Everything we need to know about the EU GDPR

The new European Union rules, known as the “General Data Protection Regulation” or GDPR, are designed to revolutionize the way technology companies collect European users’ data.

This law covers only European users, but it is not unlikely that its scope will be expanded in the future. You have probably received emails from Google, Yahoo and other prominent sites related to GDPR in recent days, if you are curious about the concept and content of this law, stay with us.

What is GDPR?

“General Data Protection Regulation” includes a set of binding rules set by the European Union in order to control the methods of management and sharing of users’ personal data by companies.

GDPR is theoretically developed only for European users, but thanks to the global nature of the Internet, the vast majority of services will be affected by it.

Articles of GDPR

These laws are based on the previous regulations, but they put new obstacles in the way of companies, for example, companies do not have the right to collect information from the user without obtaining explicit and informed consent. In addition, all users have the right to inquire about the collected data and the uses of this data from the companies.

Although GDPR helps to protect users’ personal information, on the other hand, the changes that come first are the increase of warning messages that the user must confirm to access the site. Other changes brought by GDPR include Data sharing rules after collection mentioned. The data that a simple site collects is sometimes sold to twenty different companies about which the user did not know much before, but now new requirements require sites to provide clear information about the recipients of the data and their purposes. does.

Another clause of the GDPR is the right to data erasure, which allows the user to verbally or in writing request the deletion of his data from the site’s database. In addition, if the user’s data is exposed for any reason, the relevant organization must notify them within 72 hours.

Organizations with more than 250 personnel must also appoint a person as a data protection officer. In addition, employees who have frequent or permanent access to personal data must have received appropriate training to protect this information.

Punishment of violators

GDPR clearly states that any company or organization that violates certain provisions regarding user data will be fined $20 million or 4% of annual gross revenue (whichever is greater), which can result in some companies destroyed the smaller ones.

The punishments considered for the violators are so heavy that giants like Google quickly update internal rules, rewrite contracts and develop new data tools on their agenda, and some other organizations that don’t have enough time to comply with this have not had rules, suspended their sites in Europe.