Introduction to the Principles of GDPR

In a society where technology is almost a second nature, data and information is constantly being shared by consumers and organisations. The aim of GDPR is to protect all EU citizens from breaches and make sure data remains private from nuisances. GDPR is designed to replace the Data Protection Directive 1995. The Data Protection Directive was created in 1995. Life has changed immeasurably since then with consumers being online at almost all times, and more places for customers to input their details and share their information for the latest deal, or to subscribe to a particular service. GDPR will place stronger responsibility on the shoulders of organisations to ensure that customer information remains protected. GDPR Requirements
For data subjects to have more control over personal data that is processed automatically.
Companies must implement reasonable data protection measures to protect consumers’ personal data.
Controllers must notify a Supervisory Authority in the case of a personal data breach within 72 hours of learning of the breach, providing specific details about the breach.
Companies must perform Data Protection Impact Assessments to identify risks to consumer data.
Some companies must hire a Data Protection Officer who will serve to advise companies about compliance.