General Data Protection Regulation: Difference between revisions

Revision as of 15:01, 3 January 2013

Revision as of 15:03, 3 January 2013

Line 10:

The proposal for the European Data Protection Regulation contains the following key changes: <ref>[http://ec.europa.eu/justice/data-protection/document/review2012/com_2012_11_en.pdf Proposal for the EU General Data Protection Regulation]. European Commission. 25 January 2012. Retrieved 03 January 2013.</ref>

=== Scope ===

The regulation applies if the data controller or processor (organization) or the data subject (person) is based in the EU. Furthermore (and unlike the current Directive) the Regulation '''also applies to companiesorganizations based outside the European Union if they process personal data of EU residents'''. According to the European Commission "personal data is any information relating to an individual, whether it relates to his or her private, professional or public life. It can be anything from a name, a photo, an email address, bank details, posts on social networking websites, medical information, or a computer’s IP address." <ref>[http://europa.eu/rapid/press-release_IP-12-46_en.htm?locale=en European Commission’s press release announcing the proposed comprehensive reform of data protection rules]. 25 January 2012. Retrieved 03 January 2013.</ref>

=== Single Set of Rules ===

One single set of rules applies to all EU member states and there will be one '''Single Data Protection Authority (DPA)''' responsible for each company depending on where the Company is based or which DPA it chooses. A European Data Protection Board will coordinate the DPAs.