New Data Laws in Europe

EU Directive cartoon-proposals

#DataPulse 77

It has been over four years in the making but the EU Parliament and Council have finally approved the General Data Protection Regulation (GDPR) after the EU Council of Ministers approved the final text last week.

The compromise agreement reached just before Christmas has remained intact, having been agreed by both the EU Council of Ministers and Parliament. Today’s decision means that the GDPR text will not be amended further and is now in its final state.

A two-year implementation process will begin once the Official Journal of the EU publishes the regulation – the final step to complete before the regulation becomes EU law, though whether that is published before the 23rd June EU Reforendum in UK we’ll wait and see.

The real work for European organisations will now begin. The task of picking over the legislation and interpreting what its real impact will be is now underway.

The ICO who has been heavily involved in consultation and done a great job in the last 3 years will publish its guidance

10 Things that you need to know before ICO guidance comes:

  1. It’s a regulation not a directive so passes straight to law in all 26 EU countries
  2. Data processors will be responsible for data protection
  3. The regulation has global ramifications ( 23rd June vote will not impact UK)
  4. Users will be able to make compensation claims
  5. There are tighter rules on transferring data on EU citizens outside the EU
  6. Harmonised user request rights
  7. New Rights to be forgotten
  8. It’s data controllers responsibility to inform users of their rights
  9. Tougher sanctions- E100m or 5% of global turnover
  10. Encryption and tokenisation can come to your rescue

The Principles of the new Directive are good for customers and good for all of us 450m EU citizens: My data is my data and organisations need to treat it thus

  • Transparency of use to individuals,
  • Data use for specified EXPLICIT and LEGITIMATE purposes only
  • Proportionality

Overall this is good for customers, good for responsible organisations and with 2 years before the directive becomes law there is time to prepare ourselves and use this as an opportunity to build consumers TRUST in an organisation.

 

Look out for future Blogs on explaining the detail and how to prepare using ICO guidance

Advertisements

Author: mannmannandrew

Throughout my career I have been about building strong commercial relationships across an organisation, enabling and building data driven capability and leading teams encouraging them to develop industry leading solutions for customers. Ideas develop from collaboration, listening, observing and learning

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s