Home > Boards > US OTC > Computers - Software >

GDPR (General Data Protection Regulation) COMPANIES

RSS Feed
Add Price Alert      Hide Sticky   Hide Intro
Search This Board: 
Last Post: 6/2/2018 7:26:44 PM - Followers: 0 - Board type: Free - Posts Today: 0

What is the

'General Data Protection Regulation (GDPR)'


The General Data Protection Regulation (GDPR) is a legal framework that sets guidelines for the
collection and processing of personal information of individuals within the European Union (EU).
The GDPR sets out the principles for data management and the rights of the individual, while also
imposing fines that can be revenue-based. The General Data Protection Regulation covers all companies
that deal with data of EU citizens, so it is a critical regulation for corporate compliance officers at
banks, insurers, and other financial companies. GDPR will come into effect across the EU on May 25, 2018.


BREAKING DOWN 'General Data Protection Regulation (GDPR)'

The GDPR was adopted in April 2016 and adds to the EU’s general policy of protecting citizen’s data. In addition to the notifications of collection and legal ramifications for misuse, there is also a requirement to obtain explicit consent, notify in cases of a hack or breach, appoint dedicated data protection officers and much more. For financial institutions, the new rules will require significant investments in compliance to ensure continuing access to the EU market. The new rules are also pushing firms to pseudonymize personally identifiable information (PII) prior to processing it, meaning that the data can’t be attributed back to a particular person. The pseudonymization of data allows firms to do some larger data analysis - such as assessing average debt ratios of its customers in a particular region — that would otherwise be beyond the original purposes of data collected for assessing creditworthiness for a loan.

GDPR Versus Big Data

The GDPR has effects beyond lending, insurance and other firms where sensitive personal data is collected and processed as a matter of course. The rules apply to the human resources record of employees and even the IP addresses of people using online services. The GDPR builds upon data rights that the EU has been pushing for, such as the right of an individual to be forgotten and the right to data portability.

As such, it is expected that the GDPR will lead to data minimization where companies willingly prune down the amount of information they collect to the functional essentials needed to complete a transaction. This could be a reversal of one of the big data trends where companies seek to collect and analyze as much data on their customers as possible in order to gain new insights. This analysis can still take place after appropriate pseudonymization, but other data rights prevent those insights from being used to profile customers in a way that could be discriminatory or put them at a financial disadvantage. As the GDPR is a new regulation, there will no doubt be a period of adjustment where gaps and thorny issues like profiling are addressed.   

Challenges Associated With the GDPR

The decision to implement the GDPR has come with criticism. Those opposed to the new regulation say that the position of the DPOs could be an administrative burden for many EU countries. The guidelines were set to include social networks and cloud providers, but did not consider how to deal with employee data. In addition, data cannot be transferred to another country outside the EU, unless it guarantees the same kind of protection. Companies that didn't have this kind of privacy protection may be required to change their business practices. The costs associated with the proposed regulation may also increase (due to the need for more investment) and general education in data protection may also be required. Data protection agencies across the EU will need to agree to a standard level of protection, something that may not be easy as they may disagree in the interpretation of the guidelines. 


SOURCE: Investopedia .......... https://www.investopedia.com/terms/g/general-data-protection-regulation-gdpr.asp



#4   For good reason... beast1423 06/02/18 07:26:44 PM
#3   Because I kept calling ELKONIG a C U Itsasurewin 06/02/18 06:51:26 PM
#2   Why were you banned from LDSR board? beast1423 06/02/18 12:17:11 PM
#1   Check out data443 (LDSR). Itsasurewin 05/31/18 08:10:11 PM