Businesses have been advised to prepare for the 'biggest shake-up in data protection law for 20 years.'

A business breakfast meeting was held at Taste Café on Chesil Beach to discuss the legal and technical changes as part of the General Data Protection Regulation (GDPR), which will be implemented on Friday May 25.

The event was organised by Weymouth and Portland Chamber of Commerce and was sponsored by Battens Solicitors, with one of their senior associates, Jon Dobson, speaking about the changes.

Mr Dobson described the GDPR as the ‘biggest shake-up in data protection law for 20 years’ and explained that a number of businesses aren’t ready for the changes.

He said it is a chance for ‘evolution not revolution’ of data protection law and builds on best practice under the previous Data Protection Act.

It comes after the Cambridge Analytica Scandal, which revealed that millions of people's personal data had been compromised.

Paul Appleby of EXO IT Services mentioned the scandal during his talk about the technical side of GDPR.

He said: "The government has done something since to say - don't steal people's data."

Under the new legislation, businesses will have to clearly inform customers about why they are collecting their personal data, how it is going to be used and who it will be shared with.

For many businesses this will mean that they have to review their systems and the way they work.

As part of the new law, penalties for data breaches will increase. Previously a business could be fined a maximum of £500,000, but this is set to increase to £20 million or 4% of turnover.

Watchdogs will be monitoring businesses to see if they comply with the changes, but have said they accept some businesses still need time. However, it's important to add that businesses will still need to show that they're taking steps to meet the changes.

Mr Appleby added: "The spirit of the law is that you must be taking steps in the right direction.

"Think positively and act positively about it. It's boring, it's difficult, but it still has to be done and it's in your own interest."

Andrew Knowles added: “This is about good house-keeping of people’s data.

“You have to demonstrate you have thought about it, whatever size business you are, and that you are taking some action."

He added: “The gist of it is you must think about what you are doing and document it. If you do then you’re probably on the right lines and unlikely to get a massive fine, but if there is no evidence, you’re likely to be hammered.”