The European Commission has published its roadmap for the preparation of the statutory report on the application of the GDPR, which is due in 2020. The roadmap published is open for public consultation by stakeholders and interested third parties until 29 April 2020. The Commission has announced that its report will build on the two communications published by the European Commission to date, “Data protection rules as a trust-enabler in the EU and beyond –
Further to the adoption of the GDPR, and as businesses are rolling out new tools and mechanisms to carry out operations, the question arises often whether these operations are GDPR compliant. Does access to systems that contain personal data have to be verified by two-factor authentication? Do customer databases always have to be pseudonymised? Do drives have to be permanently encrypted? The obligations contained in the GDPR seemingly set a high bar for businesses to
A Snapshot of Data Protection Compliance Around the World Along with the EU’s GDPR, many other jurisdictions have caught up with their privacy legislation. This effort has led to a patchwork of privacy and data protection laws that multinationals and companies that operate worldwide have to comply with. In our experience, companies’ main concerns focus on the following topics, which are subject to different approaches in the main jurisdictions around the world. 1. Consent An
The authors of this blog met two years ago in the context of the preparation of the GDPR-compliance package of a multinational corporation. In addition to overseeing the legal and technical aspects of the compliance project, the authors expanded their expertise while facing numerous challenges from a security and a data protection standpoint. Over one year has spanned since the application of the GDPR, and the awareness and enforcement of its provisions has increased within