{"id":815,"date":"2018-10-09T18:15:50","date_gmt":"2018-10-09T15:15:50","guid":{"rendered":"http:\/\/edirect2018.edirectdev.co.uk\/?page_id=815"},"modified":"2023-12-11T14:24:44","modified_gmt":"2023-12-11T11:24:44","slug":"gdpr","status":"publish","type":"page","link":"https:\/\/edirect.sa\/ar\/gdpr\/","title":{"rendered":"\u0627\u0644\u0644\u0627\u0626\u062d\u0629 \u0627\u0644\u0639\u0627\u0645\u0629 \u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a"},"content":{"rendered":"
\n\t
\n\t\t
\n\t\t\t

About<\/h3>\n\n\t\t<\/div> \n\t<\/div> \n\t
\n\t\t
\n\t\t\t

general data
\nprotection regulation<\/h1>\n\n\t\t<\/div> \n\t<\/div> <\/div><\/div><\/div>
\n\t
\n\t\t
\n\t\t\t

On the 27th April 2016, The General Data Protection Regulation, or GDPR, was officially adopted. Following a two year transition period, the GDPR will go into effect on 25th May 2018. This will also signal the end of the current Data Protection Act of 1998 as well as the EU E-Privacy Directive. If you\u2019re unsure of what the GDPR is or how it will affect you, then edirect are here to help.<\/p>\n\n\t\t<\/div> \n\t<\/div> <\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>

\n\t
\n\t\t
\n\t\t\t

Let us break it down for you<\/h2>\n\n\t\t<\/div> \n\t<\/div> \t
\n\t\t\t<\/span>\n\t\t<\/span><\/div>\n\n
\n\t

\n\n\t \n What is the general data protection regulation? <\/span>\n<\/span>\n\n \n <\/span>\n <\/span>\n <\/span>\n<\/span>\n<\/h4>\n
\n
\n \n\t
\n\t\t
\n\t\t\t

The world that we live in today is far different to the one that existed when data protection was first implemented around 20 years ago. We are living in a technological age thanks to the introduction of smartphones, tablets, laptops and personal computers. As a result, there has been an exponential increase in the amount of digital information being created, captured and stored.<\/p>\n

This increase means that the current data protection laws are simply inadequate and provide too many areas in which data can be misused. With The General Data Protection Regulation, data protection laws are being completely overhauled to bring them into line with the new technologically advanced world that we live in.<\/p>\n

The GDPR is, in a nutshell, a new set of laws created to better govern how businesses handle sensitive personal data. It regulates how companies communicate as well as how they store and utilise customer information and will encompass any business that is associated with a European member state.<\/p>\n\n\t\t<\/div> \n\t<\/div> <\/div>\n<\/div>

\n\n\t \n Why was such a regulation implemented? <\/span>\n<\/span>\n\n \n <\/span>\n <\/span>\n <\/span>\n<\/span>\n<\/h4>\n
\n
\n \n\t
\n\t\t
\n\t\t\t

Unlike its predecessors, the GDPR is a regulation and NOT a directive.<\/p>\n

With a directive, goals are outlined and how the directive is interpreted differs from one country to the next. This creates a bit of a mess with multiple e-mail laws that make enforcing the directive a little tricky.<\/p>\n

With a regulation, it is a binding legal agreement that carries serious penalties for failure to comply. There is one set of rules that ALL countries must abide by \u2013 no exceptions!<\/p>\n\n\t\t<\/div> \n\t<\/div> <\/div>\n<\/div>

\n\n\t \n What about brexit? <\/span>\n<\/span>\n\n \n <\/span>\n <\/span>\n <\/span>\n<\/span>\n<\/h4>\n
\n
\n \n\t
\n\t\t
\n\t\t\t

