GDPR: What’s it all about?

GDRP what is it all about

 

Unless you have been living in a cave and not been on the internet for the last month, you have been hearing about GDPR and the May 25, 2018 deadline. This deadline isn’t your deadline, but is a compliance date for organizations connected to the  internet in the European Union.

GDPR, or the General Data Protection Regulation, is a new set of laws requiring companies to protect personal data of EU citizens. Companies subject to these new laws will incur stiff fines if they do not comply with these new GDPR regulations. Although GDPR is an EU law, the internet has no borders and even the smallest company can have global reach. GDPR doesn’t care if a company is outside of the EU, the data of EU citizens must still be protected. Many companies outside of the EU are complying with GDPR because it is just a good business practice and they may already have an internet presence in the EU.  They need to adhere to GDPR unless they actively block EU access (which would drastically reduce site traffic).

In a nutshell, GDPR requires consent of the person for data collection and their data must be anonymized or otherwise protected. This may seem like just another regulation companies must comply with, but it is also an opportunity for individuals to see and manage who is collecting their data.

Prior to GDPR, data was not only collected by the website you were visiting, but also by third parties without your direct knowledge or consent. These third parties may include “marketing partners”, ad servers, data brokers and many other entities you have never heard of. Now, with GDPR, organizations must detail the way they collect and use consumer information in a clear and understandable way. What this means to you is the GDPR agreement compels organizations to detail what personal data is collected and who is doing the collection.

For most of us, GDPR is an opportunity to see who is collecting our personal information and scrub those sites off the list we don’t want collecting our data. Most websites will notify you of their GDPR policy with a pop-up or a notification webpage asking for your approval of the GDPR policy. This notification will allow you to accept the new GDPR policy, but also link you to the website’s privacy policy. If you take the time to read the privacy policy, you will find it will detail what information is collected and who is collecting it. If a third party or “website partner” is also collecting information, the third party must be identified. The websites don’t make this process easy, but it can be done.  We at PrivatizeMe strongly recommend you take a few minutes and examine who is collecting your personal information.

At PrivatizeMe, we take your privacy seriously and do not collect, share or sell your information.  We use some cookie information to manage your session, but you can always use PrivatizeMe to delete cookies you do not wish to retain.

References

https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.ENG&toc=OJ:L:2016:119:TOC

https://marketingland.com/youtube-to-stop-supporting-third-party-ad-serving-in-eu-in-may-citing-gdpr-238012

https://www.zdnet.com/article/gdpr-an-executive-guide-to-what-you-need-to-know/

Privatize Me
© 2019 | PrivatizeMe
Enterprise    PC/Mac Home    More Info    Privacy    About    News    FAQs    Blog