Explains what the GDPR governs.

IT590 Unit 2 Assignment RubricCourse: IT590 Legal and Ethical Issues in IT

Criteria 1Level III MaxPoints45 points

Level II MaxPoints38.25 points

Level I MaxPoints31.5 points

Not Present0 points

Criterion Score

Criteria 1:

GDPR

/ 45Meets all

criteria:

• Explains

what the

GDPR

governs.

Explains what the GDPR governs.

Introduction

The GDPR is the biggest update to the EU’s data protection laws since they were introduced in 1995. It will come into force on 25 May 2018 and change how you handle personal data relating to people living in the EU. If you want to understand what this means for your business, read on!

What is the GDPR?

The GDPR is a regulation that replaces the Data Protection Directive, which was in place since 1995. The GDPR has been dubbed “the biggest change to data privacy laws since the birth of the internet” and it’s likely to be one of the most significant changes to privacy laws ever made.

The new EU law applies to all member states (including non-EU countries) so even if you’re outside Europe and don’t have access to its laws, you’ll still have plenty of protections under this new set of regulations.

What does the GDPR do?

The GDPR is a regulation that governs the processing of personal data in the EU. The GDPR replaces the Data Protection Directive 95/46/EC, which was issued by the European Parliament and Council in 1995.

The GDPR will apply to all member states, as well as companies outside of the EU that collect data about EU citizens (even when doing so from within another country).

Who is affected by the GDPR?

The GDPR affects any person or business processing the personal data of individuals from the European Union. The GDPR also applies to individuals whose personal data are processed by an organization located outside of the EU, but only if all parties in question have a “connection” with each other and where one party is based in one country (e.g., France) and another party is based in another country (e.g., Germany).

For example, if you’re an American company that processes the data of German citizens on behalf of your clients — including their names, email addresses and phone numbers — then you’ll need to comply with both parts A(1) and B(1) under Section 4(a)(i) of Regulation 2016/679 (“GDPR”).

How does the GDPR affect small businesses?

The GDPR is a regulation that is designed to protect people’s personal data and privacy rights. It also applies to businesses that store or process data on people in the EU (European Union).

The GDPR requires businesses operating in the EU to adhere to strict requirements about how they handle customer information, including:

• Consent: You must obtain explicit consent from your customers before collecting their personal data. This can be done through an opt-in form or by sending an email containing details of what you’re collecting and why; this should be easy for customers to read and understand, as well as easy for them to accept without feeling pressured into doing so. The consent should also include information about any third party companies processing your customers’ personal info–for example, if you have a contract with another company that collects certain information on behalf of yours–so that there’s no confusion about where this data goes once it’s been collected by either party!

What is an electronic signature and how does it work under the GDPR?

An electronic signature is a way to authenticate data and make sure that it was sent by the person who is supposed to have it. It’s like a signature on paper, but instead of being written in ink or typed into an app, this signature is created by a device (and therefore can’t be changed).

Under the GDPR, you can use an electronic signature if you choose to do so after May 24th 2018–but there are some limitations:

• You’ll need to have a physical presence in order for your customer service team to complete their work with them; otherwise they’ll need another method of authentication (like phone call). If this makes sense for your company, then go ahead and set up all systems before May 24th! Otherwise stick with what works best for each customer service representative’s current setup; this will depend on their experience level when working with those clients!

Can I use Artificial Intelligence to gather data for my business?

Artificial Intelligence (AI) is not a legal entity. It cannot be a data controller or processor and cannot represent anyone else. AI will therefore not be able to collect or use any personal data on its own behalf.

When you employ an AI platform to help you gather information from your customers, it’s important that you know the limits of what this technology can do for your business:

• For example, if your company has an automated email marketing tool that sends out promotions at random times throughout the day based on different triggers (e.g., location), then this tool might be considered “personalization” under GDPR because it targets specific individuals with personalized messages based on their behavior and preferences–so long as those messages are sent only once per person per day.*

Understanding the GDPR can help you prepare for its provisions coming into force on 25 May 2018.

The GDPR is a regulation that came into effect on 25 May 2018. It is designed to protect the personal data of EU citizens, and it applies to all organizations processing any personal data (other than public authorities) within the European Union.

The GDPR affects all businesses that process the personal information of individuals in any member state of the European Union–from small businesses to large multinationals. While many smaller companies may not have concerns about complying with this new law, it’s important for you as a business owner or manager not just because you need an understanding of its provisions but also because how well prepared you are going into its implementation will determine whether your company survives whatever challenges come its way as a result!

Conclusion

We hope that this blog has explained what the GDPR actually means for businesses. If you have any questions about the GDPR and how it will affect your business, don’t hesitate to get in touch with us. We are always happy to help and will do our best to answer any questions you may have!