CBI welcomes GDPR
- 著者:Ella Cai
- 公開：:2017-08-08
The CBI has welcomed the announcement of the Government’s Data Protection Bill which includes bringing the European Union’s General Data Protection Regulation (GDPR) into domestic law.
Compared to the current Data Protection Act the the GDPR increases the scope of data protection and provides much tougher punishments for those who fail to comply with new rules around the storage and handling of personal data.
“In the modern economy, data has huge value and its innovative use leads to better services and more productive businesses,” says Tom Thackray, CBI Innovation Director, “but firms know that this ability to innovate is dependent on customers having confidence that their information is well protected. This legislation strikes the right balance in improving standards of protection while still enabling businesses to explore new products and services.”
The GDPR will be enforced from 25 May 2018. The Regulation extends the data rights of individuals, and requires organisations to develop clear policies and procedures to protect personal data, and adopt appropriate technical and organisational measures.
“The new Data Protection Bill will give us one of the most robust, yet dynamic, set of data laws in the world,” says Digital Minister Matt Hancock, “itwill give people more control over their data, require more consent for its use, and prepare Britain for Brexit.”
The Bill will:
•Make it simpler for people to withdraw consent for their personal data to be used
•Let people ask for data to be deleted
•Require firms to obtain “explicit” consent when they process sensitive personal data
•Expand personal data to include IP addresses, DNA and small text files known as cookies
•Let people get hold of the information organisations hold on them much more freely
Penalties for infringement can be up to 4% of turnover or €20 million whichever is the greater. At the monent the biggest penalty is £500,000.
Compared to the current Data Protection Act the the GDPR increases the scope of data protection and provides much tougher punishments for those who fail to comply with new rules around the storage and handling of personal data.
“In the modern economy, data has huge value and its innovative use leads to better services and more productive businesses,” says Tom Thackray, CBI Innovation Director, “but firms know that this ability to innovate is dependent on customers having confidence that their information is well protected. This legislation strikes the right balance in improving standards of protection while still enabling businesses to explore new products and services.”
The GDPR will be enforced from 25 May 2018. The Regulation extends the data rights of individuals, and requires organisations to develop clear policies and procedures to protect personal data, and adopt appropriate technical and organisational measures.
“The new Data Protection Bill will give us one of the most robust, yet dynamic, set of data laws in the world,” says Digital Minister Matt Hancock, “itwill give people more control over their data, require more consent for its use, and prepare Britain for Brexit.”
The Bill will:
•Make it simpler for people to withdraw consent for their personal data to be used
•Let people ask for data to be deleted
•Require firms to obtain “explicit” consent when they process sensitive personal data
•Expand personal data to include IP addresses, DNA and small text files known as cookies
•Let people get hold of the information organisations hold on them much more freely
Penalties for infringement can be up to 4% of turnover or €20 million whichever is the greater. At the monent the biggest penalty is £500,000.
