So what does a GDPR data protection officer need to know to step into this role and be effective? The job will need some significant experience in both IT and risk management at minimum and also other ancillary skills that are important to success in the role.
Data privacy came into public consciousness in 2018. Yet, even with new regulations to protect personal privacy, it’s clear that there is still a long way to go in 2019 before personal data is truly protected.
Both the GDPR and ePrivacy Regulation alter regulations of how organisations use cookies which falls under the GDPR's definition of personal data. Why should companies care and how do they ensure compliance.
Consumer groups in 7 countries are asking European privacy regulators to take action against Google for GDPR violations, specifically, its “deceptive practices” related to location tracking.
Some ad tech vendors appear to be engaging in a form GDPR consent string fraud by knowingly tampering with the consent information found in a publisher’s consent string, in order to give them the ability to deliver personalized ads.
The GDPR has influenced the future of corporate compliance at a global level. As we see the CCPA, the USCDPA, and bills in other jurisdictions like India and Brazil being passed, it is evident that all companies soon will be required to comply with some consumer data privacy measure.
While the practical interpretation and implementation of the GDPR has been heavily discussed, it is sometimes overlooked that the GDPR itself offers solutions to handle the legal uncertainty: Codes of Conduct and Certifications.
There will be grey areas in GDPR for a while to come and certainly in the early stages there will be test cases and adjustments to the Articles to clarify and ratify their use in real world practice.
Faced with a deluge of complaints regarding violations in terms of general data protection, regulators are expected to levy the first GDPR fines and other sanctions by year end.
Regulatory reporting for GDPR compliance requires effectively operationalising the use of appropriate technical and organisational measures to allow for reporting at the enterprise and project level.










