GDPR and the Rise of Data Rights
Concern about data privacy is increasing globally, especially in the wake of recent data leaks, where personal data was manipulated even to the extent of influencing voter decisions.
In the light of this, the European Union’s (EU) General Data Protection Regulation (GDPR) law becomes significant to prevent any misuse of data.
The GDPR is a revision of the 1995 Data Protection Directive and will come into effect on May 25th, 2018.
The law applies to any organisation collecting or processing the data of EU citizens. There are a set of rules to be followed under this law, and any violations would be charged with huge fines.
First and foremost, the organisations should clearly inform their users about the various personal data they are collecting and also the purpose of collecting them.
Personal data includes - name, address, IP, sexual orientation, medical information, posts on social networking sites, bank details, location, cookie data and more. They should also clearly mention any third party agency (like ad exchanges, data management firms), they will be sharing the data with.
The Rise of ‘Data Rights’
Apart from informing and being transparent about the data, organisations also have the huge responsibility of protecting it. They should not sell or misuse the data in any manner. They will be held responsible for anybody hacking their data and also for any breach from third-party organisations that are involved with it..
Apart from informing and being transparent about the data, organizations also have the huge responsibility of protecting it. They should not sell or misuse the data in any manner. They will be held responsible for anybody hacking their data and also for any breach from third-party organizations that are involved with it.
Each country under the EU will have an independent supervisory authority to look after the law implementation and take care of the complaints. Any breach of data has to be reported to these organisation within a time of 72 hours. They have to informed about the type of information affected, the number of people involved and the consequences of the breach - like financial or identity theft. They should also inform on what they are doing to fix it.
How is it going to be Implemented?
Each country under the EU will have an independent supervisory authority to look after the law implementation and take care of the complaints. Any breach of data has to be reported to these organization within a time of 72 hours. They have to informed about the type of information affected, the number of people involved and the consequences of the breach - like financial or identity theft. They should also inform on what they are doing to fix it.
In case of large data hacks, the affected people should be informed personally, apart from the general press release.
GDPR sets the beginning of new laws around data. Fundamentally, data rights are only a mere extension of the right to freedom. With large diverse data in hand - political parties and business organisation can have the power to manipulate our behaviour and decisions. Organisations should stop taking data for granted and build infrastructure to protect it..
GDPR sets the beginning of new laws around data. Fundamentally, data rights are only a mere extension of the right to freedom. With large diverse data in hand - political parties and business organization can have the power to manipulate our behaviour and decisions. Organizations should stop taking data for granted and build infrastructure to protect it.
Quintype is a secure CMS that safeguards your user and content data against any kind of breach. Leave a comment or write to [email protected] to get in touch.