New European General Data Protection Regulation

The European General Data Protection Regulation introduces a uniform data protection legislation which will apply directly in all European Members States and which will also have to be observed by numerous companies outside the EU who have business in the EU. The new Regulation will essentially replace the national data protection legislation in the member states which has applied to date. Companies have two years to adapt their business models and processes to the new requirements. The handbook “The European General Data Protection Regulation and its Impact on Corporate Practice” clearly and concisely addresses the key changes resulting from the General Data Protection Regulation in English. The data protection requirements the Regulation places on typical business processes and rapidly spreading new technologies are explained using practically relevant examples. The handbook therefore provides the ideal basis for legal counsels and all international companies affected by the Regulation to review their existing business processes and ensure that new processes and business models are in line with these new data protection requirements. This practical business handbook focuses on the following issues which are relevant for any company affected by the new Regulation: Scope and logic of the General Data Protection Regulation and remaining areas regulated at national level Mandatory data protection impact assessment Appointment of a data protection officer Transfer of personal data to third countries Cloud computing, outsourcing Advertising and data protection Profiling and big data analysis Requirements placed on IT security Information and reporting obligations Data breach notifications Rights of persons affected Liability and sanctions for data protection breaches