1. KEY CHANGES TO THE DATA PROTECTION LANDSCAPE
GDPR
KEY CHANGES TO THE DATA PROTECTION LANDSCAPE

2. WHAT IS GDPR?
A new set of rules and processes that strengthens the protection of personal data in the digital era;
Regulation: One continent – one Law;
Apply to individuals rights to personal data and not B2B.
Coming into action on 25 May 2018.
Key enabler of Digital Single Market;

3. What is changing ?

4. GDPR.. Expand its Territorial Reach;
Data subjects’ Right to be informed; erasure;
restriction;
access;
object;
Data include
Online identifiers, Device identifiers Cookies IDs, IP addresses, Pseudonymized & anonymous data
reidentification, genetic , biometric data,
GDPR..
Expand its Territorial Reach;
Captures a lot of data by broadening the personal data definitions;
Brings Changes to consent nature & mechanisms;
Swift control back to Data Subjects;
Introduces Right to Data Portability;
Places Restrictions on Profiling;
Consent must be
Freely given, specific, informed and unambiguous indication,
Easy to withdraw.

5. GDPR.. Increases the scope for processors;
Introduces Privacy by design and by default;
Talks about Data Protection Privacy Assessment (DPIA);
Encourages Co- operation/ Consultation with DPAs;
Imposes Security Obligations & Data breaches notifications;
Makes provisions about Data Protection Officers;
Introduces the leading DPA for International Organizations;
Accountability: Imposes Record keeping obligations and demonstration of compliance.

6. FINES IS THE KING! Up to 20m or 4% of worldwide turnover €
Whichever is BIGGER!!
Multinational organizations are treated as a single entity!!

7. How will GDPR affect e-shops

8. Review… The way privacy information is communicated;
Contracts and services with data processors;
Existing data bases;
Processes and mechanisms for obtaining consent;
Marketing Policies;
Process to handle data subjects requests;
Security measures.

9. Preparing for GDPR Compliance

10. You have to… Create Awareness & Right Team;
Assess how GDPR is prioritized in the operational excellence, growth, digital, data and cyber security transformation objectives.
Map & Review data processing activities (what, how, when, where, why) & Security Policies & Key Partners;
Make a gap analysis;
Choose your right roadmap plan to GDPR;
Implement;
Audit.

11. E- business & data privacy law specialist
“At its core, data protection is about simple things: respect, trust, integrity, and professionalism”.
"To avoid change fatigue and maximize data monetization, you must realize the motivation found within the privacy concept”.
Thank you!
Penny Kontogeorgou
E- business & data privacy law specialist