What is the impact of GDPR on Third Sector Organisations?

Overview
The General Data Protection Regulation (GDPR) came into force on the 25th May 2018 replacing the Directive that previously legislated for protecting personal data.
As the population embraced the digital revolution TSOs started to use technology to manage their activities (Denison and Johanson, 2007). Databases of personal information were collated to maintain contact with supporters, raise money, provide information and run campaigns.
To be compliant, TSOs have had to review the data they hold. They have to ensure they can evidence they have obtained consent and put policies in place to manage data. A survey by nfpSynergy (Cooney, 2018), found that more than half of the respondents saw a reduction in the number of supporters they could contact. Concerns were expressed about the resources needed to become compliant and that this took them away from carrying out their work. It is imperative to see if there is a corresponding drop in income and engagement and the consequences this may have on their ability to meet their objectives.

Research design and methodology
The aim of the project is to discover what impact the introduction of GDPR has had on TSOs in Southampton. There are a number of areas that need investigation:
1. How did TSOs use ICT to prior to the introduction of GDPR?
2. In what ways do clients and supporters want to communicate with TSOs via ICT?
3. What challenges did they face in ensuring the data they now hold is complaint?
4. How has the way TSOs use ICT changed since GDPR came into force?
5. Has the introduction of GDPR had any positive impact?
6. Has the introduction of GDPR had a negative impact?
The size of the TSO will be relevant when considering the data collected. The NCVO list five categories based on income; micro, small, medium and large.
The research aims to explore the similarities and differences in the impact on Micro, Small and Medium TSO's in Southampton. The experiences of these organisations, with no/low numbers of paid staff differs to those with access to greater resources (Charity Commission, 2010). There are also constraints in gaining similar access to key people in larger organisations

Methodology
The study will use interviews and surveys to collect data.
Semi-structured interviews to gain information directly from people working in TSOs .The study aims to speak to a minimum of 10 organisations in each group
Surveys to compliment the semi-structured interviews to obtain quantitative data
A random sample public opinion survey to obtain data on how clients and supporters want to communicate with TSOs via ICT.
Literature
GDPR is an emerging study area. The Economic & Social Research Council and Universities of Birmingham and Sheffield Hallam have Third Sector Research Centre's. The International Society for Third Sector Research is the gateway to journals that publish research relating to TSOs. These bodies will hold much of the key literature the research will draw on.
The use of TSOs to deliver public services has increased in recent years Brandsen and Pestoff (2006) have published a collection of studies on developing understanding of this and its impact on public policy. International Data Privacy Law journal will also contain publications that will be relevant to the legislative areas of the research. The industry publications Third Sector and the NVCO carry out research for TSOs which will contain findings that will inform this study.
Burt and Taylor (2011) carried out a review on how charities in the UK use the internet. The review raised concerns that TSOs were collecting, storing, using and sharing personal data in ways that made it vulnerable. This research links to a number of key texts.