dataforordninger

Dataforordningen, also known as the General Data Protection Regulation (GDPR), is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). It also addresses the export of personal data outside the EU and EEA areas. The GDPR aims to give individuals control over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.

The regulation was adopted on April 14, 2016, and became enforceable on May 25, 2018. It applies to the processing of personal data of individuals in the EU, regardless of whether the processing takes place within the EU or not. The GDPR is designed to protect the fundamental rights and freedoms of natural persons, and in particular their right to the protection of personal data.

Key principles of the GDPR include lawfulness, fairness, and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; and accountability. Organizations must demonstrate compliance with these principles through appropriate technical and organizational measures.

The GDPR introduces several new rights for individuals, including the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, and the right to object. It also imposes obligations on data controllers and processors, including the need to appoint a Data Protection Officer (DPO) in certain cases, conduct data protection impact assessments, and implement data protection by design and by default.

The GDPR has significant implications for businesses operating within the EU, as well as those that process the personal data of EU individuals. Non-compliance with the GDPR can result in substantial fines, up to 4% of the total worldwide annual turnover of the preceding financial year or 20 million euros, whichever is higher. The regulation has also influenced data protection laws in other jurisdictions around the world.