Abstract:

The objectiveof the EU GDPR: -Provide a clear framework for the exercise of data subjects’ rights, and ensure lawful collection and use of personal data by controllers and processors alike. Accordingly, GDPR defines: -Record-keeping of legal bases for collection as a vital compliance step -Designation of a Data Protection Officer -Provision (free-of-charge) of means to exercise data subject rights -Strong focus on Privacy-by-design, data minimisation, organisational measures -A single lead DPA, and abolition of prior notification requirements