Implications of the General Data Protection Regulation (GDPR) Adoption

The Impact of GDPR

The General Data Protection Regulation (GDPR)is a data protection law in the EU, which is targeted at enforcing EU citizens’ data privacy. It replaces the EU’s Data Protection Directive.

The GDPR was adopted in April 2016, and comes into effect on 25 May 2018. This provides a time frame for companies, primarily operating in the IT and related digital spheres, to adapt their business operations to the new legislation.

The legislation tackles the increasing personal data privacy issues, connected to sales of personal data to third parties, which can be used for commercial purposes without the data owner’s consent.

Key subjects’ rights of the legislation include pseudonym-isation, right of access to personal data, right of data erasure, data portability between different systems, and similar.

The enforcement of the legislation will be ensured by newly established national independent supervisory authorities.