Access our “EU GDPR in 13 Game Changers” Publication here.
On 25 May 2016, the GDPR finally entered into force after years of consulting, drafting and negotiating at various levels. It will start to apply as of 25 May 2018 giving organizations a limited window to get ready for the new rules.
The Real Work Starts Now
While the EU legislators might be leaning back now with the GDPR officially in force, for private and public sector organizations and data protection regulators the real work only starts now. The GDPR introduces multiple new rules which will require close consideration and operational changes at various levels. With its 99 Articles and 173 Recitals, the GDPR is by no means an easy piece of legislation to get one's head around. In addition, multiple opening clauses allowing EU Member States to diverge from the GDPR rules will further complicate compliance efforts.
The GDPR Game Changers
The clock is ticking and organizations would be wise to assess sooner rather than later how the GDPR will affect their business models and data processing practices. To assist organizations with this process, we at Baker & McKenzie have devised a GDPR Game Plan. We have identified 13 areas of particular interest (the so-called 'Game Changers') that organizations need to be aware of and address as a matter of priority.
For each of those Game Changers, we have prepared a detailed analysis summarizing what it is about, explaining what it means in terms of data protection compliance and suggesting steps that organizations might want to take to ensure compliance. We have now published these Game Changer articles in our "EU GDPR in 13 Game Changers" Publication which you may access and download here.
What Lies Ahead
Needless to say that the GDPR is still in its infancy and raises many questions which cannot be answered with certainty at this point in time. As much as businesses and other organizations have a lot of work to do, regulators will also need to start rolling up their sleeves. One of their tasks will be to support organizations by issuing guidance on how they will interpret the GDPR requirements in practice. Our data protection experts in Europe and beyond will closely monitor regulators for such output, engage in conversations with them, and share their learnings between themselves and with our clients. We will also share our expertise via b:INFORM and invite you to visit our portal from time to time to learn about the latest GDPR news.
The 13 Game Changers
2. Data Subjects' Rights
3. Profiling and Profiling-based Decision Making
6. Data Mapping
7. Data Protection by Design and by Default
8. Data Protection Impact Assessments
11. Cross-Border Data Transfer Rules
12. Data Breach Notification
13. Enforcement & Sanctions