EU Parliament adopts new data protection regulation

After years of work on reforming the data protection system, the European Parliament has adopted a regulation. What are the changes to data protection?

Data protection has been one of the key topics debated in the European Parliament for several years. Finally, after years of reform efforts, the Regulation on Personal Data Protection (GDPR) was adopted. The consultations on legal changes involved, among others, representatives of the Internet Advertising Bureau Poland IAB Polska, representing the Polish internet industry at the European level.

GDPR adopted by the European Parliament

The Regulation on Personal Data Protection was adopted on April 14 of this year. It will officially come into force most likely in June. Member states of the European Union will then have two years to adapt their legal framework to the new requirements for personal data processing.
The most important changes introduced by GDPR include:
- introduction of a new category of pseudonymized data, of particular importance for various internet marketing activities,
- establishment of new rules for obtaining consent from data subjects, including minors,
- definition of permissible data profiling standards,
- definition of status and responsibilities of the ABI (data protection authority),
- introduction of new rules for data transfers to third countries,
- establishment of a system of high monetary fines as administrative penalties for violations of personal data protection rules.

Key changes introduced by GDPR

As stated by Włodzimierz Schmidt, President of IAB Polska: - "The adopted regulation, which will affect not only organizations processing personal data based within the European Union, but also those providing services in the European market, is the result of long-term consultations at national and European levels. Internet market entities will be required to adapt their products, services, processes, and privacy policies to the new law within 24 months. In this regard, we are already planning educational initiatives to ensure the changes are understood and their implementation proceeds smoothly."

IAB Polska plans workshops

Soon, IAB Polska plans to prepare a series of free workshops addressing how the changes adopted by the Parliament will impact data protection. Topics will include the most important actions that internet market entities must take, as well as challenges facing the industry.

Terms from the article

GDPR. The Polish name for EU's General Data Protection Regulation. A regulation governing the processing of personal data, requiring legal basis, data minimization, adequate security measures, and realization of data subjects' rights.

Most important changes to data protection introduced by GDPR

Why it matters: Establishes legal framework for handling personal data, including legal basis, minimization, security, and individual rights. Applies to all forms, newsletters, contact databases within companies.

When it applies: Used at all stages of personal data collection and processing: recording, obtaining consent, data export, deletion requests, etc.

Consequences of non-compliance: Violating the rules leads to fines based on turnover; data breaches without security measures also result in loss of customer trust.

Summary

The European Parliament adopted the Regulation on Personal Data Protection (GDPR) on April 14. It will most likely enter into force in June, and EU member states will have two years to adapt their legislation. The consultations involved representatives of the Internet Advertising Bureau Poland IAB Polska.

GDPR introduces, among other things, the category of pseudonymized data, new consent rules (including for minors), profiling guidelines, the status of ABI, and high financial penalties. IAB Polska President Włodzimierz Schmidt announces educational initiatives and free workshops for the internet market.