The General Data Protection Regulation (GDPR), aka the Algemene Verordening Gegevensbescherming (AVG) in the Netherlands, came into force on May 25, 2018. In the Netherlands it replaced the former data protection legislation.

The regulation recognizes that people have a digital footprint which can identify personal and private details, that individuals have a right to control information about themselves, and that this information is not a free-for-all commodity to be commercialized.

The GDPR is designed to:

  • give individuals more power to control their own personal data, including the power to be “forgotten”
  • ensure personal data is securely stored, backed up by hefty fines for breaches. (up to 20m euros or 4% of turnover)
  • improve trust and harmonise data protection laws across Europe.

The GDPR applies to personal data—this is anything that relates to or can be used to identify a person in any way, such as name, address, photo, social media accounts, email, bank account, IP address, and medical records. Data means digital files, but also well-structured physical files (which would let many of the journalists I know off the hook).

In a nutshell, GDPR is about recognizing that personal data is a precious thing and individuals own their own personal data. Think of personal data as a digital diamond ring; you must have permission to handle it and share it with other people or you’ll be faced with a big bill if it goes missing.

The journalism exemption

Much of what journalists do is subject to an exemption which allows them to actually do their work. However, not exempt is the responsibility to ensure the personal data being held is secure by using encryption on devices, locked cupboards and even diligent checking of emails to make sure they are not sent to the wrong person through a CC (rather than a BCC). This could also potentially include handing over a group email address for the purposes other than what it is intended for.

The journalism exemption covers a wide range of people, not just journalists. It pertains to journalistic purpose, the intention to publish and public interest rather than defining who is a journalist.

This document is designed to be a GDPR in a (very small) nutshell. For more in-depth briefings see the following links, or just Google:

Guidance for freelancers from the NUJ. (Note this is a members-only resource)

Normally the NUJ offers training, but this is suspended until the end of May due to Covid-19. Check the NUJ website for resumption dates.

GDPR for business briefing from


Hot topics

  • Cross-border Freelancing and UK citizens living in the EU after 2020

    16 September 2020
    The EU’s recently published guidelines to the Withdrawal Agreement with the UK say British citizens who live in Europe will no longer be permitted to work across borders. What this means and what can be done about it.
  • Brit freelances in EU to lose right to sell cross-border services?

    05 August 2020
    AFTER THE transition period following Brexit ends on 1 January 2021 and the UK leaves the EU's Single Market, UK nationals living in an EU Member State face losing the right to provide "cross border" services to another EU country.
  • TOFA - until Sunday 12 July to make a claim

    06 July 2020
    Flexible workers, such as those on zero-hours contracts, who because of the corona crisis may have lost a large part of their income, but who cannot claim benefits, have until Sunday 12 July to make a claim under the government’s Temporary Bridging Scheme for Flexible Workers (TOFA) .
  • Advice for NUJ members reporting on protests

    06 June 2020
    NUJ members working this weekend covering the George Floyd solidarity protests need to plan accordingly and take appropriate health and safety precautions - there may be a range of people hostile to journalists. There have already been instances of journalists attacked.
  • The two types of TOZO help available to freelancers

    28 May 2020
    Freelance journalists and photographers who want to apply for the Government’s special financial support as a result of the Corona virus lock-down (TOZO) should submit their APPLICATION BEFORE THE 1 JUNE. This covers the months March, April and May.

heart unions


whistleblower projtection campaign 2016