Simply put; Brexit will have zero impact on the GDPR and its implementation. This means, that even after we have left Europe, businesses with European contacts or subscribers will still be required to follow the rules set out in the regulation or face the consequences. Here in the UK, the GDPR will be enforced by \u2018The Information Commissioner\u2019s Office\u2019.<\/p>\n

The UK will be implementing a new \u2018Data Protection Bill\u2019 which, aside from a few minor alterations, includes all provisions for the GDPR. In effect, the rules for us will be no different than for a business based in France, Germany, Spain or any of the other EU member states.<\/p>\n\n\t\t<\/div> \n\t<\/div> <\/div>\n<\/div>

\n\n\t \n The data protection bill <\/span>\n<\/span>\n\n \n <\/span>\n <\/span>\n <\/span>\n<\/span>\n<\/h4>\n
\n
\n \n\t
\n\t\t
\n\t\t\t

As mentioned above, virtually all GDPR provisions will be implemented into the upcoming Data Protection Bill. There are some minor changes such as adding a layer of protection for certain individuals including researchers, agencies involved in anti-doping and journalists. As of writing, the bill is still yet to pass and has already been subject to some amendments.<\/p>\n

Once the new bill is passed, the existing data protection laws will be repealed, and the new bill will come into full effect.<\/p>\n\n\t\t<\/div> \n\t<\/div> <\/div>\n<\/div>

\n\n\t \n What is covered under the gdpr & how will my business be affected? <\/span>\n<\/span>\n\n \n <\/span>\n <\/span>\n <\/span>\n<\/span>\n<\/h4>\n
\n
\n \n\t
\n\t\t
\n\t\t\t

You will be affected by the GDPR regardless of whether you\u2019re responsible for controlling or processing the flow of personal data. The regulation covers any and all data, both personal and sensitive that can be used to identify an individual. Such information can include, but is not limited to:<\/p>\n

    \n
  • Name<\/li>\n
  • Social Media ID<\/li>\n
  • Address (both residential and IP)<\/li>\n
  • Telephone Number<\/li>\n
  • E-Mail Address and more<\/li>\n<\/ul>\n

    Put simply; anything about a person that you acquire is covered by the regulation. Such information, as mentioned above, can be broken down into two categories \u2013 personal and sensitive. While the above largely relates to personal information, sensitive information can include, but is not limited to:<\/p>\n

      \n
    • Genetic Data<\/li>\n
    • Religious Views<\/li>\n
    • Political Views<\/li>\n
    • Sexual Orientation<\/li>\n
    • Medical History and more<\/li>\n<\/ul>\n

      While the definitions of the regulation are, for the most part, the same as the current data protection laws, the GDPR does differ in one area. Pseudonymised data can be covered by the regulation, but this is only provided that the individual in question can be identified by the pseudonym.<\/p>\n\n\t\t<\/div> \n\t<\/div> <\/div>\n<\/div>

      \n\n\t \n How will the gdpr change the current situation? <\/span>\n<\/span>\n\n \n <\/span>\n <\/span>\n <\/span>\n<\/span>\n<\/h4>\n
      \n
      \n \n\t
      \n\t\t
      \n\t\t\t

      With the GDPR, there will now be a greater emphasis on transparency between businesses and their customers. Do you want to know what sort of information a company holds about you? Well, with this regulation in place the process becomes a whole lot simpler.<\/p>\n

      Furthermore, the responsibility of companies who hold and process personal information is far more cut and dry. Newly defined rules clearly outline the requirements of businesses to obtain the necessary consent \u2013 as well as be able to prove that consent has been given. A new fines regime ensures that any companies that fail to follow the GDPR to the letter will face serious consequences.<\/p>\n

      In essence, the GDPR ensures that the individual is protected at all times. Companies are required to operate with complete honesty, and the individual will be afforded new rights including:<\/p>\n

        \n
      • The right to have all of their data deleted<\/li>\n
      • The right to opt out of having certain data used<\/li>\n
      • The right to have incomplete data completed<\/li>\n
      • The right to know what data is being processed and how this is being done<\/li>\n
      • The right to move data from one organisation to another without issue<\/li>\n<\/ul>\n

