Commentary Addressing Risks and Opportunities Through the Lifecycle of Data, Technology, Advertising and Innovation

Data Counsel

Home | Data Counsel

<img class="size-medium wp-image-5161 alignright" src="https://dataprivacymonitor.bakerhostetlerblogs.com/wp-content/uploads/sites/5/2018/01/data-international-iStock-618023980-300x204.jpg" alt="" width="300" height="204" />

With only four months remaining until the EU General Data Protection Regulation takes effect on May 25, 2018, the European Commission has launched a new <a href="https://ec.europa.eu/commission/priorities/justice-and-fundamental-rights/data-protection/2018-reform-eu-data-protection-rules_en">website</a> offering guidance on requirements and implementation targeted at an array of stakeholders including Member State governments, businesses, data subjects, and other entities whose operations or data processing activities will bring them into the GDPR’s orbit.



The Commission’s GDPR compliance toolkit features:
<ul>
 	<li>Basic background information on the GDPR, including what the Regulation <a href="https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/reform/what-does-general-data-protection-regulation-gdpr-govern_en">governs</a>, what constitutes <a href="https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/reform/what-personal-data-0">personal data</a> and <a href="https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/reform/what-constitutes-data-processing_en">data processing</a>, and an introduction to <a href="https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/reform/what-are-data-protection-authorities-dpas_en">Data Protection Authorities</a&gt;;</li>
 	<li>A detailed page setting forth <a href="https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/reform/rules-business-and-organisations_en">rules for businesses and organizations</a>, including <a href="https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/reform/rules-business-and-organisations/application-regulation/who-does-data-protection-law-apply_en">clarification regarding applicability</a>, the distinction between <a href="https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/reform/rules-business-and-organisations/obligations/controller-processor/what-data-controller-or-data-processor_en">data controllers and processers</a>, what to do in the event of a <a href="https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/reform/rules-business-and-organisations/obligations/data-breaches/what-data-breach-and-what-do-we-have-do-case-data-breach_en">personal data breach</a>, how to deal with <a href="https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/reform/rules-business-and-organisations/dealing-citizens/how-do-we-deal-requests-individuals-exercising-their-data-protection-rights_en">requests</a> from EU data subjects (e.g., to access or amend their personal data) and the GDPR’s <a href="https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/reform/rules-business-and-organisations/enforcement-and-sanctions_en">enforcement and sanction</a> mechanisms;</li>
 	<li>A user-friendly section focused on <a href="http://ec.europa.eu/justice/smedataprotect/index_en.htm">helping small to midsize enterprises</a> get their GDPR houses in order;</li>
 	<li>Information for EU data subjects, outlining their personal data protection <a href="https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/reform/rights-citizens/my-rights_en">rights</a> and <a href="https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/reform/rights-citizens/redress_en">how to assert them</a&gt;; and</li>
 	<li>A variety of fact sheets for business and individuals, including a timeline of <a href="https://ec.europa.eu/commission/sites/beta-political/files/data-protection-factsheet-next-steps_en.pdf">next steps</a> and an explanation of the <a href="https://ec.europa.eu/commission/sites/beta-political/files/data-protection-factsheet-business_en.pdf">benefits</a> of GDPR for the business community.</li>
</ul>
The Commission also issued a <a href="https://ec.europa.eu/commission/sites/beta-political/files/data-protection-communication-com.2018.43.3_en.pdf">Communication</a> to the European Parliament and Council on January 24. In addition to introducing the online toolkit, the document summarizes the benefits of the new GDPR; describes how the Commission has been preparing to date; outlines the next steps for regulators to ensure the preparation efforts are successful; and previews the Commission’s action plan for these final few months.

Clock Ticking, European Commission Launches GDPR Implementation Guidance Website