7 years ago

What is the E.U. law on data protection all about?

The European Union General Data Protection Regulation is, arguably, the most notable change in the data protection regime in the last two decades. The GDPR reflects a paradigm shift in the understanding of the relationship individuals have with their personal data, granting the citizen substantial rights in his/her interaction with data controllers, and data processors. Additionally, the GDPR requires those collecting data to provide information on the ‘who’ and ‘how.’ Individuals will also have the right to have personal data deleted under certain conditions. The GDPR also makes reporting obligations and enforcement stronger: data breaches will normally have to be reported within 72 hours and failure to comply with the new laws could result in a fine up to 4% of global turnover or €20 million — the maximum amount of the fine. Brussels recognised that the growth in the digital economy and rapid advances in technology meant individuals were sharing personal data, and companies and governments used this data on an “unprecedented scale.” Therefore, it sought to replace the existing data privacy directive, which enables and guides laws in each of the 28 EU member states, with a regulation, a stronger instrument which harmonises data protection laws across the 28 countries.

The Hindu

Discover Related