The first real test of GDPR

The fine issued to Google by France’s data protection regulator, is the first significant fine to one of the large tech giants, for failing to comply with Europe’s general data protection regulation (GDPR).  

GDPR was designed to increase the protection for all EU citizens, eliminate confusion by harmonizing the many data privacy laws and change businesses approach to personal data by introducing explicit transparency. It came into effect on May 25th 2018 and is the biggest change in data protection laws for 20 years, replacing the Data Protection Directive of 1995. Importantly, its impact is not restricted to EU organisations, but it will have implications for any company in the world that holds data on the continent or on any individual living in the EU – hence the fine issued to Google. 

Considering some of the data related breach’s that individuals have experienced in the past, GDPR is welcomed as great news for individuals, however it may present some complex challenges for companies. Particularly since any organisation found in breach of the new directive could face fines up to €20,000,000 euros, or up to 4% of the company’s profits from the previous year, whichever number is higher.

• This is everything you need to know about GDPR
• Majority of companies still aren’t GDPR-compliant
• Tech giants facing major UK GDPR probe

Enforcement of GDPR

Generally, the EU is notoriously slow at both legislating and at enforcing its rules.  However, since it took effect in May 2018 three enforcement actions were issued that same year.

• October 2018 – a local business in Austria was f