GDPR

What you need to know about  GDPR  

GDPR – General data protection regulations.

This is a legal framework which contains a sets of rule and regulations about collection and processing of data from individuals of European Unions .

GDPR have new standards about the company and its employees data and details and have set some rules over assessing these data of employees.

GDPR  sets a new standard for consumer rights regarding their data, but companies will be challenged as they put systems and processes in place to maintain compliance.

Simplified meaning is this is basically an attempt to protect the personal details of companies and companies components.

What is the GDPR?

The European Parliament adopted the GDPR  in April 2016, replacing an outdated data protection directive from 1995. It carries provisions that require businesses to protect the personal data and privacy of EU citizens for transactions that occur within EU member states. The GDPR also regulates the exportation of personal data outside the EU.

The General Data Protection Regulation(GDPR) is the toughest privacy and security law in the world. Though it was drafted and passed by the European Union (EU), it imposes obligations onto organisations anywhere, so long as they target or collect data related to people in the EU.

Key summary of GDPR requirements

1) Lawful, fair and transparent processing.

2) Limitation of purpose, data and storage. 

3) Data subject rights. 

4) Consent.

5) Personal data breaches.

6) Privacy by Design. 

7) Data Protection Impact Assessment. 

8) Data transfers.

The UK GDPR sets out seven key principles:

Lawfulness, fairness and transparency.

Purpose limitation.

Data minimisation.

Accuracy.

Storage limitation.

Integrity and confidentiality (security)

Accountability.