General Data Protection Regulation - Heads Up

[anonymous-user]

My apologies if this has been done to death here already. Businesses need to be thinking about how to adapt to the General Data Protection Regulation when it comes into force on 25 May 2018.

Here is a summary from the ICO -

https://ico.org.uk/for-organisations/data-protecti...

[anonymous-user]

Bad search-fu.

[anonymous-user]

It is commonplace for regulatory rules set by one jurisdiction to affect international businesses in other jurisdictions. For example, UK banks have to deal with Federal laws such as FATCA. The US is notable for its use of exorbitant jurisdiction in various contexts. The EU exerts exorbitant jurisdiction by applying various standards to those trading with EU member states. Hence GDPR is a thing, Brexit or no Brexit. Indeed, even the hardest of hard Brexits will see the UK still having to comply with some aspects of EU law (but with zero input into making or changing EU law).

[anonymous-user]

Norway has a sucky deal - very expensive. It does get to go to meetings about rules and has some influence but no direct voting or veto rights. The will of the people is that Britain should be subject to EU rules but have little or no say in making them. Because freedom. Yay!

[anonymous-user]

We've gone high tech -

[anonymous-user]

The Government promises businesses light touch data regulation. At the same time it promises citizens strong and effective data control. Having cake and eating it is all the fashion these days

[anonymous-user]

Current ICO blah -

https://ico.org.uk/for-organisations/guide-to-the-...

[anonymous-user]

Morrisons vicariously liable for data breach by rogue employee -

https://www.clydeco.com/blog/the-hive/article/vica...