Fundamentals of GDPR: Why and What

Currently there is a lot of buzz in the market about the GDPR implementation. Many people have various views about it but before we jump into the GDPR implementation, we will clarify few basic points here. So let’s dive into the world of Data Privacy.

To spread the awareness, recently created the video on this. Have look into it and share with your friends and family. BECAUSE DATA PRIVACY MATTERS.

What is GDPR?

GDPR is a law (Reference)

1. GDPR is a law announces by the EU Commission in January 2016 and in effect since 25 May 2018.
2. GDPR — General Data Protection Regulations
3. GDPR law covers all the EU citizens personal data across the world
4. As of today (February 2019), GDPR is the most comprehensive and strict law to protect the fundamental rights of data of the individuals across the globe.
5. GDPR is a mind-set that how to deal with the personal data of the users.

What is NOT GDPR?

1. GDPR is not a standard framework like Project Management or any other — as GDPR is a law.
2. GDPR is not and cannot be accredited by the institution — as GDPR is a law.
3. GDPR is not a certification — as GDPR is a law.
4. GDPR is not a check-list or set of steps to follow.

Why GDPR came into existence?

We all know that today across the world we are a Data-driven economy. Here the Tech giants have used the personal information of their users extensively to generate huge revenue.

In such cases, the actual user who is the data source in entire eco-system is almost unaware about how his/ her data/ information is being used. So this GDPR law is giving complete control in the hands of the actual users. They can choose, what should be and shouldn’t be done with their data.

Do we need to be GDPR complaint company/ organisation? (Reference)

Fundamental question

Weather my company/ organisation has to comply with the GDPR or not?

Answer is simple: if your company/ organisation deals directly or indirectly with the personal identifiable information of the EU citizens then you have to be GDPR compliant.

In one line: Any entity that deals with the personal data of EU citizens irrespective of the region that they operate in are eligible to be GDPR compliant.

Share your view in the comment section about GDPR.

📝 Read this story later in Journal.

🗞 Wake up every Sunday morning to the week’s most noteworthy Tech stories, opinions, and news waiting in your inbox: Get the noteworthy newsletter >