put May 2018 in your diary - that's when the General Data Protection Regulation's go live.
What's that? bottom line... by law, gives every EU Citizen a set to rights over the personal data. For example, the right to view, change, demand deletion of all or any part of their data held by any company. It also requires companies to apply 'appropriate' data protection practices to secure their clients/employees data. This applies to the UK as well, even after Brexit.
Consequence - fines up to €20m or 4% of global pre-tax revenues and, possible custodial sentences for company officers. (UK just announced fines of £17m).
Doesn't matter if you're a one-(wo)man-band or a multi-national, the Wights (GoT) will get you because, when we citizens demand to see the data held about us and are refused or, the companies can't deliver then, there's a flag raised and that company will be required to offer proofs of compliance.
First a statement of my interest: I'm part of a start-up (ILDSecurity) who's developed and are close to launching a platform called eSpyder, to assist companies & citizens to take control of their personal data and realize the vision of the creators of GDPR.
Your turn... what do you think about GDPR? Ever heard about it? Can it work? It could put good companies out of business... is that a good thing?
thx
Steve