Personal data legislation has been updated: requirements for consent, storage and liability are becoming stricter. Here is what it means for business and how to prepare.
1. Mandatory consent to processing
Consent must be specific, informed and verifiable. Generic wording such as "I agree to everything" no longer counts as a proper legal basis.
2. Data protection officer
Companies must appoint a person responsible for processing personal data and define their authority in an internal document.
3. Localisation and storage
Rules on storing citizens' data and cross-border transfers are clarified. You must verify where your databases and servers are physically located.
4. Penalties for breaches
Violations and leaks carry penalties up to significant amounts. Liability applies even in the absence of direct intent.
5. How to prepare the company
Update your privacy policy, consent forms and contractor agreements, and take an inventory of all data processing activities.
Aligning processes with the new rules is an ongoing practice, not a one-off task. Our lawyers will help you build a compliant data processing system.
LEGAL DISCLAIMER
All information on the website is for informational purposes only and does not constitute legal advice.
