fax numbers to Soho66

Use of our digital fax services by our customers ensures they are fully compliant with the GDPR.

It is easy to set up and migrate your organisation from a traditional fax service to our digital fax-to-email service. You can keep and transfer your existing fax numbers to us seamlessly, without a break in service.

Penalties for non-compliance

The GDPR enacts tough new rules that allows authorities to penalise organisations that are non-compliant. Tough penalties can be imposed with fines of up to 4% of annual global revenue or €20 million (whichever is greater). With our digital fax numbers costing only £2.99 per month, can you afford to not to move to a digital fax?