Selected Issues from the Dark Side of the General Data Protection Regulation

Abstract

The Regulation (EU) 2016/679 on the protection of personal data (GDPR) was enacted in 2016 and applies from 25 th May 2018 in the entire EU. The GDPR is a product of an ambitious reform and represents a direct penetration of the EU law into the legal systems of the EU member states. The EU works on the enhancement of awareness about the GDPR and points out its bright side. However, the GDPR has its dark side as well, which will inevitably have a negative impact. Hence, the goal of this paper is twofold -(i) to scientifically identify, forecast, and analyze selected problematic aspects of the GDPR and its implementation, in particular for Czech municipalities, and (ii) to propose recommendations about how to reduce, or even avoid, their negative impacts. These theoretic analyses are projected to a Czech case study focusing on municipalities, which offers fresh primary data and allows a further refining of the proposed recommendations. An integral part of the performed analyses is also a theoretic forecast of expenses linked to the GDPR, which municipalities will have to include in their mandatory expenses and mid-term prognostic expectations regarding the impact on the budgets of these municipalities from Central Bohemia. The GDPR, like Charon, is at the crossing, the capacity and knowledge regarding its application is critical for operating in the EU in 2018. It is time both to admit that the GDPR has its dark side and to present real and practical recommendations about how to mitigate it.

Post-GDPR survey of data protection officers in research and non-research institutions in Croatia

“…The introduction of GDPR appeared to be challenging for unprepared local municipalities ( 1 , 5 ). The unique and sensitive position of DPO under the GDPR was clearly recognized ( 6 - 8 ).…”

The Role of IS in the Conflicting Interests Regarding GDPR

“…On a more practical level, for example, there is an increasing body of practical guides or implementation guidelines, looking at how organizations will have to move forward to comply and avoid fines or negative publicity (Tankard 2016;Huth 2017;Voigt and Von dem Bussche 2017;Lambrinoudakis 2018). However, there is a lot of criticism remaining (Cvik et al 2018).…”

Reflection of GDPR by the Czech Population

“…As noted e.g. by Cvik et al (2018), data processors were facing multiple issues concerning accurate and smooth implementation of this new regulation. This is only logical, as the regulation covers many new topics, most of those being highly technical (http://www.privacy-regulation.eu/en/index.htm).…”