        Personal data can relate to anything which can be used in the identification of an individual \u2013 so even a social media ID must be protected. Information must be obtained and processed only with the permission of the individual in question \u2013 this basically relates to everything that you do and should be written into your terms and conditions.<\/p>\n

        One thing to note is that there are two types of consent that you must consider. The type required depends on whether you are requesting and processing personal or sensitive data.<\/p>\n

        Unambiguous consent must be obtained for all personal data. For sensitive data, explicit consent must be obtained. It is important to understand this distinction, so you don\u2019t end up in violation of the regulation.<\/p>\n\n\t\t<\/div> \n\t<\/div> <\/div>\n<\/div>

        \n\n\t \n How are businesses accountable? What must they do to remain compliant? <\/span>\n<\/span>\n\n \n <\/span>\n <\/span>\n <\/span>\n<\/span>\n<\/h4>\n
        \n
        \n \n\t
        \n\t\t
        \n\t\t\t

        From data protection policies and impact assessments to documents pertaining to how data is processed, companies are now more accountable for how personal information is handled. If you\u2019ve been watching the news over the last year, you will likely be well aware of several major data breaches that have occurred.<\/p>\n

        Under the new regulation, such breaches, or basically any situation that involves the destruction, loss, alteration, unauthorised disclosure of, or access to personal data must be reported. In the UK, you must report this to the International Commissioner\u2019s Office 72 hours after the breach occurs. Such breaches that must be reported include any that might have a detrimental impact on an individual such as financial loss or breach of confidentiality.<\/p>\n

        Documentation on why information is being collected and processed complete with descriptions of the information must be kept by companies with more than 250 employees. The description should be accompanied by information on how long the data has been held for as well as what security measures have been implemented to protect it.<\/p>\n

        For larger companies that practise regular and systematic monitoring, a Data Protection Officer must be employed or assigned. The DPO will serve as a point of contact for employees, monitor compliance with the GDPR and report to senior members of staff.<\/p>\n\n\t\t<\/div> \n\t<\/div> <\/div>\n<\/div>

        \n\n\t \n Individual access to personal data <\/span>\n<\/span>\n\n \n <\/span>\n <\/span>\n <\/span>\n<\/span>\n<\/h4>\n
        \n
        \n \n\t
        \n\t\t
        \n\t\t\t

        In the past, if you requested access to personal data being held about you by a company or organisation, you had to submit a Subject Access Request or SAR. This typically involved a \u00a310 fee which under the GDPR is being scrapped. Upon a request for information being made, a company or organisation has one month to provide the requested data \u2013 free of charge!<\/p>\n

        In cases where consent is withdrawn, information was unlawfully collected and processed, or the information is no longer relevant, an individual can request that their data be deleted. The individual also has a right to an explanation of a decision made about them rather than being subject to automated processing of data.<\/p>\n\n\t\t<\/div> \n\t<\/div> <\/div>\n<\/div>

        \n\n\t \n How can edirect help? <\/span>\n<\/span>\n\n \n <\/span>\n <\/span>\n <\/span>\n<\/span>\n<\/h4>\n
        \n
        \n \n\t
        \n\t\t
        \n\t\t\t

        With so much to consider and so many factors that may or may not affect your business, it can be difficult to know what to do for the best. Here at edirect, we have an in-house specialist who is fully qualified to help prepare your business for the GDPR.<\/p>\n

        From making determinations on what data is being held and updating procedures to putting in place a plan for what will happen in the event of a breach, we are here to help.<\/p>\n

        For businesses that are already complying with the current Data Protection Act, you will likely be already meeting most of the GDPR principles. Edirect will ensure that you\u2019re meeting ALL the principles, and are entirely compliant with the regulation.<\/p>\n

