The impact of the GDPR
summary
Regulation replaces the old 1995 directive and applies immediately to any service targeting EU citizens; enforcement starts May 2018 after publication in April 2016. Personal data covers obvious (name, national ID, medical, DNA) and less obvious items like git commit author emails, IPs, RFID badge logs and HR records. Consent must be explicit withdrawable consent, rights include access, update and deletion, and fines target extreme abuse while regulators favor demonstrable effort. Actionable steps: inventory data, vet CRMs/processors, create breach procedures, pseudonymize data and encrypt.
AI-written summary · about
chapters (25)
- 0:00Start
- 0:38Introduction
- 1:09Disclaimer
- 2:16Regulation, not a directive
- 3:10Natural person
- 3:43Personal data
- 4:21Critical stuff
- 4:46Less obvious stuff
- 6:13Other actors
- 7:15Who does the GDPR affect
- 7:57Directive of 1995
- 8:50GDPR timeframe
- 9:30Fines
- 11:16Rules for collection
- 14:32Access
- 15:31Update
- 15:56Deletion
- 19:44The "right to be forgotten"
- 21:40First things first
- 22:34Collect information
- 24:00Tools
- 24:48Breach Policy
- 25:51Measurements
- 28:31Summary
- 29:37Thank you!
related talks
23mdev.privacy: GDPR in a nutshell
56mPractical privacy - GDPR explained
49mPractical privacy: GDPR explained
23mThe GDPR impact in database project
40mHow will the new EU data protection laws affect your work?
50mPrivacy & Smart Regulation
32mGDPR Impact
26mData Protection Update and Tales from the Introduction of the GDPR