GDPR: doing nothing is not an option
GDPR: doing nothing is not an option
What is GDPR?
In essence, the GDPR (General Data Protection Regulation) means more protection of personal data. They are new privacy rules. It is about companies having to respect the privacy rights of consumers. If they do not, fines are associated with it."The GDPR controls the processing of personal data of natural persons in the by a natural person, a company or an organization."
GDPR, therefore, applies to all companies or organizations that collect, process and use personal data. For consumers, it means that they are better protected and can demand compensation in the event of misuse of personal data.
What does it mean for your organization?
If you are already panicking slightly, then, unfortunately, we cannot reassure you. The new privacy rules will take effect. Does it have a major impact on your company? Maybe so. Do not think too quickly that the legislation does not apply to you. It is, after all, a binding directive. You can be severely punished for violations, so doing nothing is not an option. It applies to anyone who offers goods or services.Privacy Commission Guidelines
TransparencyBe transparent about how data is collected in your company. How do you process that data?
Reporting
obligation If a data breach were to occur in your company, then you are obliged to report this within 72 hours unless you can prove that the leak is not a danger to the personal data collected.
Data transfer
Citizens can easily transfer their data from one service provider to another. For example, to change internet providers.
Right to be forgotten
When a person asks your company to delete his / her personal details, you are obliged to do so. Even if the data has already been shared with third parties.
What are the sanctions?
You as a company must be able to prove that you comply with this new law. If you can't do that, there will be high fines above your head. In the case of minor violations, it can be 2% of your annual turnover, but the maximum fines 4% of your annual turnover.What can dig create.be do for you?
At dig create.be we ourselves have a GDPR manager under the name Data Protection Officer or DPO. This ensures that on the one hand, we are fully in order for ourselves regarding the new GDPR legislation. This person knows the new legislation very well and also checks whether everything is correctly followed according to the rules. On the other hand, it also means that we know better than anyone how you can make your website GDPR-proof. Just think of a cookie banner and statement, privacy statement, and so on. An SSL certificate also encrypts personal information. Feel free to contact us for more info or email directly!Click here for more...
Comments
Post a Comment