        If you\u2019re concerned about how the new GDPR will affect your business, make sure you give edirect a call today. You will speak directly with our in-house GDPR expert, Ollie Lawson, who is fully qualified to provide you with advice tailored to the needs of your business.<\/p>\n

        Ollie has undertaken the necessary GDPR \u2013 Practitioner (Project Leads\/ DPO) training and is now a fully certified Data Protection Officer. His duties include assuming responsibility for data protection within the organisation, and ensuring that edirect is fully compliant with the GDPR. Through his knowledge and expertise, Ollie is well-placed to advise you on how to bring your company up-to-date with the principles outlined in The General Data Protection Regulation.<\/p>\n\n\t\t<\/div> \n\t<\/div> <\/div>\n<\/div>

        \n\n\t \n What comes next? <\/span>\n<\/span>\n\n \n <\/span>\n <\/span>\n <\/span>\n<\/span>\n<\/h4>\n
        \n
        \n \n\t
        \n\t\t
        \n\t\t\t

        SSL Certificate<\/strong><\/p>\n

        We can start by adding an SSL Certificate to your website which will encrypt all communication, including URLs. This will not only protect your browser history but also prevent tampering by third parties ensuring that any personal data is protected. An added bonus of an SSL Certificate is that it is also considered a ranking factor by Google!<\/p>\n

        Privacy Policy<\/strong><\/p>\n

        The next step is to add a Privacy Policy to your website. We can provide you with a generic policy that will ensure that you are legally covered. If a specific one is required, we will suggest this and make the necessary changes on your behalf.<\/p>\n

        Check Boxes<\/strong><\/p>\n

        As mentioned above, you must obtain permission for everything you do, and this information can all be written into your terms and conditions. Of course, you also have to prove that the individual has given their consent and this is where checkboxes come in. We can add checkboxes to your contact form that the individual must check to agree to the terms and conditions.<\/p>\n

        In doing so, they have provided you with their unambiguous consent (please note, that pre-checked boxes are in violation of the GDPR). These check boxes will read as follows:<\/p>\n

        \u201cI have read and accept the Privacy Policy and consent to [COMPANY NAME] contacting me about my enquiry.\u201d
        \n\u201cI consent to [COMPANY NAME] contacting me with future updates.\u201d<\/p>\n\n\t\t<\/div> \n\t<\/div> <\/div>\n<\/div><\/div><\/div><\/div><\/div>

        \n\t
        \n\t\t
        \n\t\t\t

        Frequently asked questions<\/h2>\n\n\t\t<\/div> \n\t<\/div> \t
        \n\t\t\t<\/span>\n\t\t<\/span><\/div>\n\n\n\t
        \n\t\t
        \n\t\t\t

        Here are some of the more commonly asked questions that people are asking in regards to the GDPR:<\/p>\n

        What is a breach of data protection?<\/strong><\/p>\n

        A breach refers to any situation in which personal data is destroyed, lost, altered, disclosed or accessed without positive consent being given. Data breaches related to both personal and sensitive information must be reported to the ICO.<\/p>\n

        What is personal data under the GDPR?<\/strong><\/p>\n

        As stated above, personal data under the GDPR is anything that can be used to identify an individual and can include their name, address, telephone number and social media ID.<\/p>\n

        What are the fines?<\/strong><\/p>\n

        Basically, any violation of the GDPR will result in heavy fines. For instance, if a DPO isn\u2019t employed or assigned when required or if data isn\u2019t collected or processed correctly. The purpose is to work with companies who are in violation to improve the situation, so business-crippling fines will never be levied.<\/p>\n

        The amount a business will be fined will largely depend on the severity of the violation. Below is an outline of the sort of amounts that a company could be fined for:<\/p>\n

          \n
        • Smaller offences<\/strong> \u2013 fine of up to \u20ac10 million or 2% of a firm\u2019s global turnover (whichever is greater).<\/li>\n
        • More serious offences<\/strong> \u2013 fine of up to \u20ac20 million or 4% of a firm\u2019s global turnover (whichever is greater).<\/li>\n<\/ul>\n

