Back in 2000, Article 8 of the Charter of Fundamental Rights of the EU enshrined protection of personal data as a fundamental right of all EU citizens. However, each of the 28 member states has its own data protection laws to codify that right. As a result, compliance has been both complex and expensive for organizations doing business in the EU, and individuals felt strongly that they were unable to retain effective control over their personal data.
That situation is now changing. In April 2016, the European Commission adopted new data protection legislation that will apply across the EU starting in 2018: the General Data Protection Regulation (GDPR). This white paper explains the key provisions of the regulation and recommends strategies that can help you achieve compliance before the deadline, including:
- Know what data you have
- Carefully manage access to personal data
- Encrypt as much data as possible
- And much more