GDPR Essentials for Small Businesses | Sprintlaw

In a world where data is one of your business’s most valuable assets, protecting personal information is no longer optional - it’s essential. The UK GDPR sets out strict requirements for how businesses collect, store, and use customer data, and small business owners are not exempt.

Whether you manage a customer mailing list, process online payments, or track website behaviour, understanding your GDPR and data protection responsibilities is key to avoiding costly breaches, staying legally compliant, and maintaining customer trust.

Sprintlaw’s Webinar + Live Q&A breaks down UK GDPR in plain English, giving small business owners clear, practical guidance they can apply immediately - no legal background required.

Learn more about Sprintlaw and how we help businesses here: https://sprintlaw.co.uk

Disclaimer: Please note that information provided in this presentation is general advice only, and should not be relied on as legal advice. You should obtain specific legal or other professional advice before relying on any content contained on this website.

Chapters:
00:00:09 Welcome
00:00:44 Webinar intro + Sprintlaw overview
00:03:07 Agenda: what we’ll cover
00:04:27 GDPR explained (UK GDPR vs EU GDPR)
00:06:20 GDPR roles: data subject, controller, processor (with example)
00:09:45 Lawful bases for processing (consent, contract, legitimate interests)
00:16:01 Consent best practice (forms, tick boxes, soft opt-in)
00:23:46 Cookie consent basics (essential vs non-essential)
00:28:12 Data subject rights + handling requests (access/erasure/portability)
00:35:08 Data breaches: prevention + 72-hour reporting
00:40:25 Working with suppliers: DPAs, contractors, international vendors
00:47:23 ICO data protection fee + what happens if you don’t comply
00:50:57 Practical checklist: top steps for small businesses
00:53:32 Q&A: DPIAs (when you need one)