The General Data Protection Regulation (GDPR): It's a Small World After All

Publication
June 4, 2018

By now your email Inbox has likely been flooded with emails from websites to which you've provided personal data, advising of updates to privacy policies. There's good news. It's not just you. It's everyone, worldwide. Companies are responding to the European Union's General Data Protection Regulation (GDPR), a comprehensive and, some argue, draconian privacy regulation that went into effect on Friday, May 25, 2018.

The GDPR's complex regulatory scheme affords individuals more control over their personal information. Websites must inform users, in clear and concise language, of precisely the type of data collected, and require users to affirmatively consent to the collection. European citizens may demand that websites delete immediately their personal data. Companies that fail to comply with the GDPR face maximum fines of the higher of 20 million euros (approximately $23 million USD) or 4 percent of the company's annual global revenue.

Because of the internet's global reach, the GDPR likely affects your company. With limited exceptions for companies with fewer than 250 employees, the GDPR applies to every company that collects data from even one citizen of the EU. Thus, in addition to overhauling its privacy policy, any company that collects data on its website from, or does business with, a citizen of the European Union, must be prepared to retrieve, reveal or return that citizen's personal data upon request, or to purge it from its website. Companies that process or store large amounts of personal data for their employees or for individuals outside the company in the European Union must appoint a data protection officer. And, a company must provide notice of any data breach that affects a European user within 72 hours of the discovery of the breach.

Several large US media companies have responded to GDPR by blocking access to online content for European users. Other companies such as Google, Apple and Facebook have enacted measures such as creating separate privacy portals to permit users to request the full extent of their data history with the site.

Now is the time to review your website-users data, to determine if the GDPR affects you. If so, you must act quickly to become compliant.

 

 

Related Practices
RELATED PEOPLE
YOU MIGHT ALSO LIKE
Press Release February 4, 2025
Stanley Price, founding member of Bilzin Sumberg and Chair of the firm’s Land Development & Government Relations Group, has been selected for Daily Business Review’s (DBR) 2025 Lifetime Achievement Award.
Client Alert February 3, 2025
On February 6, 2025, new rules go into effect for implementing Section 692.204, Florida Statutes—the law restricting the purchase of real property by certain persons or entities from China. The rules touch upon various aspects of potential acquisition of real property in Florida by such entiti...
News January 31, 2025
Bilzin Sumberg is pleased to announce Chairman and founding member of Bilzin Sumberg, John Sumberg, and his wife, Jo Sumberg, have been selected as the 2025 recipients of the United Way Tocqueville Award for Outstanding Philanthropy.
VIEW MORE