In today’s digital age, we tend to rely on technology for almost everything. This includes our personal data, business transactions, and even government information. For years, technology has ensured the protection of important data, and faster services from local and foreign companies and organizations. There has also been significant improvement with regards to consumer-business relationships because of the Internet.
While it may have brought a huge amount of convenience, the downside is the still existing possibility for data to be breached. Identity fraud, individual or company financial loss, and stolen employment records are just a few examples of what may happen when important data is compromised.
This is why back in January 2012, plans for data protection reform across the European Union (EU) were set out by the European Commission. This reform includes the General Data Protection Regulation (GDPR). After four years of debate and further preparation, GDPR was approved last April 2016. The regulation was published in official languages around May 2016 and was finally implemented on May 25, 2018.
GDPR, in a nutshell, is a set of rules for EU citizens to establish full control of their data. Every company and individual under and associated with the European Union, is mandatorily asked to comply with the GDPR. EU citizens are assured to have better control over their personal data. Under the GDPR, citizens will have better and easier access to their data and will be duly notified if and when they have been hacked. This information includes their name, credit card details, bank information, health records, IP address, and even their biometric data. The citizens also have the right to have any of their information erased from the system.
As of June 2016, Brexit was finalized and has been scheduled to take effect in March 2019. The UK’s withdrawal from the EU, according to the UK government, will not have an impact on the implementation of GDPR. UK will still benefit from the regulation.
GDPR will help unify Europe’s rules on data protection, which establishes safety for businesses that provide products and services. This unification of data protection laws will benefit businesses in terms of ensuring that they will be simpler and cheaper to operate. Organizations will practice transparency and strict stipulation in terms of legally collecting personal data while under GDPR. Due to the more closed first set of rules on data protection, anyone who fails to comply will receive a much heavier sanction.
The GDPR applies to two data handlers. These are called the controllers and the processors. Controllers ascertains the purposes and means of processing personal data. Processors, on the other hand, process the personal data on behalf of the controller. According to the UK Commissioners Office, “Processors have more significant legal liability if held responsible for a breach.” Therefore, controllers are responsible for making sure that all contracts with the processors are under the GDPR.
GDPR has now been enforced as of May 2018. With this regulation, we all have high hopes for a more secure and trustworthy system. The digital age has certainly hit a few bumps in the road when it comes to ensuring data security. Hopefully this regulation is a well-kept promise that citizens and businesses alike are provided permanent and legitimate protection.
