gdpr affects your data protection in may 2018

Go down

gdpr affects your data protection in may 2018

Post by Admin on Tue Jun 06, 2017 9:30 pm

ive been watching gdpr for a while now

Let's start with customer consent to data processing. The GDPR goes some way beyond current legal requirements by abolishing "implicit" and opt-out consent.

In future, data subjects will be able to withdraw consent at any time: and it should be as easy to withdraw consent as to grant it. No more will companies be able to recruit online, then rebuff objectors, by demanding they write in via snail mail.

Consent must be freely given, which will not be the case where there is imbalance of power between data controller and subject. This could be bad news for public authorities who presently process much data on the basis that if it is done for the public good, then that is good enough.

An upgrading of biometric data to "sensitive" status means explicit consent for processing may now be required before processing a customer's image or voice data. Most significant of all, profiling of customers – the automated processing of personal data to evaluate certain personal aspects relating to a natural person – cannot take place without some human input.

We may be leaving the EU, but some EU law – with significant consequences for the IT community – will carry on. One such is the General Data Protection Regulation (GDPR).

We signed up to it before the referendum, agreed to persist with it after and, if businesses wish to continue to process data belonging to EU firms, as well as avoid some potentially eye-watering fines, they need to be compliant with the GDPR no later than May 2018.

gdpr even effects the nhs as well

Last edited by Admin on Thu Jun 08, 2017 5:41 pm; edited 1 time in total

Posts : 1385
Points : 2854
Reputation : 138
Join date : 2017-04-13

View user profile

Back to top Go down

Re: gdpr affects your data protection in may 2018

Post by Absolut on Wed Jun 07, 2017 9:35 am

1.  Personal data shall be: accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’)

And that includes inaccurate reports sent to the DWP by Maximus or Atos HCPs Very Happy

Posts : 375
Points : 535
Reputation : 124
Join date : 2017-04-21

View user profile

Back to top Go down

Back to top

Permissions in this forum:
You cannot reply to topics in this forum