How can I demonstrate that my organisation is compliant with the …
According to the GDPR, a business/organisation is responsible for complying with all data protection principles and is also responsible for demonstrating compliance. The GDPR provides businesses/organisations with a set of tools to help demonstrate accountability, some of which have to be mandatorily put in place.
Legal framework of EU data protection - European Commission
Dec 11, 2018 · In May 2022, the Commission published Questions and Answers to provide practical guidance on the use of the SCCs and assist stakeholders in their compliance efforts under the GDPR. These Questions and Answers are based on feedback received from various stakeholders on their experience with using the new SCCs in the first months after their ...
Data protection - European Commission
Jul 25, 2024 · The Commission has provided funding to national data protection authorities to finance projects that support the implementation of the GDPR. These projects aim to equip individuals and businesses with the knowledge and resources needed to navigate and ensure compliance with data protection rules.
Data protection explained - European Commission
If a company is a small and medium-sized enterprise (SME) processing personal data, it must comply with the GDPR. However, some obligations of the GDPR do not apply if the processing is not a core part of the SME’s business, or if its activity is not likely to create risks for individuals. Read more about specific rules for SMEs.
Rules for business and organisations - European Commission
How can I demonstrate that my organisation is compliant with the GDPR? What does data protection ‘by design’ and ‘by default’ mean? What is a data breach and what do we have to do in case of a data breach? What rules apply if my organisation transfers data outside the EU? When is a Data Protection Impact Assessment (DPIA) required?
Publications on the General Data Protection Regulation (GDPR)
Jun 24, 2020 · Communication from the Commission to the European Parliament and the Council - Stronger protection, new opportunities - Commission guidance on the direct application of the General Data Protection Regulation as of 25 May 2018
Information for individuals - European Commission
Even if you do not deactivate the tick box, the bank would not have obtained valid consent as pre-ticked boxes are not considered to be valid consent under the GDPR. References. Articles 6 and 7 and Recitals (42) and (43) of the GDPR; EDPB Guidelines on …
What if my company/organisation fails to comply with the data ...
The General Data Protection Regulation (GDPR) provides the Data Protection Authorities with different options in case of non-compliance with the data protection rules: likely infringement – a warning may be issued;
For how long can data be kept and is it necessary to update it?
Data must be stored for the shortest time possible.That period should take into account the reasons why your company/organisation needs to process the data, as well as any legal obligations to keep the data for a fixed period of time (for example national labour, tax or anti-fraud laws requiring you to keep personal data about your employees for a defined period, …
Who does the data protection law apply to? - European Commission
The GDPR applies to: a company or entity which processes personal data as part of the activities of one of its branches established in the EU, regardless of where the data is processed; or; a company established outside the EU and is offering goods/services (paid or for free) or is monitoring the behaviour of individuals in the EU.