GDPR Compliance Research Articles

Big Data Analytics in Electronic Communications: A Reality in Need of Granular Regulation (Even if This Includes An Interim Period of No Regulation at All)

Over the past few years big data analytics have forcefully entered the mainstream. Admittedly, mod- ern life would be inconceivable without the services afforded by this type of processing in the field of electronic communications. At the same time public administrations are increasingly discovering the benefits of big data analytics afforded to them by telecommunications operators. Nevertheless, despite public attention and high volumes of expert analyses, the majority of approaches on the challenges to personal data protection by this type of data processing remains theoretical; Tellingly, the EDPS speaks of the “black box” of big data analytics. However, the authors were able to open, and stare into, the “black box” of big data analytics in the electronic communications field in 2017 and 2018 in the context of GDPR compliance assessments. Their analysis first attempts to set the legal scene today, answering two crucial questions on scope and applicable law, before presenting a typology for a scalable and granular approach that the authors feel is necessary but nevertheless is missing from the text of the draft ePrivacy Regulation. The authors therefore conclude that processing requirements and particularities, as evidenced under the big data analytics paradigm, make necessary a much more detailed approach than the one afforded by the draft ePrivacy Regulation today. Until these needs are met, through the introduction of a new, fundamentally amended text, the authors suggest that the current regulatory framework and the mechanisms afforded by it be extended for an interim period, so as to afford legislators with the necessary space and time to revise their work.

General Data Protection Regulation: new ethical and constitutional aspects, along with new challenges to information law

The EU 'General Data Protection Regulation' (GDPR) marked the most important step towards reforming data privacy regulation in recent years, as it has brought about significant changes in data process in various sectors, ranging from healthcare to banking and beyond. Various concerns have been raised, and as a consequence of these, certain parts of the text of the GDPR itself have already started to become questionable due to rapid technological progress, including, for example, the use of information technology, automatisation processes and advanced algorithms in individual decision-making activities. The road to GDPR compliance by all European Union members may prove to be a long one and it is clear that only time will tell how GDPR matters will evolve and unfold. In this paper, we aim to offer a review of the practical, ethical and constitutional aspects of the new regulation and examine all the controversies that the new technology has given rise to in the course of the regulation's application.

GDPR Compliance in SMEs: There is much to be done

The obligatory adaptation of Organizations to the General Data Protection Regulation (EU) 2016/679 (GDPR), will imply a set of legal, technological and functional changes, with a direct impact on the daily life of Organizations as a result of their increased responsibility with data protection subjects that has been reinforced by the new legislation. On the other hand, the transfer of responsibilities from the national authorities to the Organizations obliges them to prove, at all times, full compliance with the legislation. Organizations are subject to heavy fines when a non-compliance is detected. This new reality is a challenge for any Organization, and in particular for small and medium-sized enterprises (SMEs), which have fewer human and financial resources to carry out the necessary measures to comply with legislation. In order to know how SMEs are preparing themselves, we have conducted face-to-face interviews with ten industrial SMEs. The main conclusion is that, given these companies' lack of awareness of their obligations and duties in relation to Personal Data Protection, it is urgent to define a methodology to be able to comply with GDPR.

Supply chain arrangements: The ABC to GDPR compliance—A spotlight on emerging market practice in supplier contracts in light of the GDPR

With ever increasingly complex and disaggregated sourcing supply chains and in the wake of the GDPR application deadline, this article shines a spotlight on early emerging market practice in supplier contracts.

Understand your institution's responsibilities under the General Data Protection Regulations

If international students from the European Union interact with any part of your website, your institution is subject to the E.U.'s comprehensive privacy rules, the General Data Protection Regulations, which went into effect May 25, 2018. The American Association of Collegiate Registrars and Admissions Officers, along with partners including the Council for Advancement and Support of Education and Educause, has released a guide to help navigate GDPR compliance.

Understand your institution's responsibilities under the General Data Protection Regulations

If international students from the European Union interact with any part of your website, your institution is subject to the E.U.'s comprehensive privacy rules, the General Data Protection Regulations, which went into effect May 25, 2018. The American Association of Collegiate Registrars and Admissions Officers, along with partners including the Council for Advancement and Support of Education and Educause, among others, has released a guide to help registrars and admissions officers navigate GDPR compliance.

Issues of personal data management in organizations – GDPR compliance level analysis

Issues of personal data management in organizations – GDPR compliance level analysis

Smart Contracts and Smart Disclosure: Coding a GDPR Compliance Framework

Smart Contracts and Smart Disclosure: Coding a GDPR Compliance Framework

GDPR compliance: your tech department's next big opportunity

As our dependency on technology steadily increases, so do the trails of information that we leave behind. You only need to look at recent scandals in the press to understand how vital data protection is becoming when it comes to maintaining the privacy of individuals, organisations and governments. Data breaches and leaks can have an enormous range of consequences.