Since May 25, the GDPR, the acronym in English of the EU General Data Protection Regulation, is mandatory.There has been much talk about the changes that companies will have to address in order to comply with the GDPR obligations if they do not want to receive million dollar sanctions that can reach 20 million euros or 4% of their global billing.However, here we are going to underline the benefits of the GDPR to the hundreds of millions of European citizens in protecting and managing their personal information.
Related It should be remembered that, in general, with the GDPR, the European Union wants to give greater control of its personal information to the owners of this.Personal information is understood from the name to the telephone or postal address, going through financial, academic, labor, health, religious or race beliefs.Besides, now, as a novelty, biometric and genetic data are also included.
Reinforced consent
A key point to give users greater control of information is that of consent.Until now, long, unintelligible and hidden texts were common to get the user to consent to the use of their personal data, for example, with commercial purposes.Tacit and diffuse consent disappears.Any consent from now must be requested with a clear, simple and easily accessible text.And the user must give it unequivocally.
For this reason, a generic consent will no longer be valid, but it will have to be specific and expressly for each specific activity, that is, companies must adapt their pages so that citizens understand perfectly so that they are claimed the data and what implications does that have in each case.
Portability of the data
In addition, the GDPR will finally realize the portability of data from one service to another if the client asks for it.It was one of the great demands of internet users in recent years and will make it possible for everyone to take your data at home in a recognizable format when you cancel a service or that you can transfer it when you change your platform or service.
Each provider or social network should put their means to make this point a reality, but it is convenient to take into account the Facebook model, which allows the user to download a copy of their data in a zip file that includes all their messages, conversations chat, photographs or publications.In any case, it is a subject of a very large technical complexity and that will require the development of standards so that it can be carried out.
Right to forget
The European regulation also puts the "right to oblivion" at the forefront, another of the aspirations of Internet users for years.In this way, it will be easier for personal information to be eliminated (for example, searches for Google) at the request of its owner.Delitos that they have prescribed continue to mark the lives of many people because they appear on the first page of the Google search engine.An information about the supposed anorexia of the Spanish exatleta Marta Bobo continued condemning her reputation many years after be published.The new legislation now wants to avoid the headaches and sleepless nights that the most remote past can cause us.
Of course, it should be noted that this right will be limited when the public interest of the information is imposed.For example, a corrupt politician could not request that the news that reported his misdeeds be eliminated because the right to information from the rest of the community.
Security breach notification
An important point of the new regulation is that it obliges companies to notify in 72 hours the security breaches they suffer and that suppose the theft of personal information of their clients.They will have to communicate them to the authorities (in Spain to the Spanish Agency for Data Protection), but above all to the affected clients.
Even those companies may be forced to publish their gaps through the media.Starting in May, they will be much harder to see cases like Yahoo, which between late 2016 and early 2017 I inform with Two years behind several security breaches that had exposed the data of tens of millions of customers.
World geographic coverage
Another very interesting point of the GDPR is that it extends the geographic coverage of data protection, and that the obligations extend to any company that deals with data from community citizens, even if its information management infrastructure is outside The EU.From now on, a company cannot claim that its servers are in China, Russia or the United States to avoid submitting to European legislation on data protection.
Privacy by design and default privacy
Article 25 of the European Regulation proclaims the so-called privacy by design and privacy by default .It is not something that the user will be aware of in many cases, but it will help you have more control over the information.And the so-called "privacy by design" and "default privacy" will force the developers of software and services to manage them to Protect the privacy of users above all, making their systems only claim, process and store the minimum amount of personal data needed.
an adequate guarantee of protection
In the words of Maite Arcos, specialist in digitalization and institutional relations at Orange , "we must celebrate that the line undertaken by the European authorities regarding data protection seems to have assumed a firm commitment to the creation of a global and coherent framework that grants legal certainty and allows reconciling the exploitation of all the social and economic potential of the data, with the guarantee of adequate protection ".
To ensure maximum security to its customers, Orange, through the "My contract" menu of your My Orange application, offers access to a "Privacy Review" section where you can accept (and review) the privacy options.
Images | iStock and Orange
Comments
Post a Comment