How to comply with the UK GDPR
Under the UK General Data Protection Regulation (UK GDPR), you should be doing everything in your power to prevent a breach of personal data. This includes ensuring the security of personal data you send by email – so you don't accidentally send personal data to the wrong recipient, for example.
There are no specific rules on how you must do this, but there are several practical measures you can take, which we outline below.
Ideally, store data remotely
This is safer and will mean you can avoid sending data within emails or as attachments to emails, and simply direct people to the data