The Clock Is Ticking. Implementing The General Data Protection Regulation

Data Privacy

With 2018 just around the corner and the European Union setting a clock on raising the standards of personal data protection, companies are starting to prepare themselves for new challenges.

The General Data Protection Regulation ("GDPR") approved by the EU in 2016 will enter into force on the 25th of May 2018 and all companies processing personal data need to be compliant by that time.

As compared to the current Romanian legislation which sets reasonable administrative fines and measures, the GDPR ensures that non-compliance is not an option by allowing the National Privacy Authority to impose fines up to 20 million Euros or 4% of group worldwide turnover (whichever is greater) against both data controllers and data processors.