GDPR

Full Title or Meme

1. The General Data Protection Regulations (GDPR) of the European Union
2. REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016

Context

1. Above all else, GDPR represents the ongoing battle between unfettered capitalism and human dignity.
2. A good source of material on the EU GDPR is available at this site.
3. The GDPR is a scam page describes some of the problems with the regulations.

Clear and plane language is required by the where-as paragraph 39. "The principle of Transparency requires that any information and communication relating to the processing of those personal data be easily accessible and easy to understand, and that clear and plain language be used"

Guidelines on Transparency have been published http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=622227

Problems

• This regulation is an attempt to regulate the impact of the large scale gathering of user data by large US-based corporations.
• This regulation raised hopes of privacy advocates, but in the end failed to deliver.

Solution

• One (and only one) nation in the EU is determined to be competent to penalize a company for violations. The first case adjudicated on GDPR was against Google and resulted in a fine of 50 Million euros. Details are at the CNIL site. (2019-01-21)
• DATA PROTECTION: COMMISSION ADOPTS ADEQUACY DECISIONS FOR THE UK 2021-06-28 which means the GDPR still applies in the UK.
• The cost of non-compliance cans be an existential threat to the continued existence of the corporation as described in this article.

References

Other material

• Harvard Business Review Article.
• The wiki page at Right to be Forgotten describes some of the challenges that are to be expected from this legislation.
• The wiki page at GDPR Avoidance describes the machinations that companies go through to avoid both the letter and the spirit of the GDPR.