Security In Your Print Environment Is Imperative To Remain GDPR Compliant
Espria ensures that we understand our customers’ challenges and offer bespoke solutions to them, whatever sector their company operates in.
Recently, we worked with a camera rental company which supplies equipment for premium drama shows, documentaries, feature films, corporate and promotional videos.
Their key business objectives included being compliant with General Data Protection Regulation (GDPR) as GDPR has had a profound impact on the way VMI handles its customer and employee personal data.
Another key objective was to be able to scan hire agreements in real time so they can be processed and recalled upon immediately.
Our clients’ challenges : a GDPR negligence and a contract storage issue
When our client decided on a print solution, they didn’t take into account GDPR which came into law in 2018.
This negligence posed a serious financial risk to the business as a breach of personal data can result in fines of either 4% of annual turnover or 20 million euros, whichever is the greater.
Technically, the business wasn’t equipped either to detect a cyber-attack on their systems. As a consequence, the company wasn’t able to report cyber attacks to the Information Commissioner’s Office (ICO) within 72 hours of it happening, as required by law.
The scan process of the company was another weakness faced by the company. It was redundant due to there being up to six months delay in archiving hire contracts.
Recently, a team member needed a hire contract that was in storage waiting to be collected and scanned. Retrieving documents from storage was time consuming but also storing hard copies of hire agreements on site required vast amounts of space in the office.
Our solution : a new printer-scanner and a Managed Print Suite
Espria suggested to our client that we implement the Xerox premium C405 printer and scanner which utilises state of the art enhanced security. Secure print and scan release ensure that only the authorised person can retrieve the printed documents.
Other key features (of the printer- scanner?) include McAfee antivirus endpoint security firewall and Cisco Encrypted Hard Disk, the ability to run a comprehensive Firmware Verification test that provides alerts if any harmful changes to the device have been detected allowing VMI to report this to the Information Commissioner’s Office (ICO), the organisation responsible for compliance with GDPR.
McAfee Whitelisting technology constantly monitors for and automatically prevents any malicious malware from running. A data overwrite system embedded within their new device deletes and overwrites data to prevent any malicious recovery of this data.
The Espria Managed Print Suite was also introduced. It allows for easy scanning and archiving of hire contracts.
Any member of staff can scan multiple hire contracts at once using the dedicated document feeder. Each hire contact is saved and archived. Hire contracts can be recalled in the future by searching the agreement number in ‘real time’.
Having control over scanning documents in-house removes the need to store boxes in the office.
Implementing print release and security to their devices offered our client the peace of mind they needed as well as improving their efficiencies.”
The Results
Gaining control over workflows meant that our client’s video producing business could be more productive and fully GDPR compliant.
Reveal areas that need proactive, defensive or collaborative resource
One of our experts will review your current data risk, examine current governance and security controls.
We’re experts in building sustainable IT infrastructure that can scale to your businesses needs.
You may be interested in
Is Your Office Printer a Way In for Cybercriminals?
Most small businesses think of cyber security as a laptop problem, a server problem, or an email problem. The office printer rarely gets a mention, yet it is connected to your network, holds a hard drive, and processes some of the most sensitive documents in the business, from invoices to HR letters and client contracts. However, it is important to realise that office printer vulnerabilities can be exploited by cybercriminals, potentially leading to cyber attacks. A modern multifunction printer is a computer. It has an operating system, a network connection, often Wi-Fi, and increasingly a…
The Cyber Resilience Act: what it means for your business
By Stephen Cook From 11th September 2026, a new EU regulation starts changing how connected products and software are built, sold and supported – and UK businesses trading into Europe are firmly in scope [1] [2]. Here is what the Cyber Resilience Act actually requires, why it matters beyond the compliance paperwork, and how Espria helps clients meet it. What is the Cyber Resilience Act? The Cyber Resilience Act (CRA) is an EU regulation – Regulation (EU) 2024/2847 – that sets mandatory cybersecurity requirements for “products with digital elements.” In practice, this covers hardware and software that can connect to a device or network: IoT devices,…
The Hidden Costs of Printing: How Managed Print Services Reduce Business Waste
Introduction For many organisations, printing is viewed as a routine operational expense. Printers are purchased, toner is replaced when needed, and documents continue to flow through the business without much scrutiny. However, the true cost of printing extends far beyond paper and ink. Unmanaged print environments often create hidden expenses through inefficient device usage, excessive energy consumption, IT support demands, security risks, and employee downtime. These costs can accumulate significantly over time, impacting productivity and profitability. This is particularly relevant as businesses seek to optimise operations, reduce waste, and improve sustainability while controlling expenditure. Whether…
Can Your Business Actually Recover? The Operational Resilience Question Most SMEs Cannot Answer
Operational resilience is not a technology problem. It is a business problem. And until boards and leadership teams own it, no amount of IT investment will be enough. The Gap Between Confidence and Reality Most organisations believe they are more resilient than they are. The backups are running. The antivirus is licensed. The IT team knows what they are doing. That confidence, in our experience, rarely survives first contact with an actual incident. The question is not whether your systems are protected. The question is whether your business can keep delivering its most important services…
Why the Sophos–Microsoft Partnership Matters – Especially for Education, Financial Services and Legal Organisations
For most organisations today, Microsoft is the foundation of how you operate and on top of this there is also a requirement for regulatory compliance and operational resilience. Whether it’s Microsoft 365 for collaboration, Teams for communication, or Azure for infrastructure, these platforms sit at the heart of day-to-day business. But for sectors like Education, Financial Services, and Legal, that reliance comes with heightened risk, and responsibility. These organisations are not only prime targets for cyber attackers, they are also subject to strict regulatory, data protection and governance obligations. That’s why the partnership between Sophos…
Why Cyber Resilience Can’t Be Audited Once a Year: Lessons from the UK Cyber Action Plan
Moving from box‑ticking compliance to real‑world cyber readiness Written by Richard Puckey Cyber security has a confidence problem For years, many organisations have taken comfort in annual cyber audits, certifications and compliance checklists. Pass the audit, tick the box and move on. On paper, everything looks secure. The problem? Cyber threats don’t operate on an annual cycle. The UK’s Cyber Action Plan is a clear signal that this approach is no longer enough. It challenges businesses to rethink cyber security not as a periodic compliance exercise, but as a living, breathing capability and culture that must stand up…