Skip to main content

Posts

Showing posts with the label data protection officer

Two days about data protection one year after the GDPR - my takeaways

I am not a fan of political speeches and introductions by VIPs. The contribution of Viviane Reding: was an exception as it was personal and gave an insight into the background of how the GDPR was born. At least to me, the long haggling about the GDPR and the discussion on what is   new and what not crowded out from public discussion the ethos: to protect personal liberties against dictatorship and the principle that data belong to the person herself (or himself). The ex-commissioner for the area and MEP rightly boasted that in this field, the EU is a standard maker. It is also interesting to note that while Europe only followed the U.S. in establishing net neutrality, now the U.S. has retreated from it. IT was on the Luxembourg Data Protection Days , organised by MGSI  that the experiences of one year of the GDPR were discussed. Tine Larsen from the CNPD c omplained about GDPR-bashing and that there were also fake news around GDPR. The fact that Luxembourg voted the la...

The day has come...

when the new GDPR entered into force. If not else, you noticed it by receiving e-mails from all quarters, partially confirming that the sender complies with the new rules or that changed its privacy policies in line with the new rules or asking for your consent to use your data. Did those who did not write you, miss something? Did you miss something when you did not write to all people whose data you store? Well, it depends. Those who complied with the old directive (and the national laws transposing it), do not necessarily have to do something. There are, however, three changes behind for them: - instead of relying on a notification to their data protection authority, they themselves have to keep documentation demonstrating that they comply with the new regulation - there are more strict and also more precise rules when someone can ask "to be forgotten" i.e. his/her data erased - non-compliance can result in hefty fines. Some organisations may have to nominate a data ...