General Data Protection Regulation (GDPR)
We are all aware that every activity we do online is tracked by companies and numerous entities, especially on social media or digital platforms. We have the right to protect our personal information and related rights, and we should have the right to choose what we want to share. That’s why the General Data Protection Regulation (GDPR) was implemented in the European Union on May 25th, 2018.
Data Protection Directive
Earlier there was a law related to data protection and it was replaced by the general data protection regulation the earlier law was called Data Protection Directive 95 / 46 / EC it was designed for numerous things.
- first of all European Union wanted to make a law which was key to people’s protection across Europe
- They also wanted the data privacy law to be there because they need to protect and empower every person who lives in the European Union.
- They furthermore wanted to integrate the organization’s view across all over Europe and a data privacy approach was needed for that time.
What does GDPR mean
Now, the biggest question is: What does GDPR mean for companies? GDPR (General Data Protection Regulation) is a regulation enforceable by law, and it is a very important act when it comes to the European Union. If you want to work with European Union citizens, you have to follow the rules of GDPR. Every person or business that wants to operate inside the European Union must comply with this data privacy protection legislation.
Explicit permission
Companies have to highlight what kind of personal data they are taking away from the customers and what kind of personal data is collected. They also have to take explicit permission from the organization to collect it, and they need to have a proper and valid reason for collecting that data.
Responsible for data privacy.
This legislation also allowed every region across the European Union to have a proper understanding of data and how it is utilized within their country or outside their country. This law also demands that companies focus on data privacy and allocate more resources to protect data privacy. They should be responsible for data privacy.
1. Consent: It takes place when you permit any organization or company to collect your data. It is based on the idea that you are freely giving permission, and you should be aware of what kind of data is being shared with the company. You can withdraw consent at any time. Usually, websites and social media platforms provide options like checkboxes or forms to obtain consent from users.
2. Contractual obligation: It is a category of obligation you have to deliver your data to fulfill the contract obligation. In simple terms, if you are ordering something from an E-Commerce
company, you have to provide them with your address, as the address is going to be a major concern. Without an address, they cannot deliver to you. Here, it’s a contract-based obligation where the customer provides data based on the requirement.
3.Legal obligation: sometimes the government makes rules where it is required to provide data for example Financial Institutions need to give up their data related to their clients and customers to make their report clear and accurate to avoid anti-money laundering loss so it is related to illegal obligation.
4.Vital interests: In such cases, it is really necessary to take a step because it happens in an emergency. Sometimes companies or situations cannot take the necessary precautions, and they have to go with the practical path. To prevent harm, they have to take the steps. Here, the data can be utilized.
5.Public interest/public task: it is for the company or any organization it is based on the notion that certain data need to be given to protect yourself from any concerns for example Public Health surveillance crime prevention or tax collection here the data is given to the government officials and the organizations.
6. Legitimate interest is a very proud concept, and here the focus is on the interest of the company and the customer. For example, in order to avoid fraud, direct marketing may require obtaining your details, such as your email and phone number.
The role of the head marketer
The Head marketers play quite an essential role when it comes to incorporating GDPR because its major impact has been shown majorly in the department of marketing. These head marketers also enable and support communication with the whole Regulation. They reciprocate business to senior management. They are the key to reaching the consumers too.
From collection to deleting
At the core, the marketer’s role is quite substantial. they collect, process, retain, transfer and delete data of customers or any organization or any people. These people are nominated to comply with the GDPR. They are the people who are aware and responsible for all the Regulations and projects and everything else.
Appointment of DPO
Furthermore, it properly emphasizes that every organization should appoint a data protection officer. The data protection officers are those people who are getting off to work closely with the GDPR and its compiles a
These people are responsible for storing large amounts of personal data of employees, individuals, outsiders of the organization, the customer and everything else.
Public and company good
These officers are appointed for the public good. They will function as their core involves a controller and processor of data. all the demands related to data handled by them and deleting all the data and likewise on them that’s why every organization should have a data protection officer.