Governments will not have the data... they will "only" know what kind of data process are you doing and that you are protecting the data well enough with a Business Impact and keeping all your customers informed of what are you doing. This should prevent companies selling the personal data without your knowledge.
If needed, I can explain further.
You are viewing a single comment's thread from:
Yes as I said it all starts benign and of course helpful... like our income tax, tempoaray and benign. Unless we read the full charter, one can never know what is planned or set it motion.
Since you brought this to my attention, I defer to your explanation.
OK... I'm not doing a post... I'll try to keep it here.
First, This EU regulation will set a framework. This regulation sets what companies can and can't do with personal data. First, everybody was able to do what they want... people is tired of receiving spam.
Government does not have any copy of any data, so, if they are hacked, no other data is stolen, than the one they already have.
What is another objective of this regulation? Also, make companies responsible of the data they are managing, they should have a DPO (Data Protection Officer) that should be the contact with the European regulator to be contacted in case of any data leakage or security breach, just to be sure that the company has been protecting the information properly, but have been in an unexpected problem and the company will try to solve the situation.
The companies must abide to that regulation that they must "actively" show they protect the personal data they keep. The companies must know what they are doing with the personal data, must keep only the data they need for the "agreement", cannot have data not needed (for mailing, why shall you need the social security number?) and companies must have the permission of the person, to use their data for anything apart of the agreement.
So, the user must be informed of what is going to be done with his own data and must be able to ask.
Companies shall not share they data, companies shall keep them safe and be able to demonstrate they are protecting it and not using in a way the user does not allow.
You should do a post, as well.
First one... GDPR history
https://steemit.com/gdpr/@xavi-kyusho/gdpr-history
Second (Content): https://steemit.com/gdpr/@xavi-kyusho/gdpr-content
Third (FAQ): https://steemit.com/gspr/@xavi-kyusho/gdpr-faq
Need more? ;)