What is this so-called GDPR, and why is everyone in business going on about it lately?
GDPR is a convenient acronym for the General Data Protection Regulation (EU) 2016/679, a piece of binding European Union legislation adopted on April 14th 2016 that will come into force on May 25th 2018. The legislation governs how businesses handle personal data they collect or process. It is intended to integrate and supersede all previous separate pieces of national legislation binding upon these areas of practice.
Because of its binding
nature and enforceability from May 25th 2018, it has become much talked about. Specifically, there has also been much concern over the scope of the punishments available to courts judging that breaches of the cambodia phone number data regulation have occurred, with heavy fines up to 20 million Euros or 4% of annual turnover (whichever is greater) being on the table, figures that could be ruinous for most small and medium-sized businesses.
Since the UK remains a member of the EU for now, and since the default government position is that all existing EU legislation in force at the time of the UK’s formal final departure from the EU will automatically be integrated into British law, it affects UK businesses just as much as those in any other EU member state, and will continue to do so even after the UK ceases to be an EU member.
Ok, so it can be very
expensive if you breach it, but what do you have to do to stay on the right side of the law?
Essentially, you need to set out and implement a data protection policy that gives the individuals on whom you hold or process data the right to privacy by design and default. This should be applied across those interest in good seo ne not only all your business processes.
Among the implications of this are that there must be at least one lawful basis to all your business’s personal data processing and storage operations. You need to identify what that basis is in each case. In some thailand data cases, it may be express consent; in others, legitimate interest that reasonably presumes consent.