The General Data Protection Regulation or GDPR is the new data protection legislation enacted by the European Union and implemented on May 25, 2018.
If your business has a presence in the EU or any of the European Economic Area countries (even if you are not physically in the EU) or offer products/services to EU residents – you will need to comply. Find out all you need to know about GDPR in our blog series here.
GDPR came into effect on May 25, 2018, and the new regulations need to be fully understood by all, especially North American businesses that have customers based in the EU. These changes cannot be taken lightly, as they apply to all organizations (regardless of geography) that collect and use personal data from EU residents. GDPR compliance is a must, and the risks of non-compliance are too great from many different perspectives:
Non-compliance can result in brand damage and loss of trust with customers, business partners and GDPR Supervising Authorities.
Potential of class action law suits brought on by data subjects, that may result in huge legal and compensation costs.
GDPR is establishing fines of up to €20MM or 4% GLOBAL annual revenue, whichever is higher to the organization.
Any incident will result in interruption of day-to-day operations, as EU Supervising Authorities and data subjects must be notified within 72 hours of knowledge of the incident if there is a risk to the compromised individuals.
www.eugdpr.org“The EU General Data Protection Regulation (GDPR) replaces the Data Protection Directive 95/46/EC and was designed to harmonize data privacy laws across Europe, to protect and empower all EU citizens data privacy and to reshape the way organizations across the region approach data privacy.”
Headquartered in Vancouver BC, Kirke Management Consulting ensures – through professional development and certification – that we are fully immersed in the developments around GDPR, so that we can in turn guide our customers, locally in Vancouver and across Canada with their GDPR readiness and compliance requirements.
Our GDPR consultants and data privacy experts ensure that the three pillars of Privacy management are present and working together to enable an organization to reach a mature level in their privacy management practices.
If you are unsure where to start or exactly what you need to do to become compliant, our GDPR consultants focus on 10 key compliance requirements that work together to build the right foundation to protect your customers’ personal data.
Are you GDPR compliant? Complete our complimentary GDPR Assessment to find out.
Privacy risks going viral
Read ArticleYou've got... a breach notification?
Read ArticleWhy we need to embrace a more mature attitude towards our data
Read ArticlePrivacy interest is evolving... and California is leading
Read Article