Far reaching proposals to update and modernise data protection rules has been announced. Some of the key changes are:
- A single set of rules valid across the EU.
- No need to notify – instead there is increased responsibility and accountability for those processing personal data.
- Serious data breaches to be notified within 24 hours.
- Organisations only have to deal with a single national data protection authority, being that in the country where they have their main establishment.
- Individuals will have easier access to their own data.
- Individuals will have a "right to be forgotten".
- EU rules apply if personal data is handled abroad by companies that are active in the EU.
- There will be increased powers given to national data protection authorities.
A new general EU framework is to be introduced via regulation, and so will have direct
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
