Monthly Newsletter GDPR: Accountability Privacy By Design And Privacy By Default

INTRODUCTION

This fourth edition of the GDPR newsletter, the first after our tie-up with Dentons, deals with the (new) data protection principles of accountability, privacy by design and privacy by default.

Under the Dutch Personal Data Protection Act (the DPA) organisations processing personal data are required to notify the supervisory authority (the Autoriteit Persoonsgegevens) about their processing. Under the GDPR organisations will be no longer obliged to report their processing. Instead, more responsibilities arise for organisations in this respect. The GDPR places emphasis on the principle of 'accountability', which requires organisations to take all technical and organisational measures to comply with the principles and obligations arising from the GDPR. It furthermore requires organisations to be able to demonstrate this compliance. As expected, the newly introduced data protection principles will have a major impact on organisations' current practices.