If we told you content is king (or queen), you'd quaff with laughter at the use of such a cliche. But, what if we said we've found a pretty nifty content solution perfect for every day use for startups and small teams? Yep, that's peaked your interest.

We know some awesome social analytics programmes, referrals, user generated content and campaign solutions - I mean, check out our past five cohorts... but we wanted to test the market when it came to writing, planning and scheduling. That's where we found coschedule.

As you may know, we not only invest in early stage startups through our accelerator programme, but also have our Scaleup Network, which means we’re constantly on the lookout for companies of all ages.

That means we’re checking the market day-in-day-out, which is how we stumbled across CoSchedule, and realised it could really save a lot of time for our marketing team.

Creating

Coschedule combines your planning, writing and scheduling all in one place, meaning you can say goodbye to spreadsheets and old school flat plans, and hello to marketing ease.

Its ability to create and track campaigns is really what stood out for us – whether that’s email, social, video or even just notes, you can colour code your calendar and use specific set ups for any kind of marketing.

CoSchedule_Dashboard

Organising

Within its simple calendar interface, you can plan campaigns, track to-do lists, assign jobs to team members and view all of your up and coming content in one place. Integrating seamlessly with Wordpress, you'll also see all of your blog posts.

But really… that integration is awesome. It means you can access CoSchedule either by their website login, or through the back end of your site, keeping everything neat and tidy.

And it’s worth digging a little further into their solution for working with teams: the to-do lists are a dream for anyone who loves a good tick to get through the day, and with team names next to each requirement, there’s no way you’ll lose track of your busy marketing schedule.

CoSchedule_Calendar

Scheduling

Whilst Coschedule is no better than other social scheduling platforms in terms of integration and analytics, it's super handy for tracking social campaigns.

You can schedule social posts in advance to any main social network from the calendar interface, but also from each blog post itself, which makes it much easier to track the distribution of information.

This is especially brilliant for using recall – if you’re wanting to re-share your posts but still want it to look organic, this tool makes it look easy. Gone are the risks of re-sharing the same piece too often, sharing too many articles in one day, or maybe even not enough.

CoSchedule_Social-Campaign

Tracking

And you can see some analytics, so you can work out what's really working. This is especially great for re-sharing your previous articles, and testing which day and time works best. No need for more than one tab – it’s all in one place! What's more to love?

CoSchedule_Top-Content-Report

Want to know more? watch the video below:

https://vimeo.com/166544659

You might have heard that the General Data Protection Regulation (GDPR) was passed by the EU Commission last year. It’s pretty big news; taking effect from 2018, it effectively replaces the law we’ve had since 1998 - the Data Protection Act. Because it’s a regulation, it comes into force as it was passed by the EU Commission, and it has been made clear that it will not be impacted by Brexit.

But what on earth does it mean for businesses, and more specifically, MadTech startups? Our legal partners Lewis Silkin were on hand to clarify that for us and our alumni.

Enough about me, back to me

The whole law is built around protecting the individual ‘data subject’ – that is, the person whose data you are collecting. Businesses are being put in the data subject’s shoes, and need to think of data collection and usage from their point of view.

Who am I?

You need to understand if you are a Data Controller or Data Processor. A Data Controller determines the purposes for which, and the manner in which any personal data is processed or is to be processed, and is directly responsible for compliance with the law.

A Data Processor processes that data on behalf of the Data Controller, and the Data Controller must have a written contract in place for this. A big change however, is that the Data Processor will now have direct obligations and liability under the law.

It is important to understand which you are as this will determine your obligations and what standard you will be held to. Just to muddy the waters a bit, you can actually be both; any suppliers you engage will be Processors, but if you sell to a client, you may well become the Processor. Clarify this and your liability at the outset, and record in written, signed form.

Get consent!

In line with the individual focus being push through the new law, the definitions of Personal Data and Sensitive Personal Data are expanding.

Sensitive Personal Data

The new rule of thumb is thus – if you are gathering and using sensitive personal data – GET CONSENT! Even more importantly, do not bundle this up in your Ts and Cs. This needs to be obvious, clear, visible, shouting from the rooftops.

Personal Data

This must be processed for a ‘fair and lawful’, i.e. particular, use. If it isn’t on the list of what’s fair and lawful you can’t do it! Generally the conditions here are – with consent, necessary for the purposes of the contract with the data subject, or in the Controller’s legitimate interest. Transparency is key – you need to provide a privacy notice (again, as obvious and as clear and debunked from anything else as possible) and don’t do anything with the data that might surprise your subject!

One thing to point out here is that you don’t always have to have consent as your ground for processing data – but if you do, your Data Subject has to demonstrate their consent, and be free to withhold or withdraw it.

What’s your profile?

Another big area of impact is ‘profiling’. The regulations have introduced a new definition of profiling, with some pretty big requirements for any profiling that constitutes having a ‘legal effect’ – that is, an irreversible impact on the Data Subject. At the moment it doesn’t seem as though behavioural profiling, targeted advertising and the like will be scooped up by this, but it’s subject to more clarification and guidance.

It may be helpful to think of profiling in two ways –

Does your profiling have a ‘legal effect’ – if it does, you MUST have explicit consent
Does your profiling not have a ‘legal effect’ – you must inform the Data Subject of it and allow them to object to it (if it’s already happened, you need to be able to reverse it)

Don’t you forget about me, except, please do

Rights being extended under the GDPR are the Data Subject access request and the right to be forgotten. The new one, however, is the right to data portability – Data Subjects will be able to request all of their data and are free to move it to other accounts, including that of any competitors. It’s worth bearing this is mind as you will need to be able to provide them with all of the information you hold about them.

So what can I do?

This may all seem pretty daunting, and with one of the biggest changes being enforced by the legislation being the serious increase in fines for breaches, feel like you’re fighting an uphill battle. There are however, steps you can take to start getting yourself compliant.

• If you’re early stage, the words ‘privacy by design’ are your new best friend. Build the requisite data security measures into your systems early, and get your privacy notices, consent buttons and the like clear and ready from the outset.

• If you’re later stage, you will need to build an audit trail – think when you gathered data, how it was used, all date stamped and demonstrably proven. You’ll also need to reach out to all of your Data Subjects and tell them what information you are holding, with an option for them to ask you to remove it.

• All businesses will need to review their reporting procedures should they find themselves on the wrong end of a breach, and make sure that their processes are adequately set up to manage that breach in accordance with the regulations.

• A good place to start will be to ask yourself – what data am I holding; how did I get it; and where did I get it from? Work back from there and start to unpick the audit trail and how it needs to be collected in the future.

New guidance is due to be issued this Spring, and for anybody who is still a bit stuck, some good starting points are the Information Commissioner's website and the European Commission's website. Our legal partners Lewis Silkin are also on hand to support our network with queries they may have.