          What is the difference between a \u2018controller\u2019 and a \u2018processor\u2019?<\/strong><\/p>\n

          The simplest definition of each is as follows:<\/p>\n

            \n
          • Controller<\/strong> \u2013 an entity that is directly responsible for determining how personal data is used and for what purpose.<\/li>\n
          • Processor<\/strong> \u2013 person or group responsible for processing any information collected by the controller.<\/li>\n<\/ul>\n

            Obtaining, recording, adapting or holding personal data is, by definition, counted as processing.<\/p>\n\n\t\t<\/div> \n\t<\/div> \t

            \n\t\t\t<\/span>\n\t\t<\/span><\/div>\n\n\n\t
            \n\t\t
            \n\t\t\t

            To summarise<\/h2>\n\n\t\t<\/div> \n\t<\/div> \t
            \n\t\t\t<\/span>\n\t\t<\/span><\/div>\n\n\n\t
            \n\t\t
            \n\t\t\t

            While The General Data Protection Regulation might seem daunting, the long-term implications will be of great benefit to both businesses and individuals. It\u2019ll help you to increase your engagement by demonstrating how seriously you take both privacy and security. This will help to build trust with your customers and make them feel more comfortable about entrusting their information to you.<\/p>\n

            To find out how edirect can help, simply e-mail us or give us a call.<\/p>\n\n\t\t<\/div> \n\t<\/div> <\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"\u062d\u0648\u0644 \u0627\u0644\u0644\u0627\u0626\u062d\u0629 \u0627\u0644\u0639\u0627\u0645\u0629 \u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0641\u064a 27 \u0623\u0628\u0631\u064a\u0644 2016\u060c \u062a\u0645 \u0627\u0639\u062a\u0645\u0627\u062f \u0627\u0644\u0644\u0627\u0626\u062d\u0629 \u0627\u0644\u0639\u0627\u0645\u0629 \u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0631\u0633\u0645\u064a\u064b\u0627. \u0628\u0639\u062f \u0641\u062a\u0631\u0629 \u0627\u0646\u062a\u0642\u0627\u0644\u064a\u0629 \u0645\u062f\u062a\u0647\u0627 \u0639\u0627\u0645\u0627\u0646\u060c \u0633\u062a\u062f\u062e\u0644 \u0627\u0644\u0644\u0627\u0626\u062d\u0629 \u0627\u0644\u0639\u0627\u0645\u0629 \u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u062d\u064a\u0632 \u0627\u0644\u062a\u0646\u0641\u064a\u0630 \u0641\u064a 25 \u0645\u0627\u064a\u0648 2018. \u0648\u0647\u0630\u0627 \u0633\u064a\u0634\u064a\u0631 \u0623\u064a\u0636\u064b\u0627 \u0625\u0644\u0649 \u0646\u0647\u0627\u064a\u0629 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u062d\u0627\u0644\u064a...","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"full_width.php","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-815","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/edirect.sa\/ar\/wp-json\/wp\/v2\/pages\/815","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/edirect.sa\/ar\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/edirect.sa\/ar\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/edirect.sa\/ar\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/edirect.sa\/ar\/wp-json\/wp\/v2\/comments?post=815"}],"version-history":[{"count":1,"href":"https:\/\/edirect.sa\/ar\/wp-json\/wp\/v2\/pages\/815\/revisions"}],"predecessor-version":[{"id":5794,"href":"https:\/\/edirect.sa\/ar\/wp-json\/wp\/v2\/pages\/815\/revisions\/5794"}],"wp:attachment":[{"href":"https:\/\/edirect.sa\/ar\/wp-json\/wp\/v2\/media?parent=815"}],"curies":[{"name":"\u0648\u0648\u0631\u062f\u0628\u0631\u064a\u0633","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}