GDPR and Charities

Subscribe for Updates

How will Fundraising be impacted?

On Friday 25 May 2018, The General Data Protection Regulation (“GDPR”) will come into force and have an impact on how charities will be able to fundraise and use or process personal data.

GDPR will replace the current Data Protection Act 1998. This will mean that every organisation in every business sector including charities will have to be compliant with the new law if they use and store personal data and information. The new law will make it a legal responsibility of the charity to make sure individuals’ rights are taken seriously and that the correct policies and procedures are in place to protect information used, processed or held by the charity.

The Institute of Fundraising and the Fundraising Regulator have published joint guidance on GDPR which is intended to “fully equip fundraisers” ahead of the regulation.

GDPR is not designed to stop charities fundraising or contacting people through marketing materials but it is designed to make sure charities and other businesses are looking after and protecting stored personal data and only using it for a “valid lawful basis”.

The joint GDPR guidance from the Institute of Fundraising and the Fundraising Regulator highlights six circumstances when personal data can be used (or processed):

  1. Consent – you can show that an individual has performed a clear affirmative action (such as saying “yes” to a question or ticking an opt-in box) to allow you to process their personal data for a specific purpose;
  2. Contract – the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract;
  3. Legal obligation – the processing is necessary for you to comply with the law;
  4. Vital interests – the processing is necessary to protect someone’s life;
  5. Public task – the processing is necessary for you to perform a clear task in the public interest or for your official functions, and the task or function has a clear basis in law; or
  6. Legitimate interests – the processing is necessary for your legitimate interests or the legitimate interests of a third party unless the interests or rights and freedoms of the individual override those interests.

For more information on GDPR please visit the Information Commissioners’ Office website

If you require legal help and advice concerning our Legal services for charities please contact Hunt & Coombs Solicitors on 01733 882800 or email [email protected].

Subscribe for Updates

Related Services

Legal 500 Leading Firm Hunt & Coombs received Investors in the Environment Green accreditation again

Hunt & Coombs LLP is a Limited Liability Partnership registered in England and Wales, Registration no. OC320243, VAT no. 120013160. Hunt & Coombs LLP is authorised and regulated by the Solicitors Regulation Authority with Registration no. 443035. A list of members is available at 35 Thorpe Road, Peterborough PE3 6AG.
© Hunt & Coombs Solicitors 2023.

Portfolio Builder

Select the legal expertise that you would like to download or add to the portfolio

Download    Add to portfolio   
Title Type CV Email

Remove All


Click here to share this shortlist.
(It will expire after 30 days.)