Digitalisation has long been part of our business lives and it continues to progress at breath-taking speed. Thanks to cloud computing, Bring your own Device and the wide availability of IT products, small companies and organisations enjoy opportunities that were previously only available to large enterprises. Today, borders and locations are no longer relevant, customers are at home all over the world, and many of them are from the EU, creating new challenges—especially in data protection
as rules and laws bound to natural or legal persons must be observed.
The General Data Protection Regulation (GDPR) is a European Union provision, standardising the data protection laws of the 27 member states and replacing the previous EU policy. The regulation came into effect on 24 May 2016 and had to be implemented by 25 May 2018.
The GDPR contains a series of new rules leading to data protection processes and systems being reviewed and updated. This has resulted in a new “Path to Compliance” to help stay on the right side of the law in the future, but this inevitably creates problems. The larger the collection of personal data or the more closely the purpose of the organisation is linked to the use of personal data, the more complex these challenges become.
* Must happen within a month
Our specialists deal intensively with the topic of GDPR. In cooperation with our partners, we’ll check that your IT is GDPR-compliant. At the same time, our partners will endeavour, wherever possible, to automatically offer you the user GDPR-compliant services.
At the moment, the answer to this is ‘yes’. Discussions are currently being held in the countries of the European Trade Association (EFTA, the organisation to which Norway, Denmark, Lichtenstein and Switzerland belong) about whether the GDPR will be adopted there as well.
It is not yet clear what the complete spectrum of requirements looks like, because many have yet to be developed. However, the regulation has laid down a number of crucial requirements: