Data Privacy GDPR

GDPR is a regulation that requires businesses to protect the personal data and privacy of EU citizens for transactions that occur within EU member states.

 

The GDPR does not simply apply to EU domestic business, but to companies worldwide that target their goods and services to European citizens. GDPR applies to controllers and processors that are handling the personal data of European individuals.

The penalties for non-compliance are significant and are separated in two tiers. It vary depending on many factors including – among others – the duration of the infringement, the number of the data subjects affected and the level of impact.

EU General Data Protection Regulation

A few Examples

• The right to be forgotten

At any moment in time a customer can ask you to erase any data that you are holding on one of your systems. Are you ready for this ? Have you made an inventory of the different files and database where you store customer data ?

• Scaled consent.

The customer should be given options for receiving newsletters or communication. This can include time-base intervals, which media to use
for newsletters, etc.

• Data breaches will need to be reported within 72 hours of being discovered.

Appoint a data protection officer (DPO)