GDPR: How to Prepare for the Changes?

Neadoo Digital
Team

Neadoo Digital is a dynamic, innovative marketing agency specializing above all in search engine optimization and in running effective Google Ads campaigns. We build SEO strategies that answer the particular needs of every client. Our goal is to help companies of any size succeed in the digital arena - growing their visibility and driving valuable traffic to their websites.

Published
2018-02-22
2 min read

Date - May 25. Goal - strengthening citizen privacy protection. That is what we know in theory, but what will the practical side of the changes introduced by the General Data Protection Regulation (GDPR) look like? Let us review the most important details.

Data Processing and Direct Liability

Key information - data processing agreements are changing. The GDPR also introduces an obligation to expand communication about how personal data is processed to best inform citizens about the full scope of activities their personal data will be needed for. In addition, any organization that processes personal data obtained from other companies will be directly liable for GDPR violations.

Mandatory Data Inventory

Certain companies will be required to appoint a Data Protection Officer who should possess expert knowledge in data protection. Furthermore, data processors are obligated to maintain records that will include:

  • the purpose of data processing,
  • categories of personal data,
  • records of international data transfers,
  • records of incidents and breaches.

The obligation to keep confirmed consents for personal data processing is also essential. Violating this provision will result in administrative fines of up to 20 million euros or 4% of total worldwide annual turnover.

Breach Notification

Every data controller has 72 hours to report a detected breach involving personal data processing. Such a report must be filed for breaches that pose a risk to the rights and freedoms of the individuals whose data is concerned. Importantly, the controller must inform the individual about the resulting issue!

New Citizen Rights

The GDPR significantly changes the rights of citizens, introducing:

  • strengthening the citizen's right of access to their data,
  • the right to data portability,
  • the "right to be forgotten."

What does this mean? Citizens will have the right to object to data processing, forbid the use of personal data, and request the deletion of their personal data. Individuals whose rights have been violated may also pursue their claims through civil court proceedings.

Interpretation of Regulations

The GDPR sets out many major changes, but it is not without flaws. Because it is not entirely precise, different interpretations of its provisions may arise, such as those related to technical requirements.Sources:http://tvn24bis.pl/z-kraju,74/rodo-zmiany-w-ochronie-danych-osobowych-w-2018-r,801917.htmlhttps://www.pwc.pl/pl/artykuly/2017/10-najwazniejszych-zmian-ktore-wprowadza-rodo.htmlhttps://www.politykabezpieczenstwa.pl/pl/a/co-to-jest-rodo-jak-sie-przygotowac-do-jego-wprowadzenia