GDPR

General Data Protection Regulation

The General Data Protection Regulation is basically a law enforced in 2018 in European Union and European Economic Area to keep an eye on data protection and privacy. Since, the European Economic Area is a vast geographical area and also almost all of the world’s economic activity is related to this area, hence approximately all oraganizations and individuals are bound to follow the law. The law also seeks to point to transfer of personal data outside the European Union and European Economic Area. The agenda of this law is to provide control to the individuals over their personal data and to the ease the business environment. In today’s digital world, the thing which is more concerned id data only. Be it any business and any government organization, each and every service needs data collection and processing. Data gets controlled and most importantly stored by the respective organizations.

Provisions of the law:

The GDPR applies only for the individual whose data is being handled, the organization which is controlling the data and the organization which is processing the data of that individual are either residing in European Union or are related to business within European Economic Area. Also, if an individual/organization outside of the European union is realted with data business of European Economic Area, the rule applies for them as well. If the data is processed for purely personal means, and there is no connection of that data in economic terms, then that case is exempted from the GDPR provisions.

Adherence to the GDPR rules:

It may happen that by mistake, data can be lost, stolen or can go into the control of unwanted people. Therefore, there are provisions for the organizations to collect personal data legally and most importantly provide security for that information. They also have to respect the rights of the data owner, failing which there are harsh penalties.

Classification of personal data under GDPR:

Any individual’s name, address, photos, genetic as well as biometric data and ip address are considered personal data under GDPR regulations.

Importance of GDPR for organizations:

GDPR has formulated a unique set of rules to be followed all along the European Union as well as European Economic Area by each and every organization dealing in those area. Since every organizations need to comply to the GDPR’s rules only, and there is only a single supervising authority, i.e., GDPR itself, it is most likely that the organizations will end up with cost reduction. That way it proves to be beneficial for the organizations. GDPR rules also advices organizations to follow “pseudonymization” technique with a view of getting convenience in data collection and analysis while maintaing security of the collected information. Pseudonymization is a technique where data is processed in such a way that there becomes minimal or no chances of identification of data subject without the presence of additional information.

Importance of GDPR for individuals:

Since there are possibilities of data being hacked, it is miserable that for a large number of people, their important informations are exposed on the internet. GDPR ensures that whenever there is a data breach, consumers have the right to know about the incident. Organizations are asked to inform the supervising authority at the earliest so that it can arrange measures for the consumer to save thier data from being abused. Consumers are also informed about how their data is being acquired, the purpose behind it and the way it is processed in a simple language by the organizations acquiring their data. GDPR’s rules ensures that the information of an individual is being collected only with his/her consent and even retained untill they agree. Organizations have to comply to the aforesaid rule and need to safeguard the rights of the data subject. If anytime, they want to opt-out or want their dat to be deleted from the respective database, they can no longer retain their information.

SpotOnDb respects the rights of data subject:

SpotOnDb strictly follows GDPR’s guidelines and respects the rights of data subject. Our data is sourced from legal means. As advised by GDPR’s regulations, we ensure our customers permission is being taken at each step and they are notified via their understandable language about the use of their information. Only after consumer’s consent we market the data througout our business network.