Can your visitors see who has been in the building before them? Are their personal details on show for everyone to see? This is a GDPR breach and your establishment could face a substantial fine.
Individuals have the right to be informed
When signing in, a visitor should be shown a visitor policy to be informed why the data is needed and how it will be used. If the lawful basis for collecting and processing the data is consent, this must be clearly communicated and cannot be assumed. Your visitor’s consent must be explicably granted. Do you show a separate visitor policy explaining this alongside your sign-in book?
Enjoyed this? Read more from Howard Jones, Unified World