On May 25, 2018, the EU’s new General Data Protection Regulation (GDPR) will come into force, bringing with it new responsibilities for all companies that have access to personal data within the EU. Today’s data protection rules are based on the 1995 EU Data Protection Directive, and have been open to interpretation and modification since it is a directive, as opposed to a regulation, which functions as legislation. Part of the purpose of this regulation is to give individuals about whom data is collected full control over that information. Before personal data is collected, data subjects (individuals) must give informed consent, having been informed of the following:
- The purpose of the data collection
- Who has access to the information
- How long the information is stored
- That the consent can be withdrawn at any time and the information shall be deleted
The consent must be documented upon request. Information covered by this regulation ranges from names to IP addresses. This can be collected via e.g. contact forms on websites where names/email addresses are provided, cookies, or Google Analytics/Facebook Pixel which collects usage data. If you have a website at Sveum Design, we can assist you in implementing the necessary functionality for the website to comply with the new rules. Feel free to contact us on tel. 922 53 886, post@sveumdesign.no or via this form to have a chat about this.
Contact us here
