Three big tips to help keep your company GDPR compliant

By Patrick O’Kane

Patrick O’Kane (patrick.okane@fisglobal.com) is a UK Lawyer (Barrister) and Data Protection Officer for a US Fortune 100 company, and the author of the book GDPR Fix it Fast: How to apply GDPR to your company in ten steps.

The General Data Protection Regulation[1] (GDPR) governs the use of personal data. It applies to all companies in the European Union (EU) as well as to all companies outside the EU that offer goods and services to or monitor the behavior of people in the EU. Many US companies fall under the provisions of GDPR.

The hype throughout 2018 around GDPR seemed endless. We heard about the potential fines, the new customer rights, and the seemingly frightening and all-powerful regulators. Data protection and privacy moved up on board agendas. As a legal counsel and data protection officer for a Fortune 100 company, I started to get an inkling of the magnitude of GDPR when I finally got a meeting with our CEO, who wanted to discuss it. Before GDPR, I would have struggled to get a one-on-one meeting with the company’s vending machine repair man. Suddenly, in light of GDPR, I was in demand, along with many other privacy professionals. And GDPR-anxious executives started to do what they often do when they are worried about a problem—they threw money at it.

The lawyers, the consultants, the GDPR “experts” proliferated. Then the hype seemed to disappear. We retreated to our jobs, our compliance departments, and our lives. Regulatory enforcement seemed lax, and people started to wonder if the regulation was overhyped.

Then came the regulator fines. They started as a whisper. Smaller corporations received fines in the tens of thousands, and they received little press in the compliance world. Then, as 2019 dawned, the big GDPR fines started to drop.

This document is only available to members. Please log in or become a member.
Become a Member Login
 


Would you like to read this entire article?

If you already subscribe to this publication, just log in. If not, let us send you an email with a link that will allow you to read the entire article for free. Just complete the following form.

* required field

First name field cannot be blank!
Last name field cannot be blank!
We will send you an email that will give you access to this entire article.
Email field cannot be blank!
Enter a valid email!
Company field cannot be blank!
Enter a valid company!
Title field cannot be blank!

We're committed to your privacy. The Society of Corporate Compliance and Ethics (SCCE) & Health Care Compliance Association (HCCA) uses the information you provide us to contact you about our relevant content, products, and services. For more information, check out our Privacy Policy.


About SCCE

The Society of Corporate Compliance and Ethics (SCCE) is a non-profit, member-based professional association. SCCE supports our members' work with education, news, and discussion forums. We are a community of leaders, defining and shaping the corporate compliance environment across a wide range of industries and geographic regions. In developing and maintaining effective ethics and compliance programs, our members strengthen and protect their companies.

952.933.4977

About HCCA

The Health Care Compliance Association (HCCA), is a 501(c)6 non-profit, member-based professional association. HCCA was established in 1996 and is headquartered in Minneapolis, MN. We provide training, certification, and other resources to over 10,000 members. Our members include compliance officers and staff from a wide range of organizations, including hospitals, research facilities, clinics and technology service providers.

952.988.0141

Facebook X LinkedIn
Copyright © 2024 by Society of Corporate Compliance and Ethics (SCCE) & Health Care Compliance Association (HCCA). No claim to original US Government works. All rights reserved. All information provided through this site, including without limitation all information such as the “look and feel” of the site, data files, graphics, text, photographs, drawings, logos, images, sounds, music, video or audio files on this site, is owned and/or licensed by SCCE & HCCA or its suppliers and is subject to United States and international copyright, trademark and other intellectual property laws. Any third party logos and/or content provided herein is owned by such third parties and is used by permission herein. Your use of this site to is subject to our Terms Of Use and Privacy Statement.
Cookie settings