GDPR is almost there, time to take action
GDPR is short for "General Data Protection Regulation", you must by now have heard of it. If you haven't, please read the article below, it will explain all you need to know. Data is finally taken a bit more seriously by the EU, so make sure you are ready by May 25th, 2018. But what is taken seriously? Well, in (very) short it is all about data from individuals, the protection of that data, the export outside the EU of that data and the right to have "your" data erased. Any company, the size of your company is no excuse, should be aware of the basic principles of GDPR, and has to take proper action before May 25th, 2018. Basically, the regulation is setting things straight, the EU is making sure that everyone has the right to the protection of personal data. What does the GDPR set out about data?
- The scope is defined
- Single set of rules and one-stop shop of rules
- Responsibility and accountability
- Lawful Basis For Processing
- Consent
- Data Protection Officer
- Pseudonymisation (read it, it's about encryption - see art. 26)
- Data breaches (don't cover up, have a plan)
- Sanctions (yes)
- Right to erasure
- Data portability
- Data protection by Design and by Default (art. 26)
- Records of processing activities
So, now you can't say you didn't know. Now carry on and go protect some privacy data. Hurry. You can download the complete GDPR regulation from the EU Justice site. It is a legal document, so expect to find all the details there. And read it, please do.
Navigating compliance challenges in your organisation? Our business consultancy team has supported companies across Belgium with GDPR readiness and operational governance: get in touch.