Personal data - the year of GDPR

[rakhirhif8963]

The author will separately note that all "national providers and operators" are a natural target for foreign intelligence services, so they should take a responsible approach to their internal information security. In particular, the United States adopted the Computer Network Exploitation concept a year ago, which implies the constant presence (access) of American "probes" in the critical infrastructure networks of significant potential adversaries - Russia is obviously one of them.

In 2018, the European Global Data Protection Directive (GDPR) came into force, which means that it was this year that Russian subsidiaries of transnational corporations and large Russian businesses became concerned about this issue.

In fact, everything is simple with the GDPR: a European jamaica whatsapp data transfers personal data to a Russian company must be physically located in the EU, otherwise the GDPR is not applicable. However, Russian subsidiaries of global holdings had to comply with the GDPR requirements simply because such are the requirements of global headquarters.

In practice, GDPR is now more of a redesign project or the creation of a new set of processes for working with personal data, while projects for the protection of personal data (implementation of technologies) are still few, they will appear as the number of fines increases.

In 2018, even in the EU, the author noted only dozens of fines, amounting to up to half a million euros. However, already in January 2019, Google was fined 50 million euros by the French personal data regulator.

Bottom line: no regulator has ever really punished a business (with a fine in the form of a percentage of global revenue), but in the case of Google, the French national regulator stipulated that their fine does not exempt Google from liability to other national regulators. This means that another 26 fines may be ahead, which is much more serious.