Personal data protection

GDPR, 12 key points

A new EU regulation on the protection of personal data come into force on 25 May 2018, called the GDPR: General Data Protection Regulation.

• 1    A single regulatory framework
• 2    Extended scope of application
• 3    Data protection by design and by default
• 4    New approach with accountability
• 5    Impact assessments
• 6    A definition of health data
• 7    Extended definition of sensitive data
• 8    More severe penalties
• 9    Increased responsibility of data processors
• 10    Mandatory notice of data breaches
• 11    Enhanced rights and new rights
• 12    Appointment of a Data Protection Officer