EU GENERAL DATA PROTECTION REGULATION (GDPR) IBD

Sinopse

Understand your GDPR obligations and prioritise the steps you need to take to complyThe GDPR gives individuals significant rights over how their personal information is collected and processed, and places a range of obligations on organisations to be more accountable for data protection.The Regulation applies to all data controllers and processors that handle EU residentsâÇÖ personal information. It supersedes the 1995 EU Data Protection Directive and all EU member statesâÇÖ national laws that are based on it - including the UKâÇÖs DPA (Data Protection Act) 1998.Failure to comply with the Regulation could result in fines of up to âé¬20 million or 4% of annual global turnover - whichever is greater. This guide is a perfect companion for anyone managing a GDPR compliance project. It provides a detailed commentary on the Regulation, explains the changes you need to make to your data protection and information security regimes, and tells you exactly what you need to do to avoid severe financial penalties.Clear and comprehensive guidance to simplify your GDPR compliance projectNow in its fourth edition, EU General Data Protection Regulation (GDPR) - An implementation and compliance guide provides clear and comprehensive guidance on the GDPR. It explains the Regulation and sets out the obligations of data processors and controllers in terms you can understand.Topics covered include:The DPO (data protection officer) role, including whether you need one and what they should do,Risk management and DPIAs (data protection impact assessments), including how, when and why to conduct one,Data subjectsâÇÖ rights, including consent and the withdrawal of consent, DSARs (data subject access requests) and how to handle them, and data controllers and processorsâÇÖ obligations,Managing personal data internationally, including updated guidance following the Schrems II ruling,How to adjust your data protection processes to comply with the GDPR, and the best way of demonstrating that compliance, andA full index of the Regulation to help you find the articles and stipulations relevant to your organisation.Supplemental materialáWhile most of the EU GDPRâÇÖs requirements are broadly unchanged in the UK GDPR, the context is quite different and will have knock-on effects.âÇ»You may need to update contracts regarding EU-UK data transfers, incorporate standard contractual clauses into existing agreements, and update your policies,áprocessesáand procedural documentation as a result of these changes.ááWe have published a supplementáthat sets out specific extra or amended information for this pocket guide.áClick hereáto download the supplement.áAbout the authorsThe IT Governance Privacy Team, led by Alan Calder, has substantial experience in privacy, data protection, compliance and information security. This practical experience, their understanding of the background and drivers for the GDPR, and the input of expert consultants and trainers are combined in this must-have guide t