The GDPR is easy: (Un)tangling SME compliance hurdles.
summary
GDPR is not easy for SMEs: projects STARII and SMOOTH build tools and handbooks but find widespread confusion, inconsistent DPA guidance and real risks. Surveys and pilots show 125 emails / 113 responses to the Hungarian DPA hotline, only 18% use informed consent, 76% host customer databases in the cloud, 41% lack backups and 35% use basic security. Member-state divergences (Dutch, German rules) and a SMOOTH automated assessment/pilot report aim to map problems and give actionable fixes, but adoption remains low.
AI-written summary · about
chapters (42)
- 0:00Introduction
- 5:32What is the experience of SMEs across Europe
- 8:50Why SMEs are confused about GDPR
- 10:50Why is it so complex
- 11:45Exceptions
- 13:45What can we do
- 16:05Best practice
- 17:20Data protection authorities
- 20:32What is an SME
- 21:15Specific needs of SMEs
- 22:35Overarching obligations
- 23:30ICO guidance
- 24:10Most wanted guidance
- 24:30Email hotline
- 25:50Topics of inquiries
- 26:40Myths
- 28:20Are SMEs subject to GDPR
- 30:15Consent
- 31:45Data erasure
- 32:25Data processing record
- 34:05Certificate of good conduct
- 34:45Legal basis for processing
- 35:15What next
- 36:15Hungarian hotline
- 37:25SMEs
- 40:25Enforcement
- 41:25Study
- 42:35Reasons for not complying
- 43:45Living fines on SMEs
- 44:05Who is compliant
- 45:55Challenges for SMEs
- 47:05Areas of concern
- 49:05Challenges to compliance
- 50:45SMEs should not be intimidated
- 51:15What became effective May 25
- 51:45Challenges faced by SMEs
- 52:15Digital presence
- 52:45Lack of awareness
- 53:45Survey results
- 56:55Privacy considerations
- 57:55Externalizing the infrastructure
- 59:05Changing mentality
related talks
22mPanel Discussion – 17 months of GDPR experience – Should we review?
46mGDPR: A Global View
01h 07mThe GDPR and the broader EU Digital Rulebook
23mdev.privacy: GDPR in a nutshell
01h 01mWill the GDPR succeed in encouraging tech start-ups?
05m3 questions to – Dr Frank Schemmel
43mE-Privacy & GDPR
15mOpening Day 2