A small but important change concerns the wording “identifiable”. This replaces “personally identifiable” Identification instead.
In the future, this will also include IP addresses and cookies. which do not offer any way of identifying the specific person, but do make it possible to identify a user again later.
This means that in the future, a balancing of interests will also have to be carried out when recording the IP address and using cookies, which I will discuss further below.
Reporting party
The GDPR brings with it significantly more extensive information obligations Identification instead. This concerns information about which data is collected and what is done with it.
So you have to specify, for example, what exactly is being stored, for what purpose and for how long. This will only lead to the information texts becoming more extensive. As if anyone reads them these days.
Therefore, there will hopefully continue to be data protection generators that make it easy to comply with these notification obligations.
More extensive reporting, documentation, information and deletion obligations
In the future, there will be stricter reporting buy phone number list obligations in the event of hacker attacks or other losses of personal data.
In principle, it must be precisely documented which data is collected and processed and how this happens.
Also applies to operators outside the EU
On the one hand, the GDPR obviously applies to all companies based in the EU Identification instead. However, you cannot simply “escape” the EU to avoid the regulations.
Anyone who collects data from EU citizens or it’s not about the skirt, it’s about the head sells goods or services to EU citizens must comply with the GDPR, even if the company is based outside the EU.
contract data processing agreements necessary
Anyone who uses Google Analytics has hopefully signed a data processing agreement. This will be necessary in the future for all service providers who process personal data on their own behalf.
Therefore, if you use a service to which you forward personal data, the processing must be regulated by contract.
claim for compensation for pain and suffering
In the future, those affected will have the america email list opportunity to claim compensation for material and immaterial damages.
Anyone who processes personal data without consent, for example, can be faced with claims for damages. This is of course very tricky for many companies and can threaten their existence.