Summary of EU GDPR summary |What is the GDPR?

00:00:00 - 00:05:00

The GDPR is a regulation that gives individuals greater control over how their personal data is processed. The regulation is supplemented by a new data protection act that fills in sections of the regulation that were left to individual member states to interpret and implement. Failing to comply with the GDPR's requirements will leave organizations open to considerably higher penalties than they faced under the 1998 data protection act.

• 00:00:00 The GDPR is a regulation that gives individuals greater control over how their personal data is processed. The regulation is supplemented by a new data protection act that fills in sections of the regulation that were left to individual member states to interpret and implement. Failing to comply with the GDPR's requirements will leave organizations open to considerably higher penalties than they faced under the 1998 data protection act. However, the GDPR is not all about increased obligations and penalties; there are great advantages to GDPR compliance, including promoting greater transparency and accountability and increasing public trust. Furthermore, by implementing and maintaining the technical and organizational measures required by the GDPR, organizations will benefit from greater levels of information governance and cyber resilience.
• 00:05:00 The GDPR requires that organizations keep track of their data processing activities in order to comply with the GDPR's requirements for privacy notices, data controllers' reporting obligations, and data subject rights. In addition, the GDPR requires that data processors report any breaches of personal data to data controllers and that data controllers report breaches to the information commissioner's office within 72 hours. If the data is anonymized or encrypted to the extent that it is no longer possible to identify data subjects, there is no risk of GDPR noncompliance.