AS the largest data protection changes in a generation came into force last Friday, there are concerns that many small businesses are still unprepared.

The warning comes from the Federation of Small Businesses (FSB) alongside a call on the Information Commissioners’ Office (ICO) to take a sensible and proportionate approach to enforcement of the General Data Protection Regulation (GDPR), particularly during the initial period.

Earlier in the year, research by FSB found that around two thirds (68 per cent) of smaller businesses had either not started or were only in the initial stages of GDPR preparation.

FSB national chairman Mike Cherry said: “GDPR is here and the likelihood is that many of the UK’s 5.7 million smaller businesses will not be compliant. It is concerning that the burden and scale of the reforms have proven too much to handle for some of these businesses and there is now a real need for support among the small business community.

“It is imperative that the ICO initially deals with non-compliance in a light touch manner as opposed to slapping small firms with fines. Small businesses must see the ICO as a safe space where they can go for advice and help in making the changes necessary to be compliant.”

In an appearance to the Brexit Select Committee earlier this month, the Information Commissioner Elizabeth Denham stated that she wouldn’t be a “bonkers regulator” in ensuring small businesses were compliant.

Responding to these findings, Mr Cherry voiced his concerns about the ability and readiness of the ICO to manage the high volume of traffic expected to come its way.

He said: “It is expected that the number of small businesses contacting the ICO will continue to rise. The ICO must be adequately resourced to manage these enquiries so that small firms aren’t made to wait for advice.