Content deleted Content added
No edit summary |
|||
Line 9:
The regulation applies if the data controller or processor (organization) or the data subject (person) is based in the EU. Furthermore (and unlike the current Directive) the Regulation '''also applies to organizations based outside the European Union if they process personal data of EU residents'''. According to the European Commission "personal data is any information relating to an individual, whether it relates to his or her private, professional or public life. It can be anything from a name, a photo, an email address, bank details, posts on social networking websites, medical information, or a computer’s IP address." <ref>[http://europa.eu/rapid/press-release_IP-12-46_en.htm?locale=en European Commission’s press release announcing the proposed comprehensive reform of data protection rules]. 25 January 2012. Retrieved 03 January 2013.</ref>
=== Single Set of Rules ===
One single set of rules applies to all EU member states and there will be one '''Single Data Protection Authority (DPA)''' responsible for each company depending on where the Company is based or which DPA it chooses. A European Data Protection Board will coordinate the DPAs.
There is an exception for employee data that still might be subject to individual country regulations.
=== Responsibility & Accountability ===
The notice requirements remain and are expanded. They must include the retention time for personal data and contact information for data controller and data protection officer has to be provided.
| |||