GDPR changes business processes to better protect personal data

Submitted by Petko Georgiev on 28 March 2019

The companies and organizations should make serious efforts, in order to change their procedures so that they do not fall under the sanctions of the Regulation.

The new General Data Protection Regulation (Regulation (EU) 2016/679) or GDPR (General Data Protection Regulation), shall enter into force on 25th May 2018. It introduces a number of significant changes in accordance with the current legal framework and sets higher requirements towards the subjects in the personal data protection system. The Regulation concerns all organizations that have access to the personal data of clients, workers and employees, suppliers, etc.

The new requirements in legislation shall have serious effect on any type of business within the European Union that is why after its publication on 4th May 2017 more than a one-year transitional period was given for its introduction. The introduction of the Regulation affects almost all working units within the companies, and particularly those that work with personal and sensitive data, whether it concerns information about employees, partners or clients. The Regulation sets high requirements in front of the work of the IT, financial, legal and marketing specialists. A special position of a Data Protection Officer – DPO is introduced.

It is time for the business and the organizations to implement the GDPR requirements, in order to avoid being affected by the serious sanctions, provided in the Regulation – a fine up to 20 million Euros or 4% of the company’s global turnover, depending on which amount is bigger.

The successful implementation of the new requirements goes through comprehensive analysis of the procedures and the systems for collection, storage and protection of the personal data in the organizations, as well as implementation of new and secure information and communication technological solutions. In order to succeed in coping with the new requirements in a quality and timely manner, it is obligatory to consult with a specialist, particularly in relation to the legal and technological changes. ICT Cluster – Burgas offers professional consultation and professional solutions in the difficult GDPR transition.

More Information

Share this Article