SAGE GDPR
Are you GDPR-Compliant?
On the 25th of May 2018 the GDPR regulation entered into force.
The regulation quotes the Charter and the Treaty on Functioning of the EU that both states that "the protection of natural persons in relation of personal data is a fundamental right" and that "the processing of personal data should be designed to serve mankind".
Therefore, GDPR is a regulation to serve us EU individuals and we are expected to comply with it when accomplishing our jobs no matter the type of organization: public, private, not for profit.
What is GDPR?
GDPR is addressing the personal data protection of natural persons when processed and the free movement of these data. There are some key definitions in the regulation, that I quote:
- Personal Data: means any information relating to an identified or identifiable natural person (‘data subject’);
- Controller: is a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
- Processor: means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
- Consent of the data subject: means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
- Personal data breach:means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;