GDPR

The protection of natural persons in relation to the processing of personal data is among the fundamental human rights. The most important is the respect for private and family life or the preservation of sensitive information about others.

When will it come into effect? A comprehensive set of data protection rules will come into effect on 25.5.2018. Will it affect you? GDPR was approved in 2016. By 25.5.2018, everyone must review and standardize information systems and data handling procedures. The flow of data within the Union is supported, and the regulation ensures high protection against the misuse of sensitive information. 

What will the penalties be?

It mainly depends on the nature and severity of the incident. However, fines can reach up to 4% of the company's total turnover or 20 million euros, whichever is higher.

Who does GDPR affect?

Everyone who collects and processes personal data of Europeans, including companies and institutions outside the EU that operate in our market. The regulation is valid for companies, institutions, individuals – employees, customers, clients, and suppliers across all sectors. It also concerns those who analyze user behavior on websites and applications.

• banking institutions and insurance companies
• healthcare
• public administration
• e-shops
• manufacturing and services 

What does GDPR consist of? 

GDPR will replace the personal data protection act in Slovakia. The goal is to protect the digital rights of all citizens. The main point is the revised method of processing personal data. High fines are threatened for violations. More can be found in the article "What major changes await us"

The most significant obligations:

• appointment of a responsible person
• adjustment of the relevant documentation according to the new legal regulation
• change of consent to the processing of personal data
• liquidation fines for breach of obligations

When it is necessary to appoint a responsible person:
• public authority and public law entity
• entities whose main activities are processing operations that require regular monitoring of individuals
• entities that process information related to criminal convictions