In May 2018 the General Data Protection Regulation came into force, forever change the way data is handled within the European Union (EU) and how the data of EU citizens is handled outside the economic bloc. This comprehensive guide will explain what the GDPR is, what it regulates, and what organisations are obliged to do to comply with it.
So far nearly 1,700 fines have been issued (the total number of fines is unknown as not all fines are made public) with Spain leading the way with 594 fines, over double the amount of second place Italy, which has handed out 246 fines. The most common type of breach was Article 5 (principles relating to processing of personal data), which made up 57% of the publicly known fines.
The total amount of fines against private and public sector organisations adds up to almost €2.5 billion. In 71 cases, the fines were above €1 million and in over one-fifth of cases, the imposed fine was over €100,000. The largest fine against an individual organisation so far was €746 million handed out in Luxembourg.
The Data Protection Officer (DPO), a role defined by the GDPR, is key to any organisation operating within the EU or processing EU citizen data and this guide takes a deep dive into this role and how an organisation can support their DPO and how the DPO can strengthen the organisations resilience.
The Guide has a country by country breakdown, providing examples of judgements that are shaping how the GDPR is interpreted and enforced.
