My Data!!!

General Data Protection Regulation GDPR:

Come May 25 2018, EU is very likely to enact what is called one of the most significant acts in the last 20 years. Hopefully it helps in creating eco-systems to let the current process stay intact and build a fire wall around personal information.

Key Notes:

Personal Data Definition: Any information that can be used directly or indirectly to identify the person E: Name, Photo, email address, bank details, posts on social networking sites, computer ip address etc

Data Subject Rights:

1. Breach Notifications : Any risk of data breach will trigger a notification to all the engaged stakeholders

2. Right to access : Data used by controllers can be sought and it is mandatory to share all the information in digital form

3. Right to be forgotten : Users have the complete control to let the controller erase the data

4. Data Portability : Users information can be transferred from one controller to another on consent

5. Data Protection officers: All controllers will now be governed by data protection officers so that data theft is avoided

- No more lengthy license terms for seeking data consent as it would be replaced with crystal clear accessible form and to be kept unambiguous

- Parents' consent needed for users under the age of 16 (13 is also under consideration)

Reference: https://www.eugdpr.org/ #KPKR