The General Data Protection Regulation (GDPR), aka the Algemene Verordening Gegevensbescherming (AVG) in the Netherlands, came into force on May 25, 2018. In the Netherlands it replaced the former data protection legislation.

The regulation recognizes that people have a digital footprint which can identify personal and private details, that individuals have a right to control information about themselves, and that this information is not a free-for-all commodity to be commercialized.

The GDPR is designed to:

  • give individuals more power to control their own personal data, including the power to be “forgotten”
  • ensure personal data is securely stored, backed up by hefty fines for breaches. (up to 20m euros or 4% of turnover)
  • improve trust and harmonise data protection laws across Europe.

The GDPR applies to personal data—this is anything that relates to or can be used to identify a person in any way, such as name, address, photo, social media accounts, email, bank account, IP address, and medical records. Data means digital files, but also well-structured physical files (which would let many of the journalists I know off the hook).

In a nutshell, GDPR is about recognizing that personal data is a precious thing and individuals own their own personal data. Think of personal data as a digital diamond ring; you must have permission to handle it and share it with other people or you’ll be faced with a big bill if it goes missing.

The journalism exemption

Much of what journalists do is subject to an exemption which allows them to actually do their work. However, not exempt is the responsibility to ensure the personal data being held is secure by using encryption on devices, locked cupboards and even diligent checking of emails to make sure they are not sent to the wrong person through a CC (rather than a BCC). This could also potentially include handing over a group email address for the purposes other than what it is intended for.

The journalism exemption covers a wide range of people, not just journalists. It pertains to journalistic purpose, the intention to publish and public interest rather than defining who is a journalist.

This document is designed to be a GDPR in a (very small) nutshell. For more in-depth briefings see the following links, or just Google:

Guidance for freelancers from the NUJ. (Note this is a members-only resource)

Normally the NUJ offers training, but this is suspended until the end of May due to Covid-19. Check the NUJ website for resumption dates.

GDPR for business briefing from


Hot topics

  • TOFA - until Sunday 12 July to make a claim

    06 July 2020
    Flexible workers, such as those on zero-hours contracts, who because of the corona crisis may have lost a large part of their income, but who cannot claim benefits, have until Sunday 12 July to make a claim under the government’s Temporary Bridging Scheme for Flexible Workers (TOFA) .
  • Advice for NUJ members reporting on protests

    06 June 2020
    NUJ members working this weekend covering the George Floyd solidarity protests need to plan accordingly and take appropriate health and safety precautions - there may be a range of people hostile to journalists. There have already been instances of journalists attacked.
  • The two types of TOZO help available to freelancers

    28 May 2020
    Freelance journalists and photographers who want to apply for the Government’s special financial support as a result of the Corona virus lock-down (TOZO) should submit their APPLICATION BEFORE THE 1 JUNE. This covers the months March, April and May.
  • Northern Ireland unites against threats to journalists

    21 May 2020
    The publishers of three Belfast-based newspapers and the National Union of Journalists (NUJ) have joined together to stand up for journalists and press freedom in Northern Ireland.
  • Covid-19 update

    01 May 2020
    British freelance journalists and photographers may have left the European Union but can still apply for the Corona virus emergency funds - TOZO - without affecting their residence status.

heart unions


whistleblower projtection campaign 2016