GDPR 2016/679 EU – General Data Protection Regulation
The GDPR 2016/679 EU (General Data Protection Regulation) protects the privacy of citizens and businesses, ensuring that personal data is safeguarded according to European law. SHADOIT CONSULTANCY GROUP offers a professional service for managers and professionals, helping to comply with legal obligations, understand risks, sanctions, and the processing methods established by the regulation.
What is the GDPR 2016/679 EU
The GDPR governs the protection of personal data, whether digital or paper, imposing security measures, legal responsibilities, and safeguarding privacy. It also applies to companies outside the EU that process data of European citizens.
Types of data subject to protection
The GDPR 2016/679 identifies the following data as sensitive:
- Location data
- Personal identification data
- Sensitive data
- Health data
- Data stored in smartphones
- Banking data
- Accounting data
- Personal data (religion, opinions…)
Sanctions and responsibilities
Non-compliance with the GDPR 2016/679 EU can result in administrative fines of up to €20 million or 4% of annual global turnover, as well as potential civil and, in some cases, criminal liability under national law. In case of inspection, the Data Protection Authority may order immediate corrective actions.
The role of the DPO
The DPO (Data Protection Officer) is an independent figure who supervises data protection and acts as a point of contact with the Data Protection Authority. They must be external to the company to avoid conflicts of interest and support the manager in implementing the measures required by the GDPR 2016/679 EU.
Collaboration with the System Administrator
The DPO and System Administrator must ensure cybersecurity, backups, log management, firewalls, antivirus, and other minimum protection measures.
All activities must be documented, and any non-compliance immediately communicated to management.
Key points of GDPR 2016/679 EU
- Limits on automated data processing
- New rights for data subjects
- Rules for data transfers outside the EU
- Strict regulations for managing Data Breaches
Data Breach Management
In case of a data breach, the data controller must immediately inform the data subjects if the risk is high or if adequate security measures were not implemented. Responsibility remains with the controller.
For more information, consult the full text of the GDPR.
Why contact us
Our consultants are at your disposal: if you want to secure your company according to GDPR 2016/679 EU, now is the right time to act.
For more details on our consulting services, visit the page corporate privacy guidelines.