GDPR (General Data Protection Regulation)
European privacy regulation for the collection and processing of personal data, aimed to better protect the consumer. This is called the General Data Protection Regulation (GDPR or AVG Algemene Verordening Gegevensbescherming in Dutch).
As of 25 May 2018, everyone in the European Union must conform to the regulations stipulated in the General Data Protection Regulation (GDPR). The GDPR ensures that personal data can only be collected under strict conditions and only if it is used for legitimate purposes. In addition, organizations are obliged to protect the collected personal data from improper use and respect the rights of all persons involved.
What should your company do in order to be GDPR-compliant?
be transparent and clear:
– indicate what personal data you collect and process
– explain why you use and process personal data
– clearly demonstrate how you collect the personal data
– specify how long you will store the personal data
privacy by design & privacy by default
make sure the correct protection of personal data is already taken into account in the design phase of the products and services. Make sure no additional data is registered without permission
Data Protection Officer
appoint a Data Protection Officer if you process data of more than 5,000 persons per year
double opt-in
make sure you can show individuals have given their consent, for the collection and processing of their data, based on complete information
overview processing
make sure you can provide the collected information to the individual involved
notification requirements breach
make sure the collected data is properly protected from data breaches
data portability
make it possible to electronically transfer the collected individual personal data from your system to another
right to delete data
give individuals the option to have their data deleted
New compared to previous privacy regulations:
– being able to prove valid consent from individuals to collect their personal data
– making it just as easy for individuals to give and to take back their consent
