Final text of new data protection rules expected by summer

[NewsBot]

The final text of new EU data protection regulations is expected to be published in late spring/early summer, according to the European Parliament.

 

More...

 

 

 

The full final text of the regulations has not yet been released (as at January 18), though mandatory new requirements have already been confirmed. These include the right to be forgotten, the right of portability and privacy by design. The processing of personal information will also become more consent-based than current data protection rules.

 

The GDPR is one of two packages the EU is launching to reform data protection and strengthen the rights of individuals over how their personal data is used.

 

 

The new rules around consent will mean companies will need to get specific, informed consumers will need to give specific, informed consent for certain uses – uses which should become clear in the final text.

 

Individuals will get more and better information on how their personal data is processed and the EU says it should be available in a “clear and understandable way.”

 

Stricter timescales will also apply for notification toe the supervisory authorities of a data breach. This will be 72 hours where feasible. Any individual affected will have to be informed “without undue further delay” if there is a high risk to their rights and freedoms.

 

[citizenB]

As for protecting privacy, safeguards will be expected to be built into services and products from the earliest stage of development and privacy default settings will be the norm.

 

Stronger enforcement will also be included. Non-compliance with the new regulations could lead to severe fines. The largest outlined in a previous text for the GDPR was four percent of global turnover for the breaching company.

 

 

This will be good news in respect of non compliance - currently our Information Commissioner is very wishwashy in enforcing where consumers have been affected by data breaches.

 

“The regulation returns control over citizens’ personal data to citizens. Companies will not be allowed to divulge information that they have received for a particular purpose without the permission of the person concerned.