{"id":208,"date":"2019-08-17T14:31:29","date_gmt":"2019-08-17T14:31:29","guid":{"rendered":"http:\/\/www.dataprotectionconsultant.it\/EN\/?p=208"},"modified":"2020-05-25T14:22:34","modified_gmt":"2020-05-25T14:22:34","slug":"about-the-gdpr","status":"publish","type":"post","link":"https:\/\/www.dataprotectionconsultant.it\/EN\/about-the-gdpr\/","title":{"rendered":"About the GDPR"},"content":{"rendered":"<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong><a style=\"color: #000000;\" href=\"http:\/\/www.dataprotectionconsultant.it\/approfondimenti\/\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente.jpg\" alt=\"\" width=\"50\" height=\"50\" \/><\/a> <a style=\"color: #000000;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/about-the-gdpr\/\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente.png\" alt=\"\" width=\"50\" height=\"50\" \/><\/a><\/strong><\/span><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: center;\"><span style=\"color: #ff0000; font-size: 18pt;\"><strong>About the GDPR<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong>Proper application of data protection legislation involves knowledge of obligations and requirements to comply with. Interpretation details, clarifications of the supervisory authorities and suggestions are essential, also to assess the extent of the obligations which controllers and <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/processor\/\">processors<\/a><\/span><\/span> shall comply with and what exemptions are applicable.<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong>The aim is to provide insights into the most common topics which can be summarised as follows:<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>1. <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/key-definitions\/\">key definitions<\/a><\/span><\/span><\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>2. principle of <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/accountability-governance\/\">accountability<\/a>:<\/span><\/span> demonstrating compliance with the GDPR<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>3. knowledge of the <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/principles-relating-to-processing\/\">principles relating to processing of personal data<\/a><\/span><\/span> and the <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/lawfulness-of-processing\/\">lawfulness of processing<\/a><\/span><\/span>: what these principles mean and what procedures apply<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>4. knowledge and application of <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/obligations-of-information-to-data-subject\/\">information to be provided to the data subject<\/a><\/span><\/span> and how to deal with the <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/rights-of-data-subjects\/\">rights of data subjects<\/a><\/span><\/span><\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>5. implementation of procedures of <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/data-protection-by-design-by-default\/\">data protection by design and by default<\/a><\/span><\/span> and how to carry out a <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/impact-assessment\/\">risk assessment<\/a><\/span><\/span> which may imply the obligation of an <a style=\"color: #000000;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/impact-assessment\/\"><span style=\"text-decoration: underline;\"><span style=\"color: #0000ff; text-decoration: underline;\">impact assessment<\/span><\/span><\/a> and, where required, of the <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/impact-assessment\/\">prior consultation<\/a><\/span><\/span> of the supervisory authority: these are the essential steps to fulfil the GDPR requirements, assessing whether data processing may be carried out and under what conditions<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>6. <a style=\"color: #000000;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/data-protection-officer\/\"><span style=\"text-decoration: underline;\"><span style=\"color: #0000ff; text-decoration: underline;\">Data Protection Officer<\/span><\/span><\/a>: tasks, professional qualities, responsibility and designation, whether a staff member or an external subject<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>7. <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/processor\/\">processor<\/a>:<\/span><\/span> how to select (professional requirements) and designate it, liability, contract binding on the processor with regard to the controller, written instructions, engagement of sub-processors<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>8. <a style=\"color: #000000;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/persons-authorised-to-data-processing\/\"><span style=\"text-decoration: underline; color: #0000ff;\">processing under the authority of the controller or processor (persons authorised to data processing<\/span>)<\/a>: who they are and how they shall be designated, what rules shall be imposed on them<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>9. <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/records-of-processing-activities\/\">Records of processing activities<\/a><\/span><\/span>: what they are, what they shall contain and how to keep them and who shall keep them<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>10. management of events of <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/data-breach\/\">data breach<\/a><\/span><\/span>: when they occur, when they shall be notified to the supervisory authority and communicated to the data subject and what these notifications and communications shall contain<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>11. adherence to <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/codes-of-conduct-and-certification\/\">codes of conduct<\/a><\/span><\/span> and to <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/codes-of-conduct-and-certification\/\">certification<\/a><\/span><\/span> mechanisms: what they are and why they are important<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>12. how to organise the <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/transfer-of-personal-data-to-third-countries-or-international-organisations\/\">transfer of personal data to third countries or international organisations<\/a><\/span><\/span>: safeguards, contractual clauses, decisions of supervisory authorities and European Union bodies.<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong>Lastly, non-compliance with the GDPR requirements may result in <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/administrative-fines-and-penalties\/\">administrative fines and penalties<\/a><\/span><\/span> and data subjects have the <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/administrative-fines-and-penalties\/\">right to compensation<\/a><\/span><\/span> for the damage which they have suffered.<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong>Legislation is on on-going evolution, also waiting for implementing acts, so it is essential to be updated. Important news can be known directly by browsing this website or signing up to the <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/newsletter\/\">newsletter<\/a>.<\/span><\/span><\/strong><\/span><\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong>To learn more, click on the subject of interest, read <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/faq\/\">FAQs<\/a><\/span><\/span> or <span style=\"text-decoration: underline; color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/contacts\/\">contact me<\/a><\/span>.<\/strong><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; &nbsp; About the GDPR Proper application of data protection legislation involves knowledge of obligations and requirements to comply with. Interpretation details, clarifications of the supervisory authorities and suggestions are essential, also to assess the extent of the obligations which controllers and processors shall comply with and what exemptions are applicable. The aim is to &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.dataprotectionconsultant.it\/EN\/about-the-gdpr\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;About the GDPR&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/208"}],"collection":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/comments?post=208"}],"version-history":[{"count":16,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/208\/revisions"}],"predecessor-version":[{"id":1187,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/208\/revisions\/1187"}],"wp:attachment":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/media?parent=208"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/categories?post=208"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/tags?post=